Legal Notice & Privacy Policy
Last updated: 17 September 2026
Legal Notice
This Legal Notice governs the use of the website https://brunnhoff.cyon.site/.
Website owner and service provider:
Lars Brunnhoff, trading as Brunnhoff & Partners
Self-employed professional registered in Spain
Business name:
Lars Brunnhoff
Trading name:
Brunnhoff & Partners
Tax identification:
NIE: Z4490492T
EU VAT / NIF VAT: ESZ4490492T
Business address:
Lars Brunnhoff
Calle Sindicato 74
2 derecha
07002 Palma
Spain
Email: office@brunnhoff.com
Website: https://brunnhoff.cyon.site/
Professional activity:
Business consultancy, operational support for private residences and property related services.
This website presents the professional services of Lars Brunnhoff, trading as Brunnhoff & Partners. The services include business consultancy, operational support, coordination and supervision services for private residences and selected property related projects in Mallorca.
Lars Brunnhoff is responsible for the content of this website.
The content of this website is provided for general information purposes only. It does not constitute legal, tax, financial or technical advice. Individual arrangements are only binding if agreed directly in writing.
All content on this website, including texts, structure, design elements, photographs, graphics and other materials, is protected by applicable intellectual property laws unless otherwise stated. Any reproduction, distribution, public communication or transformation requires prior written permission from Lars Brunnhoff, unless legally permitted.
This website may contain links to external websites. Lars Brunnhoff has no control over the content of external websites and accepts no responsibility for their content, availability, security or privacy practices.
This Legal Notice is governed by the laws of Spain, without prejudice to any mandatory consumer protection rules that may apply.
Privacy Policy
The protection of your personal data is important to me. This Privacy Policy explains how personal data is processed when you visit this website or contact me.
Personal data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation, and applicable Spanish data protection law, including Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights.
1. Data controller
The controller responsible for the processing of personal data on this website is:
Lars Brunnhoff, trading as Brunnhoff & Partners
Calle Sindicato 74
2 derecha
07002 Palma
Spain
Email: office@brunnhoff.com
A data protection officer is not legally required.
2. Personal data processed when visiting the website
2.1 Server log files
When you visit this website, technical data may be processed automatically by the hosting provider and server systems. This may include:
- IP address
- Date and time of access
- Requested URL
- Referrer URL
- Browser type and version
- Operating system
- Transferred data volume
Purpose: technical provision of the website, system security, error analysis and misuse prevention.
Legal basis: Article 6(1)(f) GDPR, legitimate interest in operating a secure and functional website.
2.2 Contact by email
This website does not use a contact form. If you contact me by email, the personal data contained in your message will be processed. This may include your name, email address, message content and any other information you voluntarily provide.
Email communication is handled through Proton Mail, an email service provided by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. Data is processed in Switzerland.
Purpose: responding to your enquiry, preparing or performing professional services, and maintaining business communication.
Legal basis: Article 6(1)(b) GDPR where the communication relates to pre contractual measures or contract performance, and Article 6(1)(f) GDPR where there is a legitimate interest in responding to business enquiries.
If legal retention duties apply, the legal basis may also be Article 6(1)(c) GDPR.
Switzerland is recognised by the European Commission as providing an adequate level of data protection, so no additional transfer safeguards are required for this processing.
Proton Privacy Policy: https://proton.me/legal/privacy
3. Cookies and consent management
This website uses Real Cookie Banner to manage cookie and service consents.
Real Cookie Banner may process information necessary to store and document your consent choices. This may include:
- Consent choices
- Timestamp of consent
- Technical metadata
- Information required to prove and manage consent
Purpose: obtaining, managing and documenting consent for cookies and third party services.
Legal basis: Article 6(1)(c) GDPR for compliance with legal obligations regarding consent documentation, and Article 6(1)(f) GDPR for the secure and compliant operation of the website. Where optional cookies or services are used, the legal basis is Article 6(1)(a) GDPR.
You can change or withdraw your cookie consent at any time via the “Cookie Settings” link in the website footer.
Further information is available in the Cookie Policy: https://brunnhoff.cyon.site/cookie-policy/
4. Third party services
4.1 GoDaddy hosting
This website is hosted by GoDaddy on a Managed WordPress plan. The hosting provider processes technical data necessary for the delivery, security and maintenance of the website.
