Privacy policy

Last updated: 2 November 2026

BBF Consultores y Asesores Tributarios S.L. (“BBF”, “we”) is committed to protecting your personal data. This policy explains what data we collect through www.bbfconsultores.es, why we use it, how long we keep it and what rights you have, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”), Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD) and Law 34/2002 on Information Society Services and Electronic Commerce (LSSI).

1. Data controller

  • Company: BBF Consultores y Asesores Tributarios S.L.
  • Tax ID (CIF): B67763342
  • Address: Calle Sierra Blanca 2, 3C, 29601 Marbella (Málaga), Spain
  • Trade name: BBF Consultores
  • Data protection contact: through our contact form or by post to the address above.

2. What data we collect

We only collect the data you choose to give us:

  • Contact and appointment forms: name, email address, telephone number and the content of your message.
  • Email, telephone or WhatsApp: the data you share with us when you contact us through these channels.
  • Clients: the identification, tax, financial and other data needed to provide the tax, accounting and legal services you engage us for.

This website does not use analytics, advertising or social media tracking cookies. See our Cookie policy.

3. Why we use your data and on what legal basis

  • To answer your enquiries and arrange appointments. Legal basis: your consent when you submit a form, and steps taken at your request before entering into a contract (Article 6(1)(a) and (b) GDPR).
  • To provide the services you engage us for. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
  • To comply with our legal obligations, such as tax, accounting and anti-money laundering obligations. Legal basis: legal obligation (Article 6(1)(c) GDPR).

We do not make automated decisions or create profiles that produce legal effects on you. We will not send you commercial communications without your prior consent.

4. How long we keep your data

  • Enquiries that do not lead to a contract: for as long as needed to answer them and, in any case, no longer than one year.
  • Clients: for the duration of the professional relationship and, afterwards, for the periods required by law (for example, tax, commercial and anti-money laundering legislation).

5. Who we share your data with

We do not sell your data or share it with third parties, except where required by law (for example, the Spanish Tax Agency or courts) or where necessary to provide the service you have requested, with your knowledge.

Some service providers process data on our behalf, such as our web hosting and email providers. They act as data processors under a contract that obliges them to protect your data and to use it only on our instructions.

If you contact us through WhatsApp, your messages are also processed by WhatsApp (Meta) under its own privacy policy.

6. International transfers

Our main providers store data within the European Economic Area. If any provider were to process data outside the EEA, we would only do so with the safeguards required by the GDPR, such as an adequacy decision of the European Commission or Standard Contractual Clauses.

7. Your rights

You may exercise the following rights at any time:

  • Access to your personal data.
  • Rectification of inaccurate data.
  • Erasure of your data when it is no longer needed.
  • Restriction of processing.
  • Objection to processing.
  • Data portability.
  • Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact us through our contact form or write to Calle Sierra Blanca 2, 3C, 29601 Marbella (Málaga), Spain. We may ask you to verify your identity.

If you believe we have not handled your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

8. Security and confidentiality

We apply technical and organisational measures appropriate to the type of data we process to prevent its loss, misuse, alteration or unauthorised access. All information exchanged with our clients is treated as confidential and subject to professional secrecy.

9. Accuracy of your data

You guarantee that the data you provide is accurate and up to date, and you are responsible for any inaccurate data you submit. Please let us know of any changes so that we can keep your data up to date.

10. Minors

Our services are intended for adults. We do not knowingly collect data from children under 14 years of age.

11. Changes to this policy

We may update this policy to reflect changes in the law or in our services. The current version will always be available on this page, with the date of the last update.

12. Legal notice and cookies

Information about the owner of this website and its terms of use is available in our Legal notice. Information about cookies is available in our Cookie policy.