Privacy policy

Last updated: 5 August 2026

At Briox Baker we take your privacy seriously. This website is an informational site: it does not sell online, it has no cart or registration, and does not install cookies. Here we explain, clearly, what data we process and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

1. Data controller

2. What data we process and for what purpose

a) Browsing the site — anonymous analytics, no cookies

To know how many people visit the website and what content is of interest, we use our own analytics without cookies. We generate a irreversible daily fingerprint from your IP address, browser and a key that changes every day: we do not store your IP and that fingerprint does not make it possible to identify you or to know whether you have come back another day. We record in aggregate form the page visited, the type of device, the source (if you come from another website) and an approximate location (country/city) provided to us by our provider. It is not possible to identify you with this data.

Legal basis: legitimate interest (art. 6.1.f GDPR) in measuring the use of the site anonymously.

b) If you contact us

If you write to us by email, WhatsApp or through the App, we will process the data you provide (name, email, telephone, content of your message) for the sole purpose of dealing with your request and, where applicable, managing the business relationship.

Legal basis: your request and/or the performance of a contractual relationship (art. 6.1.b GDPR).

c) Measurement of our advertising

When you carry out a specific action on the website (for example, send the contact form, clicking to download the App or contacting us via WhatsApp), we may send to Meta Platforms (Facebook/Instagram) a conversion event to measure the effectiveness of our campaigns. Your contact details (email and telephone) always travel encrypted (pseudonymised with SHA-256). Together with them, and only so that Meta can recognise the event, we transmit some unencrypted technical data: your IP address and the browser (user-agent). Under no circumstances do we send your name, email or telephone in clear text.

If you reach the site from a Meta ad, the address carries a click identifier. We use it to know which ad works, and we handle it in two different ways:

• During your visit, it travels in the address of the pages you go through and is sent with the form if you write to us. Nothing is stored on your device, so it does not require your consent.
• Beyond your visit, only if you accept it in the notice that appears on arrival: it is then stored in your browser for 90 days —Meta’s attribution window— to recognise the ad even if you come back another day. If you refuse, nothing is stored and anything from before is erased.

In addition to your email and phone number, we send Meta your hashed first and last name (SHA-256), which improve the recognition of the event. You can change your decision whenever you want from the cookie policy.

Legal basis: legitimate interest in evaluating our advertising. You can object by writing to us at marketing@brioxbaker.com.

d) Access to brand material (/material)

Brand material is reserved for distributors and press. To enter, you type an email address, which we check against the list of people we have given access to. We process: your email, the name or company which we use to register you, how many times you have entered and when the last time was, y which files you download —the latter associated with an internal identifier, never with your email within our event log—. We also store the access attempts that did not work, so that we can give you access if we had registered you with another address.

When you enter, your browser stores a signed pass so you do not have to type your email every time. It is not an advertising cookie and it is not used to track you across other websites: it is strictly necessary for the service you have requested, which is why it does not require prior consent.

Legal basis: the performance or preparation of a business relationship and our legitimate interest in knowing which material is useful in order to improve it (art. 6.1.b and 6.1.f GDPR). You can request the cancellation of your access, and the deletion of this data, by writing to marketing@brioxbaker.com.

Retention: for as long as the access lasts and up to 12 months after the last entry.

e) If you apply for a job (/personal)

When you send your application we process your name, your phone number, the shift you choose, how you get to work, whether you have worked before on a production line or in a factory and your CV. The CV is kept in private storage, accessible only from our internal panel: it has no public address and no one outside the selection process can see it.

We only accept PDF, JPG or PNG files, and we check that the file really is of that type before storing it. It is never opened inside the browser: it is downloaded.

Legal basis: your consent given expressly by ticking the box, and pre-contractual measures taken at your request (art. 6.1.a and 6.1.b GDPR). You can withdraw it whenever you want by writing to marketing@brioxbaker.com, without this affecting the lawfulness of the processing carried out before.

Retention: one year from the moment you send the application. After that period the record and the CV are deleted automatically, without you having to ask. If you want us to delete it sooner, write to us.

Recipients: no one outside Briox Baker. Your CV is not shared with third parties and is not used for advertising.

3. Recipients of the data

We do not sell your data. The following may access it, as processors or providers necessary for the service:

• Cloudflare, Inc. — hosting of the site and of the anonymous analytics.
• Meta Platforms, Inc. — only the pseudonymised conversion events described above.

We may also disclose data where there is a legal obligation.

4. Retention

Analytics data is kept in aggregate and anonymous form. Data arising from your contact is kept for as long as the relationship lasts and, thereafter, for the periods legally required to address possible liabilities.

The job applications and CVs are kept for one year from when they are sent and are then deleted automatically.

5. International transfers

Our providers (Cloudflare, Meta) may process data outside the European Economic Area. In that case, the transfer is covered by appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.

6. Your rights

At any time you can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, by writing to marketing@brioxbaker.com and indicating the right you wish to exercise. If you consider that we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Minors

This site is not directed at minors and we do not knowingly collect their data.

8. Changes to this policy

We may update this Privacy Policy to reflect legal or operational changes. We will publish the current version on this page with its update date.

Informational document in accordance with the regulations in force on the date indicated. It does not constitute legal advice.