Privacy policy

Last updated: 5 August 2026

At Briox Baker we take your privacy seriously. This website is an informational site: it does not sell online, it has no cart or registration, and does not install cookies. Here we explain, clearly, what data we process and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

1. Data controller

2. What data we process and for what purpose

a) Browsing the site — anonymous analytics, no cookies

To know how many people visit the website and what content is of interest, we use our own analytics without cookies. We generate a irreversible daily fingerprint from your IP address, browser and a key that changes every day: we do not store your IP and that fingerprint does not make it possible to identify you or to know whether you have come back another day. We record in aggregate form the page visited, the type of device, the source (if you come from another website) and an approximate location (country/city) provided to us by our provider. It is not possible to identify you with this data.

Legal basis: legitimate interest (art. 6.1.f GDPR) in measuring the use of the site anonymously.

b) If you contact us

If you write to us by email, WhatsApp or through the App, we will process the data you provide (name, email, telephone, content of your message) for the sole purpose of dealing with your request and, where applicable, managing the business relationship.

Legal basis: your request and/or the performance of a contractual relationship (art. 6.1.b GDPR).

c) Measurement of our advertising

When you carry out a specific action on the website (for example, send the contact form, clicking to download the App or contacting us via WhatsApp), we may send to Meta Platforms (Facebook/Instagram) a conversion event to measure the effectiveness of our campaigns. Your contact details (email and telephone) always travel encrypted (pseudonymised with SHA-256). Together with them, and only so that Meta can recognise the event, we transmit some unencrypted technical data: your IP address and the browser (user-agent). Under no circumstances do we send your name, email or telephone in clear text.

Since 3 August 2026 the click identifier from Meta ads is no longer stored or transmitted. Measurement is carried out solely with the encrypted contact details and the technical data indicated above.

Legal basis: legitimate interest in evaluating our advertising. You can object by writing to us at [email protected].

d) Access to brand material (/material)

Brand material is reserved for distributors and press. To enter, you type an email address, which we check against the list of people we have given access to. We process: your email, the name or company which we use to register you, how many times you have entered and when the last time was, y which files you download —the latter associated with an internal identifier, never with your email within our event log—. We also store the access attempts that did not work, so that we can give you access if we had registered you with another address.

When you enter, your browser stores a signed pass so you do not have to type your email every time. It is not an advertising cookie and it is not used to track you across other websites: it is strictly necessary for the service you have requested, which is why it does not require prior consent.

Legal basis: the performance or preparation of a business relationship and our legitimate interest in knowing which material is useful in order to improve it (art. 6.1.b and 6.1.f GDPR). You can request the cancellation of your access, and the deletion of this data, by writing to [email protected].

Retention: for as long as the access lasts and up to 12 months after the last entry.

3. Recipients of the data

We do not sell your data. The following may access it, as processors or providers necessary for the service:

• Cloudflare, Inc. — hosting of the site and of the anonymous analytics.
• Meta Platforms, Inc. — only the pseudonymised conversion events described above.

We may also disclose data where there is a legal obligation.

4. Retention

Analytics data is kept in aggregate and anonymous form. Data arising from your contact is kept for as long as the relationship lasts and, thereafter, for the periods legally required to address possible liabilities.

5. International transfers

Our providers (Cloudflare, Meta) may process data outside the European Economic Area. In that case, the transfer is covered by appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.

6. Your rights

At any time you can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, by writing to [email protected] and indicating the right you wish to exercise. If you consider that we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Minors

This site is not directed at minors and we do not knowingly collect their data.

8. Changes to this policy

We may update this Privacy Policy to reflect legal or operational changes. We will publish the current version on this page with its update date.

Informational document in accordance with the regulations in force on the date indicated. It does not constitute legal advice.