Last updated: August 31st. 2026
This policy explains what personal data is collected when you use wpb-webs.com, why it is collected, and what rights you can exercise.
1) Data controller
- Controller: Roland Beaussant
- Tax ID (NIF): X8164917D
- Address: Av, Mare de Deu de Montserrat 131, Barcelona, Spain
- Contact: roland@wordpress-barcelona.com
- Website: https://wpb-webs.com
2) Data we collect
Contact form. Your name, email address, and whatever you choose to include in your message. Only the form fields are collected — nothing else is gathered without your knowledge at that point.
Browsing data. IP address, browser and device type, pages viewed, time on site, referring page. This is collected by analytics cookies, and only if you consent to them.
WhatsApp widget. No data is sent until you click the button. If you do, the conversation opens in WhatsApp and continues under Meta’s terms, outside this site’s control.
Server logs. The hosting provider keeps technical logs, including IP addresses, for security and troubleshooting.
3) Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Contact form | Answering your enquiry and preparing a quote where relevant | Pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Client records | Keeping a history of exchanges with clients and prospects | Legitimate interest in managing the business relationship (Art. 6(1)(f)) |
| Analytics | Understanding site traffic and improving the site | Your consent (Art. 6(1)(a)), withdrawable at any time |
| Server logs | Site security and incident detection | Legitimate interest in protecting the service (Art. 6(1)(f)) |
| Accounting | Invoicing and statutory record keeping | Legal obligation (Art. 6(1)(c)) |
4) Recipients
Your data is never sold or shared with third parties for advertising. It is accessible to the following providers, acting either as processors or as independent controllers:
- [HOSTING PROVIDER] — hosting of the website and of received messages, servers located in [COUNTRY].
- Google Ireland Limited — analytics through Google Analytics and Google Tag Manager, only after consent.
- Meta Platforms Ireland Limited — only if you start a conversation through the WhatsApp button.
- Where applicable, an accounting firm, for invoicing data only.
5) Transfers outside the European Union
Google and Meta may transfer data to the United States. Those transfers rely on the EU–US Data Privacy Framework and, failing that, on the European Commission’s standard contractual clauses. Declining analytics cookies and not using the WhatsApp button is enough to avoid these transfers.
6) Retention periods
- Contact form messages with no follow-up: 12 months.
- Client correspondence: for the duration of the contract, then 5 years (limitation period).
- Accounting records: 6 years, as required by the Spanish Commercial Code.
- Analytics data: 14 months maximum.
- Server logs: [PERIOD — typically 30 to 90 days].
7) Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw consent at any time without affecting the lawfulness of processing already carried out.
To exercise them, write to info@wpb-webs.com stating which right you are invoking. You will receive a reply within one month. Proof of identity may be requested where there is reasonable doubt.
If you believe your rights are not being respected, you may lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es), or with the authority of your country of residence.
8) Cookies
The site sets technical cookies necessary for it to work, plus analytics cookies that require your prior consent. No non-essential cookie is set before you accept it, and you can change your choice at any time from the cookie banner. Details are in our [COOKIE POLICY — URL].
9) Security
The site is served over HTTPS and administrative access is protected. Reasonable technical and organisational measures are in place to prevent loss, alteration or unauthorised access. No system is infallible, so these measures are reviewed as risks change.
10) Changes
This policy may change to reflect developments on the site or in the law. The last update date appears at the top of this page; substantial changes will be announced on the site.
