Booking a conversation
When you book within BUSCOS, we use your name, email, date and time and any context you choose to provide to arrange the conversation you requested and manage changes or cancellation. Processing is based on responding to your request and taking steps before a possible engagement, not subscribing you to advertising. We verify your email with a code before confirming a booking. The BUSCOS server at OVHcloud relays code delivery through Brevo without storing the email address or code in its delivery ledger. Turnstile protects this request against bots; it does not receive the contents of your enquiry. Brevo sends the verification code; Google Calendar and Google Meet handle the event, invitation and video call. With the calendar owner's permission, BUSCOS checks their availability and uses the connection to create and manage its own booking events. Google receives your name, email and the context you provide to arrange and prepare for the conversation and manage the invitation and video call. Cloudflare runs the booking system and stores its private records. A protected technical session cookie, inaccessible to page scripts, lets you recover and manage your booking; it may remain for up to 40 days, although management access expires seven days after the conversation. You can also recover your booking by verifying the same email. Do not include confidential information. Codes expire after ten minutes and sessions without a booking after 24 hours. Scheduled cleanup removes the name, email address and context stored to manage the booking from the active BUSCOS store starting 30 days after the conversation. To prevent duplicate bookings, stop a verification being reused and investigate incidents, the calendar keeps pseudonymised technical records of operations and consumed verifications. Operation records may include identifiers and a keyed cryptographic fingerprint (HMAC) of the combined request data, such as date, name, email and topic, without storing those fields in plain text in these records; verification records keep a cryptographic usage marker, not the code or email. These are pseudonymised data, not anonymous data. Scheduled batch cleanup removes these operation and verification records starting 90 days after their creation. Minimal technical booking records without the name, email or context may remain. Data from before deletion may remain in Cloudflare recovery history for up to 30 additional days. Event copies, invitations and sending logs held by Google and Brevo follow their own conditions and, where applicable, deletion by the account owner; the 30-day period does not promise deletion from those services. Contact [email protected] about your rights or [email protected] for enquiries. Providers may process data outside the European Economic Area; see their locations and safeguards at https://policies.google.com/privacy, https://www.brevo.com/legal/privacypolicy/, https://www.cloudflare.com/privacypolicy/.
Controller and contact
B&P Media S.L., Tax ID B24993529, c/ Darwin 7, 07007 Palma de Mallorca, Spain. For enquiries about data processing or to exercise your rights: [email protected].
Company account and diagnosis
We process your name, email, access details, company information and the situations you provide to deliver the guidance you request, maintain your account and handle your enquiries. Do not include customer or employee data, sensitive information or third-party secrets in your description of the work. Context and its versions are kept in your workspace.
Earlier diagnosis requests and company preparation
This section describes requests received through the earlier process. We save your name, optional role, corporate email, company and website to handle your request. We send a receipt and, after reviewing the profile, an invitation to activate access. We may consult the official website and its legal pages through OpenAI to prepare a draft based on public sources, without sending your name or email to the provider. BUSCOS reviews the information before adding it; the company confirms or corrects it. Requesting a diagnosis does not activate a paid service or subscribe you to campaigns.
Profiles prepared by BUSCOS
We may prepare a company profile from information published on its website and other open sources and, in individual tests, invite a contact to review it. The profile and contact details are stored in BUSCOS; viewing the link does not create an account. The private link expires after 72 hours, but expiry does not automatically erase the profile. The invitation offers a way to delete the profile and block further invitations; we retain only technical fingerprints of the email address and domain to honour that request. For enquiries and rights: [email protected].
Contact enquiries
If you request contact without creating an account, we save your name, email, company, optional phone number and enquiry to respond and follow up on that request. This enquiry does not subscribe you to marketing campaigns.
Enquiry sources
Alongside an enquiry, we save the form page and, when available, its arrival reference and campaign-link labels to understand which publication or article led to the enquiry. We do not use this record to track your browsing. Saved addresses exclude query parameters and fragments; this record contains no visitor identifiers, IP addresses or browsing history.
Preparing guidance
To prepare guidance, we send the work context to OpenAI through its API with provider response storage disabled. The technical submission excludes the account name, email and company-name fields; free text could contain data if you include it. The provider service may involve processing outside the European Economic Area. Guidance suggests options and questions to help you move forward; it does not certify people or make hiring decisions.
Professional interest list
With your consent, we keep your name, email, location, specialties, working arrangements and preferences to manage the list and contact you about relevant opportunities. We confirm your email before using it for alerts. Joining does not create an application or share your data with a company. You can remove your record using the private link emailed to you.
Providers and retention
Transactional emails and internal enquiry alerts use Brevo. Telegram only receives the alert type and an internal reference, without names, emails or enquiry content. Hosting uses OVHcloud and public assets are delivered through Cloudflare. Cloudflare Turnstile protects forms against bots using technical connection data and a verification token; we do not send it the form contents. BUSCOS provides its own cookie preference manager in Spanish and English. Your choice is kept in this browser; it is not sent to an external consent provider. Private documents are not published on the CDN. We keep information for as long as needed for the requested service, and retain information where required for legal obligations or unresolved incidents. When an engagement involves checking skills, we separately agree who can access the information, how it is used and how long it is retained.
Visit analytics with Metricool
With your consent to “Visit analytics”, Metricool Software S.L. is the provider that measures visits to BUSCOS public information pages. It receives the public URL (only campaign labels are allowed), public referring URL, window size and technical connection data such as IP, browser and date. Processing is based on your consent. Private workspaces and form contents are excluded. This integration creates no cookies or visitor identifiers. You may reject or withdraw permission in the consent preferences; withdrawal prevents new measurements and does not erase statistics already collected. Provider retention periods and conditions are described at https://metricool.com/privacy-policy/, including recipients and processing outside the European Economic Area.
Your rights
You may request access, correction, erasure, restriction, portability or object where applicable, and withdraw consent for the list. Contact [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency.