Privacy

1. Controller

Controller

TODO · full name or company name

Tax ID

TODO · NIF

Address

TODO · address

Contact

arturo@blacklinebookings.com

2. What data we process

• What you send us through the form or by email: name, company, email, phone if you give it, and details of your event.
• If you hire us: your company’s billing details and, where relevant, those of the contact person.
• This website uses no analytics and no tracking cookies (see Cookies).

3. Why, and on what legal basis

Replying

Answering your enquiry and preparing a sample or quote. Basis: your consent and pre-contractual steps taken at your request (art. 6.1.a and 6.1.b GDPR).

Doing the job

Delivering, charging and invoicing the work. Basis: performance of a contract and legal tax and accounting obligations (art. 6.1.b and 6.1.c GDPR).

Updates

Only if you expressly ask, sending you news about our services. Basis: consent, which you can withdraw at any time (art. 21 LSSI).

4. How long we keep it

Enquiries that do not turn into a job: up to 12 months. Client data: for as long as we work together and then for the legal retention periods (invoices and accounting records: 6 years under the Spanish Commercial Code, plus tax limitation periods).

5. Who else sees it

We do not share data with third parties unless required by law. We rely on providers acting as processors:

• Email: TODO · email provider (e.g. Google Workspace / Gmail).
• Website hosting: Cloudflare, Inc.
• Card payments: Stripe Payments Europe, Ltd.
• Contact form, if enabled: Formspree, Inc. TODO · remove this line if Formspree is not used

Some of these providers may process data outside the European Economic Area. When they do, appropriate safeguards apply: the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

6. Your rights

You can request access, rectification, erasure, objection, restriction and portability of your data, and withdraw consent at any time, by writing to arturo@blacklinebookings.com. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

7. Security

We take reasonable measures to protect your data: encrypted connection (HTTPS), restricted account access and GDPR-compliant providers.

Last updated: 7 October 2026