Legal Notice and Privacy Policy

Last updated: 16 September 2026 This page provides the legal information governing brandtropy.com and explains how personal data is processed through the website, its forms and connected services.

1. Website operator

This website is operated by: Radosław Marcin Dziubka, trading as Brandtropy NIF/NIE: Z0161019R Address: Av. de Catalunya 71, 12, 17527 Llívia, Spain Email: r@brandtropy.com Website: brandtropy.com The website provides information about Brandtropy’s strategic consulting services, perspectives, experience and ways to begin a professional conversation.

2. Use of the website

You may browse this website for lawful personal or professional purposes. You must not:

  • interfere with the website’s operation or security;
  • attempt to gain unauthorised access to its systems;
  • introduce malicious code;
  • use its content unlawfully or in a misleading context;
  • collect information from the website through unauthorised automated means.

Brandtropy may update, restrict or suspend parts of the website where reasonably necessary for maintenance, security or improvement.

3. Website content

The content is provided for general information and does not constitute legal, medical, financial or other regulated professional advice. Brandtropy aims to keep the website accurate and useful but does not guarantee that every part will always be complete, current or suitable for a visitor’s particular circumstances. Nothing on the website creates a client relationship. A working relationship begins only when its scope and terms have been agreed separately. Nothing in this notice excludes liability that cannot lawfully be excluded.

4. Intellectual property

Unless otherwise stated, the writing, illustrations, visual systems, frameworks, design and original materials published on this website belong to Radosław Marcin Dziubka or are used with appropriate permission. You may quote or share limited extracts for legitimate non-commercial purposes when Brandtropy is clearly credited and the original meaning is not misrepresented. You may not reproduce, adapt, distribute, sell or commercially exploit substantial parts of the website without prior written permission. Third-party names, trademarks and materials remain the property of their respective owners.

The website may link to external services and third-party websites. These links are provided for convenience and context. Brandtropy does not control independent third-party websites and is not responsible for their availability, content, security or privacy practices. You should review the relevant terms and privacy information before providing personal data to an external service.

6. Applicable law

This website and legal notice are governed by Spanish law. Any dispute will be handled by the courts determined under applicable procedural and consumer-protection rules. Nothing in this section limits any mandatory rights or jurisdiction available to consumers under applicable law.

Privacy Policy

7. Data controller

The controller responsible for personal data processed through this website is: Radosław Marcin Dziubka, trading as Brandtropy NIF/NIE: Z0161019R Address: Av. de Catalunya 71, 12, 17527 Llívia, Spain Privacy contact: r@brandtropy.com Brandtropy has not appointed a data protection officer because its current processing activities do not require one.

8. Scope

This Privacy Policy applies when you:

  • visit brandtropy.com;
  • submit the contact form;
  • subscribe to Perspectives & Insights;
  • manage your cookie preferences;
  • follow the booking link and arrange a conversation;
  • communicate with Brandtropy about a possible or existing working relationship.

9. Personal data processed

Depending on how you interact with Brandtropy, the following information may be processed:

  • your name and email address;
  • information included in a contact-form message;
  • newsletter subscription, confirmation and withdrawal records;
  • newsletter delivery and interaction information where those functions are enabled;
  • booking details provided through Calendly;
  • professional information you provide during an enquiry or conversation;
  • IP address and technical security logs;
  • browser, device, operating system and approximate location information;
  • referring source, visited pages and website interactions;
  • cookie and consent preferences;
  • information required to manage services, contracts, invoices and legal obligations.

Brandtropy does not intentionally request health information or other special-category personal data through the website. Please do not include such information in the contact form. If sensitive information is provided unexpectedly, it will be minimised or deleted unless its limited use is necessary to respond appropriately or another valid legal basis applies.

10. Website operation and security

Technical information may be processed to:

  • deliver and maintain the website;
  • identify technical failures;
  • prevent spam, attacks and unauthorised access;
  • maintain system integrity and backups;
  • investigate security incidents.

The legal basis is Brandtropy’s legitimate interest in operating a secure and reliable website under Article 6(1)(f) GDPR.

11. Contact form

The contact form collects your:

  • name;
  • email address;
  • message.

This information is used to:

  • understand and respond to your enquiry;
  • communicate with you;
  • assess whether Brandtropy’s services may be relevant;
  • manage a possible professional relationship.

If you contact Brandtropy about services for yourself, the legal basis may be taking steps at your request before entering into a contract under Article 6(1)(b) GDPR. If you contact Brandtropy on behalf of an organisation, or the enquiry is not directly pre-contractual, the legal basis is Brandtropy’s legitimate interest in managing professional enquiries under Article 6(1)(f) GDPR. Submissions are stored in the website’s WordPress database through Elementor Pro. They are not automatically forwarded by email. Submissions are normally reviewed for deletion within 12 months of the last meaningful contact. They may be retained longer if a working relationship develops or retention is necessary to meet legal obligations or manage a legal claim.

