Privacy Policy

Last updated: 24 March 2026

1. Data controller

2. Data we collect and for what purpose

2.1. Contact form

  • Data collected: name, email, phone (optional), project type, message.
  • Purpose: respond to your enquiry and, where applicable, prepare a quote.
  • Legal basis: consent (Art. 6.1.a GDPR).
  • Retention: maximum 12 months from the last contact if no contractual relationship is established.

2.2. Appointment booking through Cal.com

This website embeds a Cal.com widget to allow you to book a discovery call.

  • Purpose: manage the booking and hold the meeting.
  • Legal basis: consent (Art. 6.1.a GDPR).
  • Controller: Cal.com, Inc. You can consult their privacy policy at cal.com/privacy.

2.3. Contractual relationship

  • Purpose: execute the contract, issue invoices and manage project communications.
  • Legal basis: performance of a contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).
  • Retention: duration of the contractual relationship plus the legally required tax retention periods (minimum 4 years).

2.4. Cookies and analytics

For details about cookies, please see our Cookie Policy. Google Analytics 4 (GA4), Google Tag Manager (GTM) and Meta Pixel are only activated after you give explicit consent.

3. Data recipients

Your personal data may be shared with the following third parties:

Recipient Service Location
Hostinger International Ltd. Web hosting and email Lithuania (EU)
Google LLC Analytics, Tag Manager, Search Console USA (standard contractual clauses)
Meta Platforms, Inc. Meta Pixel (conversion tracking) USA (standard contractual clauses)
Cal.com, Inc. Appointment booking USA (standard contractual clauses)
Holded Technologies, S.L. Invoicing and management Spain (EU)

International transfers to providers outside the EEA are carried out under standard contractual clauses approved by the European Commission.

4. User rights

In accordance with the GDPR, you may exercise the following rights:

  • Access: find out whether we are processing your data and obtain a copy.
  • Rectification: request the correction of inaccurate or incomplete data.
  • Erasure: request the deletion of your data when it is no longer necessary.
  • Objection: object to the processing of your data in certain circumstances.
  • Restriction: request the restriction of processing in the cases provided for by law.
  • Portability: receive your data in a structured, commonly used and machine-readable format.

To exercise any of these rights, send an email to contacto@burguerastudio.com. We will respond within a maximum period of 30 days.

If you believe that the processing of your data is not appropriate, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

5. Security measures

We have adopted appropriate technical and organisational measures to protect your personal data, including:

  • SSL/TLS encrypted connection.
  • Restricted access to servers and sensitive files.
  • Periodic backups.
  • Strong passwords and two-factor authentication (2FA).

6. Changes to this policy

We reserve the right to update this privacy policy to adapt it to legislative or regulatory changes. Any modifications will be published on this page with the updated date.