Through our B2B contact form we collect: first and last name, company, email address, phone number, country and description of the commercial enquiry. We do not intentionally collect or process data from persons under 14 years of age.
Additionally, this website uses traffic analytics that collects anonymised and aggregated data: pages visited, load time and country of origin (without individually identifying the user). See section 6.
| Purpose | Legal basis (GDPR) |
|---|---|
| Managing and responding to B2B enquiries | Legitimate interest — Art. 6(1)(f) |
| Maintaining the commercial relationship | Performance of contract — Art. 6(1)(b) |
| Web traffic analytics (Vercel Analytics, cookieless) | Legitimate interest — Art. 6(1)(f) · anonymised data |
| Loading interactive maps (Google Maps, if accepted) | Consent — Art. 6(1)(a) |
| Loading typefaces (Google Fonts, if accepted) | Consent — Art. 6(1)(a) |
Data from commercial enquiries is retained for as long as necessary to handle the request and, where applicable, for the duration of the contractual relationship, plus the applicable statutory limitation periods (generally 5 years for contractual obligations).
Data is not transferred to third parties except as required by law. The following providers act as data processors:
This site uses Vercel Analytics, a traffic analytics service that does not use cookies or persistent identifiers. It collects only aggregated and anonymised data (page views, load speed, browser, country) that cannot individually identify any user. It therefore does not require prior consent under the GDPR (Recital 26). You can review its policy at vercel.com/legal/privacy-policy.
Some of the data processors described in section 5 are established in the United States. Such transfers are covered by Standard Contractual Clauses (Commission Implementing Decision EU 2021/914) and/or the EU–US Data Privacy Framework (adequacy recognised by Commission Implementing Decision EU 2023/1795), which guarantee a level of protection equivalent to that of the European Economic Area.
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by sending an email to info@redbloom.es with the subject "GDPR Rights" and attaching a copy of your identity document.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
If you consider that your rights have not been adequately addressed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es, or with the supervisory authority of your country of residence.
Last updated: May 2026