1. Data controller
Controller: Alejandro Morales Álvarez (Black Tag Agency).
Tax ID (NIF): 75164424X.
Address: Calle Francisco Capilla 10, 3F · 18220 Albolote (Granada), Spain.
Contact and rights requests: hola@blacktag.agency.
2. Data we process
We process the data you provide through our forms (contact, free audit and project questionnaires): name, email address, company or brand, phone (optional) and the description of your project or need.
If you accept analytics cookies, we also process aggregated browsing data (see the cookie policy).
3. Purpose
To respond to your enquiries, prepare proposals and audits, and manage the commercial relationship. With your consent, to analyse site usage in order to improve it.
4. Legal basis
The processing of form data is based on your consent (art. 6.1.a GDPR), given when you tick the box and submit the form, and on the controller's legitimate interest in answering your request. Analytics relies solely on your consent.
5. Retention
We keep the data for as long as needed to handle your request and the commercial relationship, and thereafter for the legally required periods. Analytics data is kept according to Google Analytics retention periods.
6. Recipients and processors
To provide the service we rely on providers acting as data processors:
Resend — delivery of the email generated by the forms.
Google Analytics 4 (Google) — web analytics, only with your consent.
Hetzner — site hosting (servers in the European Union, Germany).
Cloudflare — content delivery network and security.
We do not sell or share your data with third parties for commercial purposes.
7. International transfers
Some providers (e.g. Resend, Google or Cloudflare) may process data outside the European Economic Area. In those cases, appropriate safeguards apply, such as the Standard Contractual Clauses approved by the European Commission.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hola@blacktag.agency, stating the right you wish to exercise.
If you believe the processing does not comply with the law, you can file a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.
9. Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.