1. Data controller and scope
BigHeads, based in Barcelona, Spain, is presented as the controller for information submitted through this demonstration website. This policy covers website enquiries, quotation requests, project configuration and direct contact.
Before publication, the final company name, registration details, tax number and full legal address must be inserted and verified.
2. Information we may collect
We may receive information you provide directly and limited technical information required to operate and secure the website.
- Name, company, email address, telephone number and project location
- Project requirements, estimated area, budget range and messages
- Files intentionally attached to an enquiry
- Necessary technical records such as security events and consent preferences
3. Purposes and legal bases
Information may be used to answer enquiries, prepare technical consultations and quotations, manage requested services, protect the website and meet legal obligations. The final policy must identify the applicable legal basis for each purpose under relevant law.
- Responding to a request or taking pre-contractual steps
- Legitimate interests in securing and improving the service
- Consent where optional cookies or marketing communications are used
- Compliance with legal and accounting obligations
4. Retention, recipients and transfers
Information should be retained only for the period necessary for the stated purpose and applicable legal requirements. Access should be limited to authorised BigHeads personnel and vetted service providers.
Any international transfers, hosting providers, CRM systems or email processors must be identified and supported by appropriate safeguards before publication.
5. Your rights and contact
Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, request portability and withdraw consent. You may also complain to the competent supervisory authority.
For privacy questions or requests, contact hello@bigheads.es. Identity verification may be required before a request is completed.