This may include server log files, security data and technical metadata. As part of its hosting infrastructure, GoDaddy also automatically runs a performance-monitoring feature (Airo Site Optimizer) that measures page loading speed and assigns each visitor a unique, persistent identifier through the cookies _tccl_visit and _tccl_visitor. These cookies are only activated with your consent given through the cookie banner. Further detail is available in the Cookie Policy.
Purpose: hosting, technical provision, website security, system maintenance and, where consented to, performance monitoring.
Legal basis: Article 6(1)(f) GDPR, legitimate interest in operating a secure and available website. Where the performance-monitoring cookies described above are used, the legal basis is Article 6(1)(a) GDPR, consent.
Data transfers to the United States may occur. GoDaddy Operating Company, LLC and GoDaddy.com, LLC have self-certified their compliance with the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework, recognised as an appropriate safeguard under the GDPR.
GoDaddy Privacy Policy: https://www.godaddy.com/legal/agreements/privacy-policy
4.2 WordPress
This website is built with WordPress. WordPress is used to manage and display website content. Depending on the technical configuration, WordPress may process technical data necessary for the operation and security of the website.
Purpose: website management, content delivery and technical functionality.
Legal basis: Article 6(1)(f) GDPR, legitimate interest in operating and maintaining the website.
4.3 Google Search Console
This website uses Google Search Console, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Search Console is used to monitor the technical visibility of the website in Google Search, including search queries, indexing status, crawling errors and website performance.
Google Search Console generally provides aggregated website performance data to the website owner. It does not allow this website to identify individual visitors and does not set cookies on visitor devices through this website.
Purpose: technical website monitoring, search performance analysis and security improvement.
Legal basis: Article 6(1)(f) GDPR, legitimate interest in technical optimisation, visibility and security of the website.
Google Privacy Policy: https://policies.google.com/privacy
4.4 Plausible Analytics
This website uses Plausible Analytics, a privacy-focused, cookieless web analytics service. Plausible Analytics does not use cookies and does not collect or store any personal data that could identify an individual visitor.
Purpose: analysis of aggregated website usage to understand and improve website content and performance.
Legal basis: Article 6(1)(f) GDPR, legitimate interest in understanding website usage. Because Plausible Analytics does not process personal data or set cookies, its use does not require consent.
Plausible Privacy Policy: https://plausible.io/privacy
5. Recipients of personal data
Personal data may be shared with service providers where necessary for the operation of this website, communication with you, legal compliance, technical security or the performance of professional services.
This may include hosting providers, website technology providers, analytics providers, email and messaging providers, professional advisers and public authorities where legally required.
Personal data is not sold.
6. International data transfers
Some providers used by this website may process data outside the European Economic Area, including in the United States. This applies in particular to the hosting provider GoDaddy, whose relevant entities have self-certified their compliance with the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework, as recognised safeguards under the GDPR. Further information is available at www.dataprivacyframework.gov.
Where other international transfers occur, they are carried out in accordance with the requirements of the GDPR, including adequacy decisions, standard contractual clauses or other legally recognised safeguards where applicable.
7. Retention periods
Personal data is retained only for as long as necessary for the purposes for which it was collected, unless statutory retention obligations require longer storage.
- Business and tax related records may be retained for the legally required retention periods.
- Email enquiries are retained for as long as necessary to respond to the enquiry and, where applicable, to document business communication or contractual matters.
- Cookie consent records are retained for the period required to document consent and manage preferences.
- Server log files are retained for a limited period necessary for security, technical operation and misuse prevention.
Where data is subject to legal retention duties, it may be restricted and stored until the applicable retention period has expired.
8. Your rights
Subject to the conditions set out in applicable data protection law, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to withdraw consent at any time where processing is based on consent
- Right to lodge a complaint with a supervisory authority
To exercise your rights, you can contact me at: office@brunnhoff.com
You also have the right to lodge a complaint with the Spanish Data Protection Agency:
Agencia Española de Protección de Datos
Edificio Cuzco IV
Paseo de la Castellana, 141, planta 9
28046 Madrid
Spain
Website: https://www.aepd.es/
9. Data security
This website uses technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse or alteration. These measures include HTTPS encryption, server side security measures, access controls and technical protection mechanisms provided by the hosting and website systems.
No internet based system can be guaranteed to be completely secure, but reasonable and recognised security measures are applied.
10. Changes to this Privacy Policy
This Privacy Policy may be updated where necessary, for example if the website, services, legal requirements or technical tools change. The current version is available on this page.