Privacy Policy

1. Scope of this policy

This policy explains how personal data obtained through the website, the contact form and subsequent professional communications with Bilbao Trade are processed.

2. Data we may process

• Identity and professional data: name, surname, company, role and other professional information provided.
• Contact data: email address, optional telephone number and country.
• Enquiry content: reason for contact, message, documents and data voluntarily included in subsequent communications.
• Technical and security data: IP address, date and time, browser information and technical records generated by the server or security systems.

The form includes an anti-abuse control that temporarily transforms the IP address into a non-reversible identifier to limit repeated attempts. This identifier is retained for approximately ten minutes. The enquiry is sent by email to info@bilbaotrade.com; the form itself does not create a customer profile or a case file stored in WordPress.

3. Purposes and legal bases

Purpose	Legal basis
Answering enquiries, analysing requirements and preparing proposals or quotations.	Taking steps at the data subject’s request prior to entering into a contract — Article 6(1)(b) GDPR.
Managing professional or commercial communications and relationships.	Performance of a contract, where applicable, or legitimate interests in handling and maintaining professional relationships — Articles 6(1)(b) and 6(1)(f) GDPR.
Protecting the website, preventing abuse and resolving incidents.	Legitimate interests in securing the website and its communications — Article 6(1)(f) GDPR.
Meeting legal obligations and responding to public authorities.	Compliance with legal obligations — Article 6(1)(c) GDPR.

The form checkbox confirms that this policy has been made available to the user; it does not authorise advertising or addition to a marketing list. Bilbao Trade does not currently send newsletters or conduct automated marketing campaigns through this website.

4. Required data

Fields marked as required are needed to understand and deal with the enquiry. The telephone number is optional. If the essential data are not provided, the message cannot be processed.

5. Recipients and processors

Personal data are not sold or disclosed for advertising purposes. They may be processed by providers supplying necessary web hosting, email, productivity, maintenance or security services under the applicable contractual safeguards. OVHcloud is currently used for web hosting and Microsoft 365 for email and communication management.

Data may also be disclosed to public authorities, courts or law-enforcement bodies where legally required.

6. International transfers

Certain technology providers may provide support or process information from countries outside the European Economic Area. Where applicable, transfers will rely on a European Commission adequacy decision or appropriate safeguards such as the Standard Contractual Clauses, in accordance with Chapter V GDPR.

7. Retention

Data are kept for as long as necessary to answer and manage the enquiry or professional relationship. They may then be retained with restricted access for the statutory limitation and record-keeping periods required to address potential liabilities or legal obligations. Technical logs are retained only for the period reasonably needed for security, diagnostics and the hosting provider’s applicable policies.

8. Individual rights

You may request access, rectification, erasure, restriction, objection and, where applicable, portability by emailing info@bilbaotrade.com or writing to the address shown above. The request must allow identity to be verified; additional documentation will only be requested where necessary.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

9. Automated decisions and profiling

No decisions producing legal effects are made solely by automated means and no profiles are created from information submitted through the website.

10. Children and sensitive data

The website is intended for professional and industrial relationships and is not directed at children. Special-category data or unnecessary personal data relating to third parties should not be submitted.

11. Security and updates

Bilbao Trade applies reasonable technical and organisational measures to protect information. No Internet-connected system can guarantee absolute security, so safeguards are reviewed and adapted to risk.

This policy may be updated to reflect legal, technical or processing changes.

Last updated: 27 August 2026.