In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights, the USER is informed of the following:

1. Data controller

• Controller: Denise Anna Harms – Bloom Spain
• NIF/NIE: Y1316472N
• Address: Calle El Capricho 10, 18690 Almuñécar (Granada), Spain
• Contact email: info@bloomspain.com

2. Data collected

We process the personal data that the USER provides through:

• Contact forms on the website
• Requests for quotes or proposals
• Newsletter subscription (if activated)
• Communications by email, telephone or WhatsApp
• Contractual relationships with clients and suppliers

The data usually includes: name, surname, email, telephone number, billing details and any information necessary for the provision of services.

3. Purpose of processing

Data will be processed for the following purposes:

• Managing requests for information, quotes or contact received through the website
• Providing the contracted services (web design, digital marketing, branding, etc.)
• Managing the administrative, tax and accounting relationship derived from these services
• Sending commercial communications related to Bloom Spain services, provided that the USER has given consent or there is a prior contractual relationship
• Improving the user experience and quality of the website (anonymous analytical data)

4. Legal basis

The legal bases for the processing of data are:

• Performance of a contract or application of pre-contractual measures (when requesting a quote or contracting a service)
• Consent of the data subject (when ticking the acceptance box in forms or subscribing to commercial communications)
• Compliance with legal obligations (tax and accounting obligations)
• Legitimate interest of Bloom Spain for managing complaints and improving services

5. Data disclosure and data processors

Data will not be disclosed to third parties, except where there is a legal obligation or where it is necessary for the provision of services (for example, accounting/gestoría, hosting providers, email marketing services, etc.), with whom the relevant data processing agreements will be signed.

Data may be hosted by third-party services located within the European Union or in countries with an adequate level of protection. If tools located outside the EEA are used (for example, email marketing platforms in the USA), appropriate safeguards will be adopted in accordance with the GDPR.

6. Data retention period

Personal data will be kept:

• For as long as the commercial or professional relationship is maintained
• For the time necessary to comply with legal obligations (e.g. 4–6 years for tax/accounting purposes)
• Until the USER requests deletion, where applicable

7. Rights of data subjects

The USER may exercise at any time the following rights:

• Right of access
• Right to rectification
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to object
• Right to data portability

To exercise these rights, the USER may send a written request, together with a copy of their identity document, to:

• Postal address: Calle El Capricho 10, 18690 Almuñécar (Granada), Spain
• Email: info@bloomspain.com

The USER also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their data does not comply with current regulations.

8. Accuracy of data

The USER guarantees that the personal data provided are truthful, accurate, complete and up to date, and undertakes to inform Bloom Spain of any changes to them.

9. Data security

Bloom Spain has adopted the necessary technical and organisational measures to ensure an appropriate level of security, preventing the loss, misuse, alteration, unauthorised access or theft of personal data.

10. Minors

Bloom Spain’s services are not directed to children under 14 years of age. If it is detected that data has been collected from a minor without the consent of their parents or guardians, such data will be deleted.