PRIVACY AND COOKIES
Privacy and cookies
This page explains what personal data BRACAI uses, why we use it, who we share it with, how long we keep it and your rights. It also explains the cookies on this website. Company details are in the legal notice.
Last updated 26.08.2026.
The short version
The full details are below.
DATA CONTROLLER
BRACAI CONSULTING, S.L., NIF B56995111
REGISTERED OFFICE
C/ Tinent Coronel Sagués 12, 08770 Sant Sadurní d'Anoia, Barcelona, Spain
CONTACT FOR DATA MATTERS
DO WE SELL YOUR DATA
No. We do not sell personal data.
WHO RECEIVES IT
Service providers under contract, plus advisers and authorities where the law requires it. Section 4.
WHERE IS IT PROCESSED
In the EEA and, where necessary, outside it under the safeguards in section 5.
HOW LONG WE KEEP IT
Depends on the record. Each period is listed in section 6.
YOUR RIGHTS
Access, correction, erasure, restriction, objection, portability, and withdrawing consent. Section 7.
IF YOU HAVE A CONCERN
You can complain to the AEPD in Spain, or to the supervisory authority where you live.
COOKIES
Essential cookies keep the site working. Analytics requires your consent. Go directly to section 9.
1. Who is responsible for your data?
Company: BRACAI CONSULTING, S.L.
NIF: B56995111
Registered office: C/ Tinent Coronel Sagués 12, 08770 Sant Sadurní d'Anoia, Barcelona, Spain
Email: info@bracai.eu
​​
BRACAI is responsible for the uses of personal data described on this page.
​
Sometimes we handle personal data only for a client. In that case, the client decides how the data is used and its privacy information applies. If your request concerns that data, we will direct you to the client or help the client respond.
2. What data do we use and why?
We only use personal data reasonably needed for the following purposes:
​
Enquiries and requested content. We use your contact details, company information and message to respond to you, prepare a proposal, provide requested materials or register you for an event. We do this because you asked us to respond or take steps towards working together. Replying to genuine business enquiries is also a reasonable part of running BRACAI.
​
Clients and suppliers. We use contact, contractual, service, billing and payment information to provide services, manage our business relationship, issue invoices and meet legal duties. We need this information to carry out our contracts, meet accounting and other legal requirements, and manage or protect the working relationship.
​
Newsletter and marketing. We send BRACAI marketing emails when you have consented or, where legally permitted, to existing clients about similar BRACAI services. Every message includes an unsubscribe link. If you unsubscribe or object, we stop marketing to that address and keep only the minimum information needed to respect your choice. We do not send offers from other companies without your consent.
​
Recruitment. We use the information in your application to assess your candidacy and communicate with you because you asked us to consider you for a possible role. We retain applications for future opportunities only with your consent.
​
Website operation. We process limited device, connection and security information needed to keep the website working and secure. This is a reasonable part of running the website. Analytics and other optional cookies are used only with your consent. The details and controls are in section 9.
​
We do not use only automated systems to make decisions that have a legal or similarly significant effect on you.
​
When we use data for a reasonable business need, we first consider how that use may affect you. You may object as explained in section 7.
3. Where does the data come from?
We normally receive personal data directly from you. We may also receive professional contact details from your employer, a referral, an event organiser or a publicly available professional source. We use only information relevant to a real business purpose.
​
Fields marked as required are needed to deal with your request or provide the relevant service. Without them, we may be unable to do so.
4. Who receives the data?
We do not sell personal data.
​
We share data with service providers that help us run the business, including website hosting, email, cloud storage, customer management, accounting, payment, analytics and event services. We share only what they need for their work. Their contracts require them to protect the data and use it only for the agreed service.
​
We may also share data when the law requires it, with professional advisers, or when needed to deal with a legal claim.
​
We use appropriate security measures and limit access to people who need the data for their work.
5. International transfers
Some service providers may process data outside the European Economic Area. Where this occurs, we use a legally recognised safeguard, such as an adequacy decision, the EU–US Data Privacy Framework for participating organisations, or the European Commission's standard contractual clauses.
​
Contact us if you want more information about a safeguard or an available copy.
6. How long do we keep the data?
We keep personal data only while we need it. If we must keep a record for legal reasons or a possible claim, we restrict access and stop using it for everyday business. When that period ends, we delete the data or permanently remove anything that identifies you.
​
Enquiries and requested materials. While the enquiry or business opportunity is active, and normally for up to two years after the last meaningful contact. We may keep relevant records longer if we are still working together, you ask us to follow up, or a possible legal claim requires it.
​
Client and supplier records. While we work together and normally for six years after the last relevant business or accounting entry. We may keep them longer if a law, investigation or dispute requires it.
​
Invoices and accounting records. Normally for six years after the last relevant accounting entry. We may keep them longer if a law, investigation or dispute requires it.
​
Marketing data. Until you unsubscribe or object. We may keep your email address on a do-not-contact list so we remember your choice.
​
Unsuccessful job applications. Until the recruitment process ends, or for up to twelve months if you consent to consideration for future roles.
​
Cookie and analytics information. For the periods stated in section 9.
​
Anonymous information. We may keep information that can no longer identify anyone because it is no longer personal data.
7. Your rights
Your rights depend on the situation. You may ask us to:
-
Give you access to your personal data.
-
Correct or delete it.
-
Restrict or object to its use.
-
Give you certain data in a reusable format
-
Withdraw consent at any time.
Direct marketing. You can object to direct marketing at any time. If you do, we will stop using your details for that purpose.
​
If you withdraw consent, this does not change anything we lawfully did before then.
​
To exercise a right, email info@bracai.eu. We may ask for information needed to confirm your identity.
You may also submit a complaint to the Spanish Data Protection Agency (AEPD) at www.aepd.es, or to the supervisory authority in the EEA country where you live or work.
8. Updates
We update this page when our services or use of data changes. The date above shows when it was last updated.
Cookies are small files saved on your device when you visit a website. Similar browser storage can do the same kind of job. Some keep the site secure and working. Others measure how people use it.
​
Who provides them. This website runs on Wix. Wix provides the hosting, security, consent controls and analytics technology described here.
​
Essential security cookies. These work without consent because the website needs them for security. XSRF-TOKEN, hs, TS*, server-session-bind, client-session-bind, oAuthState and sec-fetch-unsupported last for the browser session. They protect requests, detect attacks or fraud, support secure sessions and handle browser security limits.
​
Essential website cookies. svSession and wixSession last for up to 12 months and support core site functions. SSR-caching and bSession last for up to 24 hours and support rendering and platform performance. fedops.logger.sessionId lasts for up to 12 months and helps identify reliability problems. _wixAB3|* lasts for up to six months and supports Wix platform tests.
​
Your cookie choice. Wix saves your choice so the site can respect it on later visits. The choice remains until it expires, you clear it in your browser, or we ask you to choose again after a relevant change.
​
Analytics. If you accept analytics, Wix Analytics measures visits, pages viewed, session length, approximate location, device and browser information, errors, and clicks on buttons or links. This helps us understand and improve the website. Analytics identifiers last for the session or for up to 12 months. Analytics is off until you accept it.
​
Advertising. BRACAI does not currently use cookies for behavioural advertising, retargeting or advertising profiles.
​
Your controls. The cookie banner lets you accept or reject optional cookies. The website remains available if you reject them. Your browser also lets you view, block or delete stored cookies. Deleting cookies can remove your saved choice.
​
Wix can change technical cookie names when it updates its platform. Its current reference list is in Wix's cookie documentation. Wix's handling of personal data is explained in Wix's privacy policy. International processing is covered in section 5 above.