Privacy Policy At Bastida for Work, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and what rights you have as a user of our website www.bastidaforwork.com. 1. Who we are The controller of this website is: Bastida for Work, S.L. Address: Sant Leopold, 63, Local 10, 08221 Terrassa (Barcelona), Spain Contact email: [email protected] Website: https://www.bastidaforwork.com 2. What personal data we collect and why We collect user data to improve the browsing experience on our website and ensure the proper provision of our services. The data we may collect includes: Identification and contact data: name, email address (if provided through forms or communications). Technical data: anonymized IP address, browser type, device, operating system. Browsing data: pages visited, time spent, interactions with the site. Cookies and similar technologies: to personalize your experience and analyze site usage. The legal basis for processing your data is: Your consent (e.g., acceptance of cookies or submission of forms). Our legitimate interest in improving the functionality of the website. 3. Comments If users leave comments on the site, WordPress collects the data shown in the comment form, as well as the user’s IP address and browser user agent string to help detect spam. 4. Media If you upload images to the website, you should avoid including embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images published online. 5. Contact forms When you use our contact form, we collect your name and email address in order to respond to you. This data is stored only as long as necessary to handle your request and is not used for commercial purposes without your explicit consent. 5.1. Newsletter Who is responsible. Bastida for Work, S.L., Sant Leopold, 63, Local 10, 08221 Terrassa (Barcelona), Spain. Contact: [email protected]. What we use your data for. If you subscribe to our newsletter, we use your email address to send you news about Bastida for Work, such as new collections, projects and events. The newsletter is sent in English. What data we collect. Your email address and the language of the page where you subscribed (English or Spanish). We also keep the date of your subscription and of your confirmation. Legal basis. Your consent (Article 6.1.a of the GDPR and Spanish Law 34/2002 on information society services). We use a double opt-in: after you enter your email address, we send you a message, and your subscription only starts when you click the confirmation button. You can withdraw your consent at any time, without affecting the processing carried out before. How long we keep your data. Until you unsubscribe or withdraw your consent. Every newsletter includes an unsubscribe link, and you can also write to us. After that, we may keep your data blocked for the time needed to deal with possible legal claims. Who receives your data. We use Brevo, an email marketing provider based in France, which processes your data on our behalf to send the newsletter, under a data processing agreement. Until 29 October 2026, we used Mailchimp (The Rocket Science Group LLC, United States) for the same purpose, and some subscribers’ data may still be stored there. We do not sell your data or share it with anyone else for their own purposes. International transfers. If any transfer outside the European Economic Area took place, it would be covered by the safeguards required by the GDPR, such as standard contractual clauses. Your rights. You can ask for access to your data, its rectification or erasure, the restriction of its processing, its portability, and object to it, by writing to [email protected]. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es). 6. Cookies This site uses both first-party and third-party cookies, including: Session and functional cookies (necessary for the website to function). Analytics cookies (Google Analytics) to understand site usage in a statistical and anonymous way. You can manage or disable cookies from your browser settings or via our cookie preferences banner. 7. Analytics We use Google Analytics, a service provided by Google LLC. This tool allows us to gather usage statistics (pages viewed, time spent on the site, traffic sources). The data collected is anonymous and does not personally identify users. You can review Google’s privacy policy here: https://policies.google.com/privacy. 8. Who we share your data with We do not share your personal information with third parties, except: When required by law. With service providers who help us host or operate the website (e.g., hosting provider, Google). With our email marketing provider (Brevo), to send the newsletter. All providers comply with European data protection regulations. 9. How long we retain your data Contact form submissions: up to 6 months. Newsletter: until you unsubscribe or withdraw your consent. Analytics records: up to 14 months. Cookies: depending on your browser settings (up to 24 months in the case of Google Analytics). Comments on the site: retained indefinitely to recognize and approve future comments automatically. 10. Your data rights As a user, you have the right to: Access your personal data. Correct it if inaccurate. Request its deletion. Object to its processing. Request data portability. You may exercise these rights by contacting us at [email protected]. 11. International data transfers Some of our providers (such as Google) may process data on servers located outside the European Union. In such cases, legal mechanisms such as the European Commission’s Standard Contractual Clauses are applied to ensure your data is protected. 12. How we protect your information We implement technical and organizational security measures to protect your personal data, including: Secure connections (SSL/HTTPS). Intrusion detection systems. Restricted access to information. 13. Data breach procedures In the event of a data breach, we will notify affected users and the relevant authorities within a maximum of 72 hours, in compliance with the GDPR. 14. Additional information This site may contain links to external websites. We are not responsible for the privacy practices of such websites. We recommend reviewing their privacy policies. 15. Contact For any questions regarding this Privacy Policy or the processing of your data, you may contact us at: [email protected]