12. Newsletter

If you subscribe to Perspectives & Insights, Brandtropy processes your email address to send the newsletter and related updates you requested. Subscriptions use double opt-in. You must confirm your email address before being added to the mailing list. The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw consent at any time through the unsubscribe link included in every newsletter. Withdrawal does not affect processing undertaken before consent was withdrawn. Mailchimp manages subscriptions and distributes the newsletter. Where its measurement functions are enabled, Mailchimp may record delivery, opening and link-interaction information. This information is used to understand newsletter performance rather than make consequential decisions about individual subscribers. Newsletter information is retained until you unsubscribe or withdraw consent. Limited information may be retained afterwards to document consent and ensure that you are not contacted again unintentionally. More information is available in Mailchimp’s Privacy Statement and Data Processing Addendum.

13. Bookings through Calendly

The website links to Calendly so visitors can arrange an introductory conversation. Calendly is not embedded on brandtropy.com. Its booking interface, scripts and cookies do not load merely because you visit this website. If you follow the link and make a booking, Calendly processes the details you provide and makes the relevant booking information available to Brandtropy. Brandtropy uses this information to:

  • arrange and conduct the requested conversation;
  • understand the context of your enquiry;
  • assess whether its services may be relevant;
  • communicate about possible next steps.

The legal basis is taking steps at your request before a possible contract under Article 6(1)(b) GDPR or Brandtropy’s legitimate interest in managing professional enquiries under Article 6(1)(f) GDPR. Booking information is normally reviewed for deletion within 12 months after the last meaningful interaction unless a working relationship develops or longer retention is legally necessary. More information is available in Calendly’s Privacy Notice.

14. Google Analytics 4

With your consent, Brandtropy uses Google Analytics 4 to understand:

  • how visitors reach the website;
  • which pages and subjects attract attention;
  • how visitors navigate between pages;
  • general website usage and performance patterns.

Google Analytics may process pseudonymous identifiers, device and browser information, approximate location, referring sources, visited pages and website interactions. Google Analytics is blocked until you accept Statistics cookies. Google Signals and advertising-personalisation features are not used. The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw consent through the website’s cookie settings. Google Analytics event-level data is currently intended to be retained for two months. More information is available in Google’s Privacy Policy.

15. Microsoft Clarity

With your consent, Brandtropy uses Microsoft Clarity to understand how visitors interact with the website and identify areas that may be unclear, difficult to use or in need of improvement. Clarity may process:

  • visited pages and navigation paths;
  • clicks, scrolling and pointer movements;
  • device, browser and referring-source information;
  • reconstructed website sessions;
  • interaction data used to create heatmaps and aggregated insights.

Clarity session replays are reconstructions of browser interactions. They do not use your camera or microphone. Clarity is intended to remain blocked until you accept Statistics cookies. Brandtropy uses masking and exclusion controls intended to prevent contact-form content and other sensitive information from appearing in reconstructed sessions. Clarity data is used to improve the website. It is not used to make consequential decisions about individual visitors. The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw consent through the website’s cookie settings. Microsoft normally retains standard playback data for 30 days. Heatmaps and certain sampled, labelled or favourited sessions may be retained for up to nine months. More information is available in the Microsoft Privacy Statement.

If an enquiry develops into a working relationship, personal data may be processed to:

  • prepare proposals and agreements;
  • provide and administer services;
  • manage professional communications;
  • issue invoices and maintain financial records;
  • comply with tax and accounting requirements;
  • establish, exercise or defend legal claims.

The applicable legal bases are contractual necessity under Article 6(1)(b), compliance with legal obligations under Article 6(1)(c), and legitimate interests under Article 6(1)(f) GDPR. Contractual and financial information is retained for the periods required by applicable tax, accounting, contractual and limitation rules.

Necessary technologies may operate without consent where required for security, consent management or essential website functionality. Optional analytics technologies are blocked until you provide consent through the Complianz banner. You may:

  • accept or reject optional cookies;
  • use the website after rejecting analytics;
  • change or withdraw your preferences at any time.

Detailed information about cookies, providers, purposes and durations is available in the [Cookie Policy].

18. Whether providing data is required

You may browse the website without submitting your name or contact details. However:

  • name, email and message information are required to submit the contact form;
  • an email address is required to subscribe to the newsletter;
  • appropriate contact information is required to arrange a conversation;
  • contractual and billing information may be required if a working relationship begins.

Without the necessary information, Brandtropy may be unable to respond or provide the requested service.

