Privacy Policy

Last updated: [DATE]

1. Data controller

[COMPANY / LEGAL NAME], tax ID [NIF/CIF], registered address at [FULL ADDRESS], is the controller responsible for the personal data you provide through this website. Contact: hello@gambosi.com.

2. What data we process and why

Contact form: we process the name, email and message you send us in order to respond to your inquiry or quote request.
Web analytics (optional, requires your consent): we use Google Analytics to understand how the website is used and to improve it. This service is only activated if you explicitly accept it in the cookie banner — if you decline, no analytics script runs at all.
Embedded videos (optional, requires your consent): if we embed YouTube videos, they only load once you've given consent to the "Media" category.

3. Legal basis for processing

The legal basis for processing contact form data is the performance of pre-contractual steps taken at your request (Art. 6.1.b GDPR). The legal basis for analytics and embedded videos is your explicit consent (Art. 6.1.a GDPR), which you can withdraw at any time via the cookie settings button.

4. Recipients and international transfers

If you've accepted the analytics category, your data is processed by Google LLC (Google Analytics), which may involve a transfer of data outside the European Economic Area. Google relies on the EU-US Data Privacy Framework as a safeguard for these transfers. You can review Google's privacy policy at policies.google.com/privacy .

5. Data retention

Contact form data is kept for as long as necessary to handle your request, and afterwards for the legal limitation periods applicable to liability claims. Analytics data is retained according to Google Analytics' retention settings ([PERIOD, e.g. 14 months]).

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to hello@gambosi.com, with the subject "Data Protection". You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you believe the processing does not comply with the regulations.

7. Security measures

We apply appropriate technical and organizational measures to ensure the security of your data and prevent its alteration, loss, or unauthorized access.

8. Minors

This website is not directed at minors under 14 years of age. If you are under this age, you need the consent of a parent or legal guardian to provide us with your data.