Privacy and cookie policy

Data controller

Joan Brull Bayer (BRULL Estudi Creatiu), tax ID 47844360J, Vilafranca del Penedès (Barcelona), Spain. Contact for any privacy matter: joan@brull.studio.

What data we process and why

Contact form: name, email address, company, service of interest, approximate budget and message, plus the language and page you write from. We use them only to answer your inquiry and, where relevant, prepare a quote. Legal basis: your consent when you send the form and steps taken at your request before entering into a contract (Art. 6(1)(a) and 6(1)(b) GDPR).

Spam protection: to tell people from bots, the form uses Cloudflare Turnstile, which analyzes technical browser data and the IP address without advertising cookies. Legal basis: legitimate interest in protecting the website (Art. 6(1)(f)).

Private area and meeting links: when someone opens a meeting link, we record the date and approximate country, to know it has been viewed and for security. Legal basis: legitimate interest.

Statistics: we use Cloudflare Web Analytics, which counts visits in aggregate, without cookies and without identifying anyone.

Security: like any web server, Cloudflare processes IP addresses to serve the site and protect it from attacks (for example, by limiting attempts to access the private area).

How long we keep it

Form messages are kept for as long as needed to handle the inquiry and for two years at most, unless they lead to a project, in which case they are kept as long as tax and accounting rules require. Meeting link logs are deleted when the link expires and within twelve months at most.

Who has access

We do not share data with third parties or use it for advertising. Two providers act as processors: Cloudflare, Inc. (website hosting, form database, spam protection and statistics) and Google (Google Workspace, which delivers the messages by email). Both may process data outside the European Economic Area and participate in the EU-U.S. Data Privacy Framework, in addition to offering standard contractual clauses.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to joan@brull.studio. If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es) or the authority in your country.

Cookies

This website does not use analytics, advertising or social media cookies, which is why it shows no cookie banner.

There is only one strictly necessary technical cookie, exempt from consent: __Host-brull_sessio, which keeps your session in the private area or the access granted by a meeting link. It lasts up to thirty days or until the link expires, and is deleted when you sign out.

If you turn motion on or off or switch the project view (list or grid), we save that preference in your browser (localStorage), with no identifier and nothing sent to our server. You can clear it from your browser settings.