Privacy Policy

In accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, the following information is provided regarding the processing of personal data.

Who is responsible for processing your personal data?

The data controller is Alexander Brandner, ID X8964221V, with registered address at Calle Perill 2, 1A, 07015 Palma de Mallorca, Illes Balears, Spain. You may contact us at plan@thebrandners.com or by phone at +34 617 33 54 94.

What personal data do we process?

We process the personal data that you provide through the forms available on this website, as well as the personal data derived from the provision or contracting of our wedding and event planning services and from the commercial relationship you may maintain with us. We may also process personal data generated in the context of your activity on this website, including browsing data obtained through the site.

It is important to keep your personal data up to date. You are responsible for notifying us of any changes or inaccuracies as soon as possible by contacting plan@thebrandners.com.

For what purpose do we process your personal data?

We may process your personal data for the management and maintenance of the services offered through the website, to manage and respond to inquiries and information requests submitted through the contact form, and to manage requests for quotations or proposals. Your email address and any personal data provided through the contact form will be used exclusively to respond to your requests.

We may also process your data to comply with applicable legal obligations. If you have provided your consent, we may send you commercial communications, newsletters, and information about our services. If you have expressly consented, your personal data may also be used to create a commercial profile to offer services aligned with your interests. No automated decisions will be made based on such a profile.

How long do we keep your personal data?

We retain personal data for the time necessary to fulfill the purposes of the processing and to comply with applicable law. Personal data will generally be retained while a contractual and/or commercial relationship exists, or until you exercise your right to erasure or restriction of processing.

Data related to contracted services will be retained during the contractual relationship and, once it has ended, for the legally established limitation periods. Data provided to manage inquiries or information requests will be retained until you request deletion. Data provided for newsletters or commercial communications will be retained until you withdraw consent. Browsing data and any commercial profile generated will be retained until you request deletion.

In any case, personal data will be retained for the legally required periods and for the time necessary to address possible liabilities arising from processing.

Data security

We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage, ensuring confidentiality, integrity, and availability. These measures are designed considering our IT infrastructure, the state of the art, the costs of implementation, the nature and context of processing, and the risks to your rights and freedoms.

What is the legal basis for processing your data?

The legal basis for processing your personal data is the performance and maintenance of a contractual or commercial relationship, such as the provision of wedding and event planning services and the management of quotations and proposals, in accordance with Article 6(1)(b) GDPR. Where applicable, processing may also be based on your explicit consent, for example to receive marketing communications or newsletters, in accordance with Article 6(1)(a) GDPR. Processing may also be based on compliance with legal obligations under Article 6(1)(c) GDPR, or on legitimate interest under Article 6(1)(f) GDPR, for example for security purposes, service improvement, or the management of your inquiries.

During data collection, and wherever personal data is requested on the website, you will be informed whether providing the data is mandatory or optional. In general, data requested through forms is required to respond to your request and provide the relevant services. If the required data is not provided or is incorrect, we may not be able to assist you.

Where marketing communications are based on consent, you may withdraw such consent at any time, and withdrawal will not affect your contractual or commercial relationship with us. If you have subscribed to newsletters or opted in to receive communications, you may unsubscribe at any time.

Who will your data be shared with?

As a general rule, your personal data will not be shared with third parties except where legally required. However, service providers may have access to your data as data processors when necessary to provide services on our behalf. This may include suppliers and partners involved in executing your event, as well as technology providers used to manage communications, documentation, and operational processes. You may request information about recipients by contacting plan@thebrandners.com. We may also share data with public authorities when required by law.

International data transfers

To provide the services described above, we may transfer personal data outside the European Economic Area and store such data in databases managed by providers acting on our behalf. Where personal data is transferred outside the EEA, appropriate safeguards will be applied, including contractual measures such as Standard Contractual Clauses approved by the European Commission.

What rights do you have?

You have the right to obtain access to your personal data, request rectification of inaccurate data, and request erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, you may request restriction of processing, in which case we will retain the data only for the exercise or defense of claims. You may also object to processing for reasons related to your particular situation, in which case your data will no longer be processed for the purposes you have objected to. Where technically feasible, you may request the portability of your data to another controller.

To exercise these rights, you may contact us at plan@thebrandners.com. We may request proof of identity when necessary. You also have the right to file a complaint with the Spanish Data Protection Authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.

Social media

When you interact with our website or content through social media platforms, such as when you follow us, engage with our posts, or share content, we may receive information from those platforms, including public profile information and interaction data. We use social media to inform about our services and activities, and we do not incorporate personal data from social networks into our internal processing systems unless you provide explicit consent. Social media platforms have their own terms of use and privacy policies, which you should review.

Confidentiality

We guarantee the confidentiality of personal data processed through this website. However, we may disclose personal data to competent public authorities and bodies when legally required. Personal data may be retained after the end of a relationship exclusively for the purposes stated above and within the legally established retention periods.