PRIVACYPOLICY.

1. Data controller

Blue Pad is the controller of personal data collected through this website and its forms.

Privacy contact: info@bluepad.es.

This policy is applied in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and, where applicable, Spanish Law 34/2002 on information society services and electronic commerce (LSSI-CE).

2. Data we process

We process only the information needed to manage our relationship with you: name, email address, telephone number, company, city or country and the information you include in your enquiry. Project forms may also request professional or project-related information such as attendees, venue, dates, objectives and indicative budget.

When you submit a form, we may associate navigation context and commercial attribution data with the enquiry, such as the page you contacted us from, language, referring page and, where present, campaign UTM parameters. We use this information to understand the origin of the enquiry and assess the aggregate effectiveness of our commercial channels.

We do not request special categories of personal data through these forms. Please do not include sensitive information that is not necessary for your enquiry.

3. Purposes of processing

We use your data to answer enquiries, assess and prepare proposals, manage quotation requests, organise meetings, provide requested services and maintain communications necessary for a professional or commercial relationship.

We only send marketing communications where there is a valid legal basis. Where consent is required, you may withdraw it at any time.

4. Legal basis

The applicable legal basis depends on the processing: pre-contractual steps or performance of a contract when you request information, a quote or services; consent where processing depends on a voluntary acceptance; and, where appropriate, legitimate interests for professional communications related to an existing relationship, after balancing the rights and interests of the individuals concerned.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Retention

We retain personal data for as long as necessary to deal with your request and, if a contractual or commercial relationship begins, for as long as that relationship continues. Afterwards, data may remain duly blocked for the statutory limitation periods applicable to potential liabilities.

Commercial enquiries stored as internal records are reviewed periodically and deleted or anonymised when they are no longer necessary for the purpose for which they were collected, unless a legal obligation or other valid legal basis justifies further retention.

Data processed solely on the basis of consent will be kept until you withdraw that consent, unless another legal basis justifies retention.

6. Recipients and international transfers

We do not sell or disclose personal data to third parties for their own commercial purposes. Providers of technology, hosting, email, forms, analytics, storage or support may access data when necessary, acting as processors where applicable.

Where a provider processes data outside the European Economic Area, transfers will only take place using mechanisms permitted by the GDPR, such as adequacy decisions, Standard Contractual Clauses or other appropriate safeguards.

We may also disclose data where required by law or by a valid request from a competent authority.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent where applicable.

To exercise these rights, email info@bluepad.es. If we have reasonable doubts about your identity, we may request additional information strictly necessary to verify it.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Security and confidentiality

Blue Pad applies technical and organisational measures appropriate to the risk to protect personal data against destruction, loss, alteration, disclosure or unauthorised access. These measures are reviewed when systems, providers or processing activities change.

9. Forms, required information and automated decisions

Fields marked as required are necessary to process your request. If they are not provided, we may be unable to reply or manage the project. Optional fields may be left blank.

Where a form includes an acceptance checkbox for this Privacy Policy, checking it will be required where processing is based on consent or where evidence is needed that privacy information has been provided. We may record the date and version of the policy accepted as evidence of that interaction.

To prevent enquiries from being lost and to support follow-up, project forms may create a private lead record within our WordPress systems, accessible only to authorised personnel. This record may contain the information submitted through the form together with the source or attribution data described in this policy.

Blue Pad does not make decisions producing legal or similarly significant effects based solely on automated processing of data collected through these forms.

10. Updates to this policy

We may update this Privacy Policy to reflect legal, regulatory or technical changes. The current version will always be the version published on this page.

Last updated: 29 August 2026.