Privacy & Cookies Policy

1. What data we process and why

Project briefs

We process the data in the "Start a project" form and the source of your visit to review your request, contact you and prepare a proposal. Legal basis: steps taken at your request prior to a contract (art. 6.1.b GDPR). Required fields are needed to process the request. We keep the data for up to two years after our last contact or, if we work together, for the duration of the relationship and the legal retention periods.

Messages

We process the name, email and message you send us in order to reply. Legal basis: our legitimate interest in answering the communications we receive (art. 6.1.f GDPR). We keep them for up to two years after our last contact.

Job applications

We process the CV and details you send to careers@byblankspace.com to manage the selection process. Legal basis: steps taken at your request prior to a contract (art. 6.1.b GDPR) or, for unsolicited applications, your consent (art. 6.1.a GDPR). We keep them until the process ends. If you allow us to consider you for future vacancies, or if the application is unsolicited, we keep it for one year at most.

Where our enquiries come from

The website stores in your browser how you arrived (referring site, landing page and campaign parameters). It is deleted when you close the tab and only reaches us if you submit a form. Legal basis: our legitimate interest in knowing which channels bring us enquiries (art. 6.1.f GDPR). If you accept marketing cookies, we also store your first visit and ad click identifiers for 30 days. Legal basis: your consent.

Analytics and campaigns

We measure visits and website performance in aggregate and without cookies, based on our legitimate interest (art. 6.1.f GDPR). With your consent, we use Google Analytics to measure how the website is used, and the Meta, Pinterest and LinkedIn tags to measure our campaigns and show ads on those platforms. If you accept marketing cookies and submit a form, we also notify Meta of the submission together with your hashed email. Legal basis: your consent (art. 6.1.a GDPR and art. 22.2 LSSI).

Meta Platforms Ireland Ltd., Pinterest Europe Ltd. and LinkedIn Ireland Unlimited Company are joint controllers with BLANK STUDIO for the collection and transmission of that data. After that, each of them processes it as an independent controller under its own privacy policy.

Security

We process technical data, such as IP address, to serve the website, prevent spam and fix errors. Legal basis: our legitimate interest (art. 6.1.f GDPR). This data is kept for short periods.

2. Recipients

We do not sell your data. We use providers that process it on our behalf, under a data processing agreement, for website hosting, content management, email, project management, email delivery, spam protection, error monitoring and analytics. With your consent, Meta, Pinterest and LinkedIn also receive data. We will also disclose data to the authorities where required by law.

3. International transfers

Some providers are based in the United States or access data from there. These transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

4. Your rights

You can request access to, rectification, erasure, restriction and portability of your data, object to its processing and withdraw your consent at any time by writing to hello@byblankspace.com. You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

5. Cookies

We use the cookies and browser storage needed for the website to work: remembering your cookie choice and your language, and keeping the form while you fill it in. With your consent, we also use:

• Analytics · Google (Google Analytics) · measure visits and how the website is used · 2 years.
• Marketing · BLANK STUDIO · remember the campaign your first visit came from · 30 days.
• Marketing · Meta · measure visits and ads on Meta · 3 months.
• Marketing · Pinterest · measure visits and ads on Pinterest · 1 year.
• Marketing · LinkedIn · measure visits and ads on LinkedIn · up to 1 year.

You can accept, reject or configure cookies on your first visit. If you make no choice, no optional cookie is loaded. You can change or withdraw your consent at any time with the "Cookie preferences" button at the end of this page. We keep your choice for 12 months.

Cookie preferences