Privacy Policy

1. Data Controller

This Privacy Policy applies to the website babeliumadvisors.com. The person responsible for the processing of your personal data (the Data Controller) is:

2. Personal Data We Collect

We may collect and process the following categories of personal information:

• Contact Form Data: When you contact us via our website form, we collect your name, email address, and any message or information you voluntarily provide in your inquiry.
• Technical & Usage Data: Technical logs generated when interacting with our website, such as browser type, operating system, and IP address (processed temporarily for security and delivery).

3. Purposes and Legal Basis for Processing

We process your data strictly under the following lawful bases established by data protection regulations (including the EU General Data Protection Regulation / GDPR):

• Responding to Inquiries: To address, manage, and answer contact requests and consultation inquiries submitted through the website. (Legal basis: Processing is necessary for pre-contractual steps or based on your consent upon submitting the form — Art. 6(1)(a) / (b) GDPR).
• Website Security & Spam Prevention: To safeguard the website against malicious activity, unauthorized access, and automated abuse (bots). (Legal basis: Legitimate interest to secure IT infrastructure and services — Art. 6(1)(f) GDPR).

4. Bot and Spam Protection (Cloudflare Turnstile)

To protect our contact forms from automated spam submissions and malicious bot traffic without frustrating user experiences, we implement Cloudflare Turnstile, provided by Cloudflare, Inc.

Turnstile evaluates browser telemetry and visitor behavior in the background to confirm that interactions are originating from genuine human users rather than automated scripts. In performing these checks, certain non-identifying technical data (such as HTTP request headers, browser environment markers, and IP address) may be evaluated by Cloudflare.

The use of Cloudflare Turnstile is grounded in our legitimate interest in maintaining website availability, preventing server email abuse, and protecting our communication channels against automated attacks (Art. 6(1)(f) GDPR).

For detailed information regarding how Cloudflare processes and protects this data, please visit the Cloudflare Turnstile Privacy Policy .

5. Data Retention

We retain personal data provided via our contact form only for as long as necessary to fulfill the purpose of your communication, resolve your inquiry, or satisfy any applicable legal or administrative obligations. Once no longer needed, your data will be securely deleted or anonymized.

6. Third-Party Service Providers and Data Transfers

Your data is not sold or shared with third parties for commercial or marketing purposes. We only share data with essential technical service providers who assist in operating our website:

• Hosting and Infrastructure Providers: Web and mail server hosting providers managing our server infrastructure under strict confidentiality.
• Security Services: Cloudflare, Inc., for anti-bot filtering and content delivery network (CDN) performance.

Where any data is transferred outside the European Economic Area (EEA), such transfers are governed by appropriate safeguards, such as the EU Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.

7. Your Rights

Under applicable data protection laws (such as the GDPR), you have the right to:

• Access: Request confirmation on whether we process your data and receive a copy of that data.
• Rectification: Request correction of inaccurate or incomplete personal information.
• Erasure (Right to be Forgotten): Request the deletion of your personal data when it is no longer needed for the purposes collected.
• Restriction of Processing: Request limits on how your personal information is processed under specific circumstances.
• Data Portability: Request to receive your data in a structured, commonly used format.
• Objection: Object to the processing of your data based on legitimate interests.
• Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.

To exercise any of these rights, you may contact Daniel Martínez directly by email at [email protected]. You also have the right to lodge a complaint with your competent Data Protection Supervisory Authority (such as the Spanish Data Protection Agency — AEPD).

8. Updates to this Privacy Policy

We reserve the right to modify this Privacy Policy to reflect changes in legal requirements, technology, or website practices. Any updates will be posted directly on this page with an updated revision date.