Last updated: 21 October 2026
At Digital Agency Barcelona we take your privacy seriously. This policy explains which personal data we process, why, for how long and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD).
1. Data controller
- Controller: SW Web Agencia Digital Barcelona CORP S.L.
- Tax ID (NIF): B-66652819
- Address: Avenida Manuel Girona, 54-56, 08860 Castelldefels (Barcelona), Spain
- Data protection email: [email protected]
2. Which data we process
- Contact form and email: name, email, phone and company (optional), the service you are interested in and the content of your message.
- Clients: contact and billing details, and any data needed to provide the contracted service.
- Browsing: IP address and technical device data. Analytics and marketing cookies are only used if you accept them (see our cookie policy).
We do not ask for special categories of data. If you send them on your own initiative, we will only process them as far as needed to reply to you.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiries and preparing quotes | Your consent (art. 6.1.a GDPR) and pre-contractual steps taken at your request (art. 6.1.b GDPR) |
| Providing contracted services, support and invoicing | Performance of a contract (art. 6.1.b GDPR) and compliance with legal, tax and accounting obligations (art. 6.1.c GDPR) |
| Sending clients information about services similar to those contracted | Legitimate interest (art. 6.1.f GDPR and art. 21.2 LSSI-CE). You can object at any time |
| Measuring website use and campaign effectiveness | Your consent through the cookie panel (art. 6.1.a GDPR and art. 22.2 LSSI-CE) |
| Keeping the website secure and preventing abuse | Legitimate interest (art. 6.1.f GDPR) |
We do not make automated decisions or create profiles with legal effects on you.
4. How long we keep data
- Enquiries: as long as needed to handle them and, at most, one year afterwards if you do not become a client.
- Clients: for the duration of the contract and then for the legal retention periods: six years for commercial records (art. 30 Spanish Commercial Code), four years for tax purposes and five years for possible civil claims (art. 1964 Spanish Civil Code).
- Marketing communications: until you object or withdraw your consent.
- Cookies: for the periods stated in the cookie policy.
5. Recipients
We do not share your data with third parties unless legally required (for example, with the tax authorities or the courts).
To provide our services, some suppliers access data as processors, under a contract with guarantees in line with art. 28 GDPR:
- Web hosting and email providers.
- Cloudflare, Inc. (content delivery network and website security).
- Google Ireland Limited (Google Tag Manager and Google Analytics, only if you accept the related cookies).
6. International transfers
Some of these suppliers (Google and Cloudflare) may process data in the United States. These transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework and, where applicable, on standard contractual clauses approved by the Commission.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, without affecting the lawfulness of prior processing. To do so, email [email protected] stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it.
If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid) or with the supervisory authority of your country of residence.
8. Children
This website is not aimed at children under 14. If you are under that age, please do not give us personal data without your parents’ or guardians’ consent (art. 7 LOPDGDD).
9. Security
We apply technical and organisational measures appropriate to the risk to protect your data, such as encrypted communications (HTTPS), access control and backups.
10. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The current version, with its update date, will always be published on this page.
This English version is provided for convenience. In case of discrepancy, the Spanish version prevails.