Data Protection and Privacy Policy

1. Data Controller Details

Company: Brooks Hughes as Birchmunds

Tax Identification Number : Y4555037Q

San Miguel De Salinas 03193 – Spain

Telephone: +34 641 604 606

Data Protection Contact Email: info@birchmunds.com

1.1 Applicable Legislation

This Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation or “GDPR”). Where applicable and not inconsistent with the GDPR, it also complies with the relevant Spanish legislation governing the protection of personal data.

By providing your personal information, you confirm that you have read and understood this Privacy Policy and that you freely and expressly consent to the processing of your personal data for the purposes described herein.

The Company reserves the right to amend this Privacy Policy whenever necessary to reflect legislative changes, judicial decisions, guidance from the Spanish Data Protection Agency, or changes to our services. This Privacy Policy may be complemented by our Legal Notice, Cookie Policy, and any applicable Terms and Conditions relating to specific products or services.

1.2 Data Protection Officer

Birchmunds has not appointed a Data Protection Officer, as it is not legally required to do so.

2. Purpose of Processing Personal Data

We process personal data for the following purposes:

• To respond to enquiries regarding the products and services offered through our website, including services that may involve referrals to professionals within the real estate sector.
• To provide our services following acceptance of a quotation, order confirmation, or the execution of a commercial agreement.
• To send updates, news, and information about our business, products, and services by email and/or post.
• To manage website users and, where applicable, administer registration and access to restricted areas of the website.
• To receive, process, and respond to requests for information, suggestions, comments, or complaints.
• To provide information that may be relevant or of interest through electronic communications or mobile devices.
• To administer newsletter subscriptions and distribute newsletters to users who have subscribed.

2.1 Data Retention

Personal data will only be retained for as long as necessary to fulfil the purposes for which it was collected, respond to enquiries, improve our services, comply with legal obligations, or resolve any disputes.

If you subscribe to receive communications, your personal data will be retained until you withdraw your consent or request that processing be restricted. Once this occurs, your information will remain securely blocked for the period required by applicable law before being permanently deleted.

3. Legal Basis for Processing and Data Collected

The lawful basis for processing your personal data is your explicit consent, which is provided by completing the relevant form and actively accepting this Privacy Policy before submitting your information.

3.1 Consent

The legal grounds for processing Users’ and Clients’ personal data are established under Article 6(1)(a), (b), and (c) of Regulation (EU) 2016/679.

Processing may take place where:

• You have provided your explicit consent for one or more specific purposes.
• Processing is necessary to respond to your request before entering into a contract or to fulfil a contractual agreement.
• Processing is required to comply with a legal obligation applicable to the Company.

Consent is granted through a clear affirmative action, such as completing an online form and selecting the acceptance box confirming agreement with this Privacy Policy.

3.2 Categories of Personal Data

The personal information we may collect includes identification and contact details, including:

• Full name
• Telephone number
• Postal address
• Company name
• Email address
• IP address used when accessing our website or submitting online forms

4. Security of Personal Data

The Company is committed to protecting your personal information. We have implemented appropriate technical and organisational safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access, in accordance with Article 32 of the GDPR. These measures are regularly reviewed to ensure an appropriate level of security based on the nature of the data and the associated risks.

5. Disclosure of Personal Data

As a general rule, your personal data will not be transferred to third parties or outside the European Economic Area.

Exceptions may apply where disclosure is required by tax, commercial, telecommunications, or other applicable legislation, or where disclosure is requested by a competent judicial or public authority in accordance with the law.

6. Your Rights

You have the right to obtain confirmation as to whether we are processing your personal data.

Where applicable, you may exercise the following rights:

• Access your personal data.
• Request the correction of inaccurate or incomplete information.
• Request the deletion of your personal data where it is no longer required for the purposes for which it was collected.
• Request restriction of processing in certain circumstances, in which case the data will only be retained for the establishment, exercise, or defence of legal claims.
• Object to the processing of your personal data where justified by your particular circumstances. In such cases, we will cease processing unless we have compelling legitimate grounds or the processing is necessary for legal claims.
• Receive your personal data in a structured, commonly used, and machine-readable format and request its transfer to another controller where applicable.
• Withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6.1 Exercising Your Rights

To exercise any of your data protection rights, please contact the Data Controller using the contact details below and specify the right you wish to exercise.

Telephone: +34 641604606

Email: info@birchmunds.com

 your personal information, you may be asked to provide proof of identity before your request is processed.

You also have the right to lodge a complaint with the relevant supervisory authority if you believe your personal data has been processed in breach of applicable data protection laws.

7. Electronic Communications

In accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), by completing the relevant form and selecting the box indicating your acceptance of electronic communications, you expressly authorise the Company to send you information relating to its products, services, and business activities via email, telephone, fax, or any other electronic communication method you have provided.