Privacy Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament (GDPR) and the Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), this Privacy Policy explains how Franck Bufi collects, uses and protects your personal data when you use this website.

Data Controller

Francisco Bufi Martínez (Franck Bufi)
CIF: 46952621F
Email: contact@franckbufi.com

Data We Collect

We may collect the following personal data:

• Contact form: name, email address, message content, and inquiry subject.
• Technical data: IP address, browser type, pages visited and time spent (through server logs or analytics tools).
• Cookies: as described in our Cookie Policy.

Purpose and Legal Basis

We process your personal data for the following purposes:

• Responding to your inquiries — Legal basis: your consent (Art. 6.1.a GDPR)
• Managing professional relationships and collaborations — Legal basis: pre-contractual or contractual relationship (Art. 6.1.b GDPR)
• Website analytics and improvement — Legal basis: legitimate interest (Art. 6.1.f GDPR)
• Legal compliance — Legal basis: legal obligation (Art. 6.1.c GDPR)

Data Retention

Contact form data is retained for the duration necessary to respond to your inquiry and for up to 3 years thereafter, unless a longer retention period is required by law. Technical and analytics data may be retained for up to 14 months.

Data Sharing

We do not sell, rent or share your personal data with third parties, except:

• Service providers necessary for website operation (hosting, email delivery) — bound by data processing agreements.
• When required by applicable law or legal proceedings.

International Transfers

If any of our service providers are located outside the European Economic Area, we ensure adequate safeguards are in place (e.g. Standard Contractual Clauses approved by the European Commission).

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access: obtain confirmation of whether we process your data and a copy of it.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data when no longer necessary.
• Restriction: request limitation of processing in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: at any time, without affecting lawfulness of prior processing.

To exercise any of these rights, contact us at contact@franckbufi.com. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure. Communication over this website is encrypted via HTTPS.

Children

This website is not directed at children under 14 years of age. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. The date of the last revision is indicated below. We encourage you to review this page periodically.

Last Updated

April 2026