Privacy policy

Last updated: November 2026

At Belvedere we take your data seriously. This policy explains in plain language how we process the personal information we collect through www.belvedere.eus, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

  • Controller: BELVEDERE MARKETING AGENCY S.L.
  • Tax ID (CIF): B01715820
  • Address: C/ Morgan 2A, 3B, 48014 Bilbao (Bizkaia), Spain
  • Email: info@belvedere.eus
  • Phone: +34 946 12 78 34

Belvedere is not required to appoint a Data Protection Officer. For any privacy question, write to info@belvedere.eus.

2. What data we process, why, and on what legal basis

a) Contact form and email

Data: name, email address, phone number (if provided), company and the content of your message.
Purpose: to answer your enquiry or quote request and follow up as needed.
Legal basis: your consent when you submit the form (Art. 6.1.a GDPR) and, if you request a quote, steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR).
Retention: as long as needed to handle your request and no longer than one year after our last communication, unless a business relationship begins.

b) Clients and suppliers

Data: identification and contact details of contact persons, billing details.
Purpose: managing the contractual relationship, service delivery, invoicing and accounting.
Legal basis: performance of a contract (Art. 6.1.b GDPR) and compliance with tax and commercial legal obligations (Art. 6.1.c GDPR).
Retention: for the duration of the relationship and thereafter for the legally required periods (generally six years under the Spanish Commercial Code and four years under tax law).

c) Job applications

If you send us your CV, we will process it to assess your application for current or future selection processes, based on your consent (Art. 6.1.a GDPR). We will keep it for a maximum of one year unless you ask us to delete it sooner.

d) Web analytics

With your consent, we use Google Analytics to understand, statistically, how the website is used and to improve it (Art. 6.1.a GDPR). Details are in the Cookie policy.

e) Social media

If you interact with our profiles (Instagram, LinkedIn, etc.), we will process the data the network allows us to see in order to manage that interaction, based on your consent. Each social network has its own privacy policy.

We do not make automated decisions or create profiles that have legal effects on you.

3. Recipients

We do not share your data with third parties except where required by law (for example, with the tax authorities). To provide our services we rely on providers that process data on our behalf as processors, with whom we have signed the agreements required by Art. 28 GDPR:

  • the website hosting provider;
  • Google Ireland Ltd. (Google Workspace for email and Google Analytics for analytics);
  • our accounting and tax advisers, for the administrative management of clients and suppliers.

4. International transfers

Some providers, such as Google, may process data outside the European Economic Area. In such cases the transfer is covered by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

5. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, without affecting the lawfulness of processing carried out before withdrawal.

To do so, email info@belvedere.eus or write to C/ Morgan 2A, 3B, 48014 Bilbao, Spain, stating which right you wish to exercise. We may ask you to verify your identity. We will reply within one month.

If you believe we have not handled your rights properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Children

The website is not aimed at children under 14. If you are under that age, please do not send us personal data.

7. Security

We apply technical and organisational measures appropriate to the risk to protect your data against loss, unauthorised access or misuse, such as encrypted connections (HTTPS), backups and access control.

8. Accuracy of data

You confirm that the data you provide is accurate and that you will inform us of any changes. If you provide data about other people, you must have informed them beforehand.

9. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The version in force is always the one published on this page, with its update date.