legal

privacy policy.

Last updated: November 2026

1. Controller

Clara Trummer, Carrer dels Assaonadors 2, 08003 Barcelona, Spain
Email: office@goodfruitmgmt.com

2. In short

We only process personal data where it is needed to run this website and to handle your enquiry or application. This website sets no cookies, uses no analytics or tracking tools and embeds no social media plugins. Fonts are hosted locally, so no data is sent to third parties such as Google when the page loads.

3. Hosting and server log files

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you visit the site, Netlify processes technically necessary data, in particular your IP address, the date and time of access, the page requested, the referrer URL and browser and operating system details. This is required to deliver the website and keep it secure and stable.

The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). We have a data processing agreement with Netlify (Art. 28 GDPR). Netlify is certified under the EU-U.S. Data Privacy Framework; transfers to the USA rely on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR) and, additionally, on the EU standard contractual clauses.

4. Contact form for brands

When you contact us through the form, we process your name, company (optional), email address and message to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to a possible collaboration) and your consent (Art. 6(1)(a) GDPR).

Form data is received via Netlify Forms (Netlify, Inc., see above) and forwarded to us by email. We delete it once your enquiry has been fully handled, at the latest after 12 months, unless statutory retention duties apply or a collaboration results from it.

5. Creator applications

When you apply, we process your name, email address, Instagram or TikTok handle, follower range, your confirmation that you are at least 18 years old and your answer on how faith is part of your content, to review your application and get in touch with you. We only accept applications from people aged 18 or over; if we learn that an application comes from a minor, we delete it.

Information about your faith may reveal religious beliefs and is therefore a special category of personal data (Art. 9 GDPR). We only process it where you have made this content public yourself (Art. 9(2)(e) GDPR) and on the basis of your explicit consent (Art. 9(2)(a), Art. 6(1)(a) GDPR). We use it to assess whether your content fits our agency, not to determine your religion.

The data is received via Netlify Forms and forwarded to us by email. If no collaboration follows, we delete it at the latest 6 months after our decision.

6. Recipients

Your data is received by service providers acting on our behalf: Netlify, Inc. (hosting and forms) and World4You Internet Services GmbH, Austria (email). We only share your data with brands or other third parties with your permission.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR), for example by email to office@goodfruitmgmt.com.

You can also lodge a complaint with a data protection authority (Art. 77 GDPR). Our lead authority is the Agencia Española de Protección de Datos (AEPD), www.aepd.es. You can also contact the authority where you live.

8. Is providing data required?

Providing your data is voluntary. Without the fields marked as required, however, we cannot handle your enquiry or application. No automated decision-making takes place.

9. Links to Instagram

We link to our Instagram profile with a plain link. No data is transferred until you click it; Meta's privacy policy then applies.