Legal

Privacy policy

Last updated: September 2026

1. Our commitment

Bebabum Consulting SLU ("Bebabum", "we") processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD). We apply the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.

2. What data we collect

Depending on your relationship with us, we may process identification and contact data (name, company, postal address, email address, telephone number), data needed to issue invoices, identification-document details where legally required, images, and the content of the messages you send us through the website or by email.

3. Why we process it and on what legal basis

• Answering your enquiries sent through the contact form or by email: legitimate interest and, where applicable, pre-contractual measures taken at your request.
• Delivering the AI consulting, digital and venture-building services you contract, and managing the resulting relationship: performance of a contract.
• Billing and invoicing, and compliance with tax, accounting and other legal obligations: legal obligation.
• Sending communications about contracted services, and, only where you have consented or where we have a legitimate interest as an existing client, information about similar services: consent or legitimate interest. You can object at any time.

4. Who we share it with

We do not sell personal data. Data may be disclosed to public administrations, judges, courts and security forces where the law requires it, and to providers who process data on our behalf under a data-processing agreement, such as cloud hosting and storage, email and productivity tools, and postal or courier services. Some providers may be located outside the European Economic Area; in that case we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses.

5. How long we keep it

We keep your data for as long as the contractual or commercial relationship lasts and, once it ends, blocked for the periods required by tax, accounting and other applicable legislation, after which it is deleted. Data related to enquiries that do not lead to a contract is kept for the time needed to answer and follow up, and no longer than one year.

6. Your rights

You may exercise your rights of access, rectification, erasure, restriction of processing, objection and data portability, and withdraw any consent you have given, by writing to legal@bebabum.com or to our postal address, stating your name and the right you wish to exercise. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).

7. Security

We apply technical and organisational measures appropriate to the risk to protect your data against unauthorised access, loss, alteration or disclosure.

8. Changes

We may update this policy to reflect legal or operational changes. The version in force is always the one published on this page.