Privacy Policy

This Privacy Policy explains how Panika Barceloneta SL processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights Guarantee (LOPDGDD).

1. Data Controller

Panika Barceloneta SL — NIF B66828534
Registered office: Calle Joan de Borbó 9, planta baja, 08003 Barcelona, Spain
Tax address: Calle Girona 84, planta baja, 08009 Barcelona, Spain
Email: info@panikabarcelonetasl.com

2. Data we process

• Contact form data: name, company, business email and the content of your message.
• Business contact data used in lead generation campaigns on behalf of our clients: name, job title, company, professional email address, professional phone number and publicly available company information.
• Technical data: IP address, browser type and basic usage data strictly needed to run the website.

3. Purposes and legal bases

• Answering enquiries and managing the pre-contractual relationship — Art. 6(1)(b) GDPR.
• Providing lead generation and B2B outbound services to our clients, including sending commercial communications to business contacts — legitimate interest in direct marketing, Art. 6(1)(f) GDPR, or consent where legally required, Art. 6(1)(a) GDPR.
• Complying with accounting, tax and legal obligations — Art. 6(1)(c) GDPR.

4. Source of data

Personal data used in campaigns is obtained directly from the data subject, from public professional sources (company websites, professional networks, public registries) or from our clients, who act as controllers of their own contact databases. Where we process data on our clients' instructions, we act as a data processor under a data processing agreement (Art. 28 GDPR).

5. Recipients

Data may be shared with our clients (where the campaign is run on their behalf) and with technology providers acting as processors: email delivery, CRM, hosting and analytics providers. Where a provider is located outside the European Economic Area, transfers are covered by an adequacy decision or by Standard Contractual Clauses.

6. Retention

Enquiry data is kept for the time needed to answer it and for up to 12 months afterwards. Campaign contact data is kept while the campaign or client relationship is active and is deleted or anonymised when the purpose ends or when an objection is received. Data with legal or tax relevance is kept for the statutory periods (generally up to 6 years).

7. Your rights

You may request access, rectification, erasure, restriction, portability and object to processing, including objecting to direct marketing at any time. Write to info@panikabarcelonetasl.com stating your request. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

8. Security

We apply technical and organisational measures appropriate to the risk, including access control, encryption in transit and confidentiality obligations for all staff and providers.

9. Changes

This policy may be updated to reflect changes in our services or in applicable law. The date at the top of this page indicates the latest version.