Data Controller
Bucheangol Concept Studio S.L. (CIF pending publication), with registered office at 47 Calle Larios, 29015 Málaga, Spain, is the data controller for personal information collected through bucheangol.yachts and direct correspondence at [email protected]. Telephone: +34 952 847 163.
We provide restaurant interior concept design services only. We do not process data related to restaurant operations, guest dining, or payment processing for food service.
Personal Data We Collect
We may collect: name, email address, telephone number, company name, project location, and brief descriptions submitted via contact forms, client brief forms, or email. Technical data includes IP address and browser type in server logs retained for security purposes.
We do not collect special category data unless you voluntarily include it in free-text fields. Please avoid submitting sensitive personal information in project descriptions.
Purpose and Legal Basis
Data is processed to respond to design concept enquiries, prepare EUR quotations, execute concept design contracts, and comply with legal obligations. Legal bases under GDPR Article 6: consent (form submissions), contract performance (engaged clients), and legitimate interest (website security and analytics minimisation).
- Enquiry response — consent and pre-contractual steps
- Project delivery — contract performance
- Invoicing and tax records — legal obligation
- Cookie consent storage — consent via localStorage key bchg_concept_agree
Data Retention
Enquiry data not leading to engagement is deleted within 24 months. Contract and invoice records are retained for six years per Spanish commercial law. Marketing communications are not sent without explicit opt-in.
Server logs are rotated and deleted within 90 days unless required for security incident investigation.
Your Rights
Under GDPR, you may request access, rectification, erasure, restriction, portability, and objection to processing. You may withdraw consent at any time without affecting prior lawful processing. You have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD).
Exercise rights by emailing [email protected] with subject line "GDPR Request". We respond within 30 days.
Data Sharing and Transfers
We do not sell personal data. Processors may include email hosting, file transfer services, and accounting software — all bound by data processing agreements. Data is stored within the European Economic Area unless otherwise disclosed with appropriate safeguards.
Concept deliverables shared with your architects or contractors occur only at your instruction during active projects.
Security Measures
We implement appropriate technical and organisational measures including encrypted connections (HTTPS), access controls, and staff confidentiality obligations. No method of transmission is fully secure; we encourage password-protected file transfers for large brief attachments.