Privacy policy

This page explains which personal data we collect when you write to us through the contact form on this website, what we use it for and what rights you have over it.

Last updated: 8 September 2026

1. Who is the data controller

• Company name: BAOWATT, SCCL
• Tax ID (NIF): F02995165
• Postal address: Carrer Castell de Solterra, 4, 2n 2a — 17003 Girona, Spain
• Contact email: info@baowatt.cat

2. What data we collect

We collect only the data you give us voluntarily through the contact form:

• Name
• Email address
• The text in which you describe your project

We do not collect browsing data for advertising purposes. We do use a visitor statistics tool, but only if you give your consent: until you accept, it is not loaded. We explain this in section 11. We recommend that you do not include in your message any personal data that is not needed to deal with your enquiry.

3. Why we process it

• To answer your enquiry and get in touch with you.
• To automatically classify the message so it reaches the line of work that fits best (Produ, Tour, Rent or sustainability). This classification is done by an artificial intelligence system; we explain it in detail in section 7.

4. Legal basis

We process your data on the basis of pre-contractual measures (art. 6(1)(b) GDPR) when the enquiry concerns contracting our services and, in all other cases, on the basis of BAOWATT's legitimate interest in managing the communications it receives (art. 6(1)(f) GDPR).

5. How long we keep the data

We keep the data for as long as it is needed to handle the enquiry and, once that is finished, for a maximum of 12 months. This period is extended to 24 months if the enquiry leads to a contractual relationship or if a legal obligation requires us to keep it longer.

6. Who we share the data with

In order to get your message to our team and classify it, the data passes through the following providers, which act as data processors:

• Cloudflare, Inc. — hosts the service that receives messages from this website and provides the artificial intelligence tools that classify them before they reach us.
• Our email provider — the one that delivers the notification with your message to us.

Both act as data processors and do so under the contract governing this, in accordance with article 28 GDPR.

We do not pass your data on to third parties for commercial purposes.

7. Use of artificial intelligence

To handle enquiries, BAOWATT uses artificial intelligence tools provided by Cloudflare that automatically classify messages in order to route them to the relevant team. This classification is for organisational purposes only and does not produce automated decisions with legal or similarly significant effects.

Put another way: the artificial intelligence does not decide anything about you. It only sorts the inbox. Every enquiry is then read and answered by a person on the team.

8. International transfers

To provide the services we use technology providers that may process personal data outside the European Economic Area. When this happens, BAOWATT guarantees that these international transfers are carried out in accordance with articles 44 et seq. of Regulation (EU) 2016/679, by means of appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission or, where applicable, an adequacy decision.

9. What rights you have

You may exercise the following rights at any time:

• Access — to know what data of yours we hold.
• Rectification — to correct it if it is inaccurate.
• Erasure — to ask us to delete it.
• Objection — to object to our processing when we do it on the basis of our legitimate interest.
• Restriction — to ask us to suspend the processing.
• Portability — to receive it in a reusable format.

To exercise them, write to us at info@baowatt.cat. If we have reasonable doubts about who is exercising the right, we may ask you for the additional information strictly necessary to verify your identity, in accordance with article 12(6) of Regulation (EU) 2016/679. You do not need to send us a copy of any identity document.

10. Complaints

If you believe we have not handled your data properly, you may lodge a complaint with the Catalan Data Protection Authority (apdcat.gencat.cat) or the Spanish Data Protection Agency (aepd.es).

11. Cookies

A cookie is a small file that a website stores in the browser of the person visiting it. By default, this website sets none. The first time you come in we ask whether you want us to use a statistics tool, and until you say yes no cookie is stored in your browser.

If you accept, we use Google Analytics 4, from Google Ireland Limited, to know which pages are visited and how people reach them. These are the cookies it sets:

• _ga — tells one browser from another so the same visits are not counted twice. Lasts 2 years.
• _ga_MC6PY0RR13 — keeps the measurement session state. Lasts 2 years.

The legal basis is your consent, in accordance with article 22.2 of Spanish Act 34/2002 (LSSI-CE) and article 6(1)(a) GDPR. Google may process this data outside the European Economic Area; section 8 of this policy applies. We do not use this data for advertising or to profile anyone, and the tool's advertising features are switched off.

You can change your mind whenever you like, and withdrawing consent is as easy as giving it: the "Cookies" link in the footer of any page brings the question back. You can also delete the cookies from your browser.

To remember what you answered, the website stores one value in your browser (baowatt-galetes, set to "sí" or "no"). It is not a cookie, it does not travel anywhere and it identifies no one: it only avoids asking you again every time. That is why it needs no consent.

This policy was originally drafted in Catalan. In the event of any discrepancy between versions, the Catalan version prevails.