In short
- We only collect what you send us through the contact form or by email, plus basic technical data needed to serve the site securely.
- We use it to answer you and, if you ask, prepare a quote. Never for ads, profiling or selling.
- No analytics or advertising trackers run on this site.
- You can access, correct or delete your data at any time by writing to [email protected].
01Who is responsible for your data
The data controller is:
- Company
- WHITE JACKET GLOBAL, S.L.
- Tax ID (NIF)
- B13804000
- Address
- Av. Ernest Lluch 32, TCM2, Planta 1, Oficina 3 (TecnoCampus), 08302 Mataró, Barcelona, Spain
- Privacy contact
- [email protected]
02What we use your data for
For each activity, this is the data involved, why we use it and the legal basis that allows us to (GDPR art. 6):
| Activity | Data | Legal basis | How long we keep it |
|---|---|---|---|
| Answering contact and quote requests | Name, email, venue type, your message and, optionally, venue size and number of points of interest | Steps you ask for before a contract (art. 6.1.b) and our legitimate interest in answering business enquiries (art. 6.1.f) | While we handle your request, and up to 12 months afterwards if no business relationship follows |
| Managing an existing business relationship | Contact details of the people we deal with at customers, partners and suppliers | Performing the contract (art. 6.1.b) and legitimate interest in keeping in touch with the organisation’s representatives (art. 6.1.f; LOPDGDD art. 19) | For the duration of the relationship, then as long as legal obligations require (e.g. 6 years for accounting records under the Commercial Code) |
| Serving the website securely | IP address, browser and device information, pages requested and time of the request | Our legitimate interest in keeping the site available and protected against abuse (art. 6.1.f) | Short-lived server and network logs, normally deleted within 30 days unless needed to investigate an incident |
| Embedded YouTube videos | Data YouTube collects when a video plays (see Cookie policy) | Your consent (art. 6.1.a; LSSI-CE art. 22.2), which you can withdraw at any time | Set by Google; we receive none of it |
| Commercial communications | Name and email | Only with your prior consent, or about similar services if you are already a customer (LSSI-CE art. 21) | Until you unsubscribe or object |
Fields marked as required in the form are needed to answer you; without them we can’t process the request. Optional fields only help us prepare a more accurate quote. We don’t make decisions based solely on automated processing, and we don’t build profiles.
Once the retention period ends, data is blocked and kept only to meet possible legal claims or requests from authorities, as LOPDGDD art. 32 requires, and then deleted.
03Who we share it with
We don’t sell or rent personal data. We only share it with service providers that process it on our behalf, under a data processing agreement (GDPR art. 28), and only as far as they need to provide their service:
- Hosting: the website runs on a server located in Spain.
- Network and security: Cloudflare, Inc., which delivers the website and protects it against attacks.
- Email: Microsoft Ireland Operations Ltd. (Microsoft 365 / Outlook), which hosts the inbox where contact requests arrive.
If you play an embedded video, YouTube (Google Ireland Ltd.) receives data directly from your browser as a separate controller, under Google’s privacy policy.
We may also disclose data where the law requires it, for example to courts, tax authorities or law enforcement.
04International transfers
Some providers, such as Cloudflare, Microsoft and Google, may process data outside the European Economic Area, including in the United States. When that happens, the transfer is covered by the European Commission’s adequacy decision for the EU-US Data Privacy Framework, where the provider is certified, or by the Standard Contractual Clauses approved by the Commission (GDPR arts. 45-46). Write to us to get a copy of the safeguards that apply.
05Your rights
Under GDPR arts. 15-22 you can, at any time and free of charge:
- Access the data we hold about you.
- Rectify it if it is inaccurate or incomplete.
- Erase it when it is no longer needed or you withdraw consent.
- Object to processing based on our legitimate interest, including direct marketing.
- Restrict processing while a claim is being checked.
- Port data you gave us to another provider, in a structured format.
- Withdraw consent without affecting processing carried out before.
Email [email protected] saying which right you want to exercise. We will reply within one month. If we have reasonable doubts about your identity, we may ask for something that confirms it.
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, aepd.es) or the supervisory authority where you live. We’d appreciate the chance to sort it out with you first.
06Security
We apply technical and organisational measures suited to the risk (GDPR art. 32): encrypted connections (HTTPS), access to contact requests limited to the people who need them, and providers that offer equivalent guarantees.
07Children
This website is aimed at businesses and is not directed at children. We don’t knowingly collect data from anyone under 14, the age of consent in Spain (LOPDGDD art. 7). If you believe a minor has sent us data, contact us and we will delete it.
08Changes to this policy
We will update this policy if the way we handle data changes, and show the date of the latest version at the top. For substantial changes that affect consent you gave, we will ask again. See also our Cookie policy and Legal notice.