Privacy Policy

At Brandex Group SL, we take the protection of your personal data seriously. This policy explains what data we process, for what purpose and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

For any matter relating to your data, you can write to us at info@brandex-group.com.

2. Data we process

• Contact data you provide when contacting us via WhatsApp, email, or phone: name, company, phone number, email address, and the content of your message.
• Browsing data generated automatically for technical and security reasons: IP address, date and time of access and technical browser data, recorded in the server’s activity logs.

We do not request or process special categories of data through the website.

3. Purposes and legal basis

• Handling your enquiry and maintaining the commercial communication you initiate – legal basis: your consent and/or pre-contractual measures at your request (art. 6.1.a and 6.1.b GDPR).
• Guaranteeing the security and correct functioning of the website – legal basis: our legitimate interest (art. 6.1.f GDPR).
• Complying with applicable legal obligations – legal basis: art. 6.1.c GDPR.

4. Data retention

We keep your data for as long as necessary to handle your request and manage the commercial relationship, and thereafter for the legally required periods. Technical server logs are kept for a limited period for security reasons.

5. Recipients and processors

We do not share your data with third parties except where legally required. To provide the service, we rely on providers acting as data processors with appropriate safeguards, including:

• Cloudflare, Inc. – hosting and delivery of the website (CDN) and security.
• WhatsApp / Meta Platforms, Inc. – when you choose to contact us via WhatsApp.
• Email service providers, to manage the communications you send us.

6. International transfers

Some of these providers may process data outside the European Economic Area (for example, in the United States). In such cases, transfers are covered by appropriate safeguards under the GDPR, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

7. Your rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw any consent given, by writing to us at info@brandex-group.com, indicating the right you wish to exercise.

If you believe we have not properly addressed your rights, you may lodge a complaint with the competent supervisory authority, the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) (www.aepd.es).

8. Cookies

This website uses only technical or strictly necessary cookies for its correct functioning and security (for example, those used by our infrastructure provider, Cloudflare). These cookies are exempt from the prior consent requirement.

We do not use analytics, advertising or tracking cookies. For that reason, the site does not display a cookie consent banner. You can configure your browser to block or delete cookies at any time.

9. Web analytics

The site currently does not use analytics or audience-measurement tools (such as Google Analytics or similar). Should any such tool be introduced in the future, we would update this policy and request your prior consent before activating any non-essential cookie.

10. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.

11. Changes to this policy

We may update this policy to reflect legal revisions or alterations to the website. The version in force will always be the one published on this page, with its update date.