19. Recipients and service providers

Brandtropy does not sell or rent personal data. Information may be processed by service providers where necessary, including:

  • website hosting, backup, maintenance and security providers;
  • Mailchimp for newsletter management and distribution;
  • Calendly for arranging conversations;
  • Google for consent-based website analytics;
  • Microsoft for consent-based session analysis and heatmaps;
  • professional advisers where legal, tax, accounting or compliance support is required;
  • competent authorities where disclosure is legally required.

The use of WordPress, Elementor Pro or Complianz does not necessarily mean that those software providers receive contact-form contents or other personal data. Disclosures depend on the actual configuration and connected services. Service providers acting on Brandtropy’s behalf are required to process information under appropriate contractual and security obligations.

20. International transfers

Some service providers may process information in the United States or other countries outside the European Economic Area. Where required, international transfers are protected through a legally recognised mechanism, such as:

  • an adequacy decision adopted by the European Commission;
  • the EU–US Data Privacy Framework where applicable;
  • European Commission Standard Contractual Clauses;
  • additional contractual, organisational or technical safeguards.

Mailchimp’s Data Processing Addendum provides for the EU–US Data Privacy Framework and Standard Contractual Clauses where required. Information about safeguards applicable to a particular transfer may be requested through the privacy contact address.

21. Retention

Personal data is retained only for as long as necessary for its purpose and applicable legal obligations. The principal periods or criteria are:

  • Contact submissions: normally reviewed for deletion within 12 months after the last meaningful contact.
  • Bookings and prospective relationships: normally reviewed for deletion within 12 months after the last meaningful interaction.
  • Newsletter records: retained until you unsubscribe, with limited consent or suppression records retained where necessary.
  • Google Analytics: event-level data is intended to be retained for two months.
  • Microsoft Clarity: standard playback data is retained for 30 days; heatmaps and certain selected sessions may be retained for up to nine months.
  • Consent records: retained as necessary to demonstrate consent and withdrawal.
  • Technical logs and backups: retained according to security, recovery and hosting requirements and overwritten or deleted on the relevant provider’s normal schedule.
  • Contractual and financial records: retained as required by applicable legal obligations.

Data may be retained longer where necessary to comply with law or establish, exercise or defend legal claims.

22. Your rights

Subject to applicable law, you may request:

  • access to your personal data;
  • correction of inaccurate or incomplete information;
  • deletion of data that is no longer required;
  • restriction of processing in certain circumstances;
  • objection to processing based on legitimate interests;
  • portability of data processed automatically on the basis of consent or contract;
  • withdrawal of consent at any time;
  • information about safeguards used for international transfers.

Send requests to r@brandtropy.com. Additional information will be requested only where reasonably necessary to verify your identity. Brandtropy will respond without undue delay and normally within one month. This period may be extended by up to two additional months where legally permitted due to the complexity or number of requests. You will be informed of any extension and its reason. Requests are normally handled without charge. A reasonable fee may be charged, or a request may be refused, only where it is manifestly unfounded or excessive as permitted by law. You may also lodge a complaint with: Agencia Española de Protección de Datos C/ Jorge Juan, 6 28001 Madrid, Spain www.aepd.es

23. Automated decision-making

Brandtropy does not use personal data collected through the website to make decisions based solely on automated processing that produce legal or similarly significant effects. Analytics tools may produce aggregated reports and general behavioural patterns, but these are not used to evaluate individual visitors.

24. Children

The website and Brandtropy’s services are directed towards businesses and professional audiences. They are not intended for children, and Brandtropy does not knowingly collect personal data from anyone under 18. If you believe that a child has provided personal information, contact Brandtropy so it can be reviewed and deleted where appropriate.

25. Security

Brandtropy applies proportionate technical and organisational measures intended to protect personal data against accidental loss, misuse, alteration, unauthorised access or disclosure. These measures include controlled administrative access, software maintenance, data minimisation, consent-based activation of optional tracking and the use of service providers offering appropriate safeguards. No internet-based system can guarantee absolute security.

26. Changes to this page

This page may be updated when the website, connected services or legal requirements change. The current version will remain available at this location and display its latest revision date. Where a material change affects consent-based processing, renewed consent will be requested where required.

27. Contact

Questions, concerns and data-protection requests may be sent to: Radosław Marcin Dziubka Trading as Brandtropy Av. de Catalunya 71, 12 17527 Llívia, Spain r@brandtropy.com

Get new perspectives and insights

⸺ In each piece, I unpack consequential business questions, connect the wider picture with tangible examples and point to practical ways forward.

By subscribing, you agree to receive brandtropy ‘Perspectives & Insights’ by email.
For more information, read the Privacy Policy.