First-party web form
Bibaldi stores enquiries and form fields in a private database accessible only to authorised staff through an authenticated panel, and forwards them to corporate email. Contact records do not store IP addresses, user agents or device identifiers.
Details pending confirmation
Before this information is treated as final, the following must be completed: Commercial Registry details, Data Protection Officer contact where applicable, applicable regulatory status and sector authorisations, scope of intermediation mandates, definitive email-provider agreement and safeguards, and agreed jurisdiction.
1. Controller
The controller is Bibaldi Gestion S.L., owner of the Bibaldi brand, with Spanish tax ID B54845730 and address at Paseo de la Castellana 194, Madrid, Spain. General email: info@bibaldi.com. Privacy and data-subject rights email: privacy@bibaldi.com. The Data Protection Officer’s contact details remain pending if appointment is legally required or one has been designated voluntarily.
2. Data we may process
- Only with your optional consent, this tab stores up to 100 public Bibaldi paths and visit times for a maximum of 4 hours. We exclude query strings, fragments, IP addresses, location, identifiers and device data. History starts when you consent and is sent only with the form; it is retained with the enquiry for up to 48 months. Local history is cleared when you withdraw consent, submit successfully or end the session. You can contact us without enabling it.
- Identity and contact details: full name, email and telephone.
- Professional and transaction context, when provided optionally: company, role and country.
- Enquiry type, selected asset references and information voluntarily included in the message.
- Optional marketing consent, when selected.
- Minimum submission-security data, such as timing, origin and anti-abuse checks; these are not used for profiling.
Special-category data and documents are not requested at first contact. Do not include them in free-text fields.
3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Answer enquiries and provide requested information. | Pre-contractual steps requested by you and legitimate interests in professional communications, as applicable. | 48 months for the pre-contractual enquiry. |
| Assess requests for further information, qualification, NDA and data-room access. | Requested steps, legitimate interests in protecting information and legal/KYC duties where applicable. | For the process and applicable legal periods; final schedule pending confirmation. |
| Meet legal duties, defend claims and preserve evidence. | Legal obligation and legitimate interests. | For applicable statutory limitation periods. |
| Marketing communications. | Only with separate consent or another specifically documented legal basis. | Until consent is withdrawn or an objection is made. |
Reading this policy does not require “acceptance”. Optional consents must be requested separately and never pre-ticked.
4. Recipients and providers
Bibaldi stores enquiries and form fields in a private database accessible only to authorised staff through an authenticated panel, and forwards them to corporate email. Contact records do not store IP addresses, user agents or device identifiers.
baironpg@bibaldi.com · jromero@bibaldi.com · baironpg@isarquitectura.com
5. International transfers
The first-party form does not disclose data to Fillout. Email infrastructure may involve processing by providers operating outside the European Economic Area. Bibaldi must keep the processor agreement, effective processing locations, subprocessors and, where applicable, standard contractual clauses, an adequacy decision or another valid safeguard documented.
Privacy by design
The form, map and resources are first-party. We do not load third-party analytics or advertising. Page history is optional and requires prior consent; anti-abuse checks are used only to protect the form.
6. Rights
You may request access, rectification, erasure, objection, restriction and portability, withdraw consent without retroactive effect and complain to the Spanish Data Protection Agency. To exercise your rights, email privacy@bibaldi.com or write to Bibaldi Gestion S.L., Paseo de la Castellana 194, Madrid, Spain, stating “Data protection”. Identity verification may be requested.
7. Decisions, children and security
No decision with legal or similarly significant effects is expected to be based solely on automated processing. The website and opportunities are not directed to people under 18. Reasonable safeguards are used, but no system is infallible.
8. Source
See the GDPR.