Privacy policy

1. Data controller

The controller of personal data collected through this website is:

2. Data collected and purposes

Contact form

When you submit the contact form, we collect the following data:

• Name and surname
• Organisation name
• Email address
• Type of enquiry (selected in the form)
• Message content

Purpose: to respond to your enquiry and, where applicable, to prepare a diagnosis or service proposal.

Legal basis: consent of the data subject (Article 6(1)(a) GDPR), expressed by submitting the form and ticking the consent checkbox.

Newsletter El Despacho and monthly sector report

If you subscribe to our periodic communications, we collect your email address.

Purpose: to send the fortnightly newsletter and/or monthly sector report to which you have subscribed.

Legal basis: consent of the data subject (Article 6(1)(a) GDPR).

Navigation data

This website may collect technical browsing data (IP address, browser type, pages visited, session duration) through web analytics tools. This data is processed in aggregate form and is not linked to personal identifiers.

Legal basis: legitimate interest of the controller (Article 6(1)(f) GDPR) in analysing site usage to improve its operation.

3. Recipients of data

Personal data is not sold or transferred to third parties for commercial purposes. We may share data with service providers acting as data processors under contract (for example, email delivery platforms or web hosting providers), solely for the purpose of providing contracted services and with appropriate safeguards.

Where we use providers located outside the European Economic Area, we ensure that adequate data protection safeguards are in place (adequacy decisions, standard contractual clauses or other mechanisms provided for under the GDPR).

4. Retention period

Contact form data is retained for as long as necessary to handle the enquiry and, where applicable, the contractual relationship arising from it, plus the applicable legal limitation period.

Subscription data for periodic communications is retained until the data subject withdraws consent.

Aggregated navigation data is retained in accordance with the retention policy of the analytics tool used.

5. Your rights

Under the GDPR, you have the right to:

• Access: know what personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data when it is no longer necessary.
• Restriction: request that we restrict processing in certain circumstances.
• Data portability: receive your data in a structured, commonly used format.
• Objection: object to processing based on legitimate interest.
• Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, write to us at info@blumdigitalpr.com. We will respond within the period required by applicable law (generally one month from receipt of the request).

You also have the right to lodge a complaint with the competent supervisory authority. In Austria: Datenschutzbehörde (DSB).

6. Cookies

This website may use technically necessary cookies for its operation and analytics cookies. Non-essential cookies are only activated with your prior consent, managed through the cookie notice displayed when you access the site.

You can configure or reject cookies at any time from the cookie banner or from your browser settings.

7. Changes to this policy

Blum Digital PR may update this privacy policy to reflect regulatory or service changes. The current version will always be available on this page with the date of the last update.