Skip to content


Your cart is empty

Privacy policy

This website is a property of Aitor Gómez Mesa with NIF nº Q05440137 and address at Calle San Justo, 1 (28005 Madrid). For any queries or proposals, please contact us by e-mail: This website is governed by the regulations exclusively applicable in Spain, and both nationals and foreigners who use this website are subject to them. Access to our website by the USER is free of charge and is subject to the prior reading and full, express and unreserved acceptance of these GENERAL CONDITIONS OF USE in force at the time of access, which we ask you to read carefully. The USER, when using our portal, its contents or services, expressly accepts and submits to the general conditions of use of it. If the user does not agree with these conditions of use, he/she must refrain from using this portal and operating through it. We may at any time modify the presentation and configuration of our website, extend or reduce services, and even remove it from the network, as well as the services and content provided, all unilaterally and without prior notice.


All content, texts, images, brands and source codes are our property or third parties from whom we have acquired their exploitation rights, and are protected by Intellectual and Industrial Property rights. The user is only entitled to private, non-profit use of the same, and requires express authorisation to modify, reproduce, exploit, distribute or exercise any right belonging to the owner.


Access to our website is free of charge and does not require prior subscription or registration.
By submitting personal data, the USER expressly accepts our privacy policy.

The user must access our website in accordance with good faith, the rules of public order and these General Conditions of Use. Access to our website is at the sole and exclusive responsibility of the user, who shall be liable in all cases for any damages that may be caused to third parties or to us.

Taking into account the impossibility of controlling the information, contents and services contained in other websites that can be accessed through the links that our website may make available, we inform you that we are exempt from any liability for damages of any kind that may arise from the use of these websites, outside our company, by the user.


Confidentiality and security are fundamental values of BONAI MADRID and, consequently, we are committed to guaranteeing the User's privacy at all times and to not collecting unnecessary information. Below, we provide you with all the necessary information about our Privacy Policy in relation to the personal data we collect, explaining:

  • Who is responsible for the processing of your data.
  • For what purposes we collect the data we request from you.
  • What the legitimacy for its treatment is.
  • How long we keep it for.
  • To which recipients your data will be disclosed.
  • What your rights are.

1. RESPONSIBLE: see details in the heading. 

2. PURPOSES, LEGITIMACY AND CONSERVATION and conservation of the processing of data sent by:

Sending emails.

Purpose: To reply to your requests for information, deal with your requests and answer your queries or doubts.  In case of receiving your Curriculum Vitae, your personal and curricular data may form a part of our databases in order to participate in our present and future selection processes.

Legitimation: The consent of the user when requesting information from us through the e-mail address or sending us your data and CV to participate in our selection processes.

Retention: Once your request has been answered by mail.  electronic mail, if it has not generated a new processing. In the case of receiving your CV, your data may be kept for a maximum of one year for future selection processes.

User Registration Form 

Purpose of registration form: To formalise your registration in our private customer area and to send informative communications about our products and services, including by e-mail.

Legitimation: Consent of the user to register on the page as a user/customer and to receive commercial information.

Retention: a. For the duration of the contractual relationship and, once this has ended, for the legally required retention periods to meet any liabilities. b. Until you exercise your right to oppose commercial mailings or exercise your right to cancel your personal data.

Purchase of products and/or services

Purpose: a. To process and manage the purchase and, where appropriate, delivery of your order and the administrative tasks arising from it. b. To send you information and communications about our products and/or services, offers, discounts and events, including by electronic means, if you have authorised this.

Legitimation: a. Execution of a contract for the sale of products or provision of services. b. Legitimate interest of the company to keep its customers informed about products and services, offers and other commercial information.  

Retention:  a. For the duration of the contractual relationship and, once this has ended, for the legally required retention periods to cover any possible liabilities. b. Until you exercise your right to oppose commercial mailings or exercise your right to cancel your personal data.

Newsletter subscription

Purpose: To send you commercial information about our activities and services, including by electronic means.

Legitimation: The user's consent when subscribing to the sending of information through our form.

Conservation: Until you request to unsubscribe from our commercial mailings. 

Registration form for our activities

Purpose: To process and manage the registration for the event or activity organised by us and, where appropriate, to send you commercial information about our activities, including by electronic means.

Legitimation: User registration and consent to receive commercial information.

Conservation: As long as the activity is carried out and, in the case of agreement to receive commercial mailings, until you request to unsubscribe from these mailings.

Obligation to provide us with your personal data and consequences of not doing so.

The provision of personal data requires a minimum age of 14 years, or where appropriate, have sufficient legal capacity to contract.

The personal data requested is necessary to manage your requests, register you as a user and/or provide you with the services you may contract, so if you do not provide them, we will not be able to attend to you correctly or provide you with the service you have requested.

In any case, we reserve the right to decide whether or not to include your personal data and other information in our databases. 


Your data is confidential and will not be passed on to third parties, unless there is a legal obligation to do so.


Any person may withdraw their consent at any time, when it has been granted for the processing of their data. In no case shall the withdrawal of this consent condition the execution of the subscription contract or the relations previously generated.

You may also exercise the following rights:

  • Request access to your personal data or their rectification when they are inaccurate.
  • Request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
  • Request the limitation of their processing in certain circumstances.
  • Request opposition to the processing of your data on grounds relating to your particular situation. Request data portability in the cases provided for in the regulations.
  • Other rights recognised in the applicable regulations.

Where and how to request your Rights: By writing to the data controller at the postal or e-mail address (indicated in section A), indicating the reference "Personal Data", specifying the right you wish to exercise and in relation to which personal data.

In case of disagreements with the company in relation to the processing of your data, you may lodge a complaint with the Data Protection Agency (


In order to safeguard the protection of your personal data, we inform you that we have taken all necessary technical and organisational measures to ensure the security of the personal data provided against alteration, loss and unauthorised processing or access.


In order for us to keep your personal data up to date, it is important that you inform us whenever there has been any change in them, otherwise, we are not responsible for their accuracy. We are not responsible for the privacy policy regarding the personal data that you may provide to third parties through the links available on our website.

This Privacy Policy may be modified in order to adapt it to any changes that may occur on our website, as well as any legislative or jurisprudential modifications on personal data that may appear, which is why it must be read every time you provide us with your data through this website.


By making this website available to the user, we wish to offer a quality service, using the maximum diligence in the provision of the same, as well as in the technological means used. However, we shall not be liable for the presence of viruses or other elements that may in any way damage the user's computer system.

We do not guarantee that the availability of the service will be continuous and uninterrupted.

The USER is prohibited from any type of action on our portal that causes an excessive overload of our computer systems, as well as the introduction of viruses, or the installation of robots, or software that alters the normal operation of our website, or in short may cause damage to our computer systems.

The USER assumes all responsibility derived from the use of our website.

The USER acknowledges that he/she has understood all the information regarding the conditions of use of our portal, and acknowledges that they are sufficient for the exclusion of error in them, and therefore accepts them fully and expressly.