Privacy Policy

RVB BUSINESS CONSULTING, S.L. (ROCKSTARDATA)

Last updated: April 2026

1. Basic Information

Controller	RVB BUSINESS CONSULTING, S.L. (ROCKSTARDATA) — CIF: B67091959
Address	Av. Diagonal, 263, 08013 – Barcelona (Spain)
Contact	[email protected]
Purpose	Managing communication and the relationship with website users.
Legal basis	Consent, or the user’s request for a service and/or information.
Exercising your rights	By sending a request with ID (or equivalent identification document) to [email protected] or by post to the address above.

2. Use of Google API Services

This section has been added and expanded to meet Google API Services verification requirements.

2.1. Google data the application accesses

Our platform integrates with Google API Services, specifically the Google Business Profile API. Through this integration, we access the following types of Google user data:

 

• Business location profile information: name, address, opening hours, categories, phone number, and website URL of Google Business Profile listings authorised by the client.
• Performance data and metrics: impressions, clicks, direction requests, phone calls, website visits, and other engagement metrics associated with the business locations.
• Reviews and ratings: user review content, scores, and owner replies linked to the authorised locations.
• Photos and media: images associated with the Google Business Profile listings of the authorised locations.
• Attributes and additional information: service attributes, products, menus, or other structured data available via the API for the authorised locations.
• OAuth 2.0 access tokens: delegated access credentials that the client expressly grants so we can operate on their behalf on their Google Business Profile locations.

 

2.2. Use, processing, and management of Google data

Data obtained through the Google API is used exclusively for the following purposes, always within the scope of the explicit consent granted by the client:

 

• Display and analysis: showing the client, inside our platform, aggregated and detailed performance of their Google business locations.
• Listing management: helping the client update location information (hours, descriptions, photos, etc.) from our interface.
• Review management: allowing the client to view and reply to Google reviews from our platform.
• Reporting: producing periodic performance reports for the client’s internal use.
• Service improvement: identifying trends and optimisation opportunities for the managed locations.

 

Google data will NOT be used for any of the following:

• Sale, assignment, or transfer to unauthorised third parties.
• Advertising, ad targeting, or profiling for purposes unrelated to the contracted service.
• Training of general-purpose artificial intelligence models.
• Any purpose other than those expressly described in this policy.

 

2.3. Storage and retention of Google data

Data obtained from the Google API is stored securely on servers with restricted access. The retention period for this data is determined by the term of the service agreement with the client. Once the contractual relationship ends, the data will be deleted or anonymised within a maximum of 90 days, unless a longer legal retention obligation applies.

 

2.4. Transfers of Google data to third parties

ROCKSTARDATA does not assign or sell data obtained from the Google API to third parties. It may only share data with technology infrastructure providers (sub-processors) that act solely under ROCKSTARDATA’s instructions and that offer sufficient guarantees of GDPR compliance and of the Google API Services User Data Policy.

 

2.5. Compliance with the Google API Services User Data Policy

ROCKSTARDATA’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

 

• Google data is used only to provide or improve the user-facing service as requested by the client.
• Access to the data is limited to what is strictly necessary for the service to function.
• Human access to Google data is not allowed except as needed to provide the service, at the client’s request, for security reasons, or to comply with law.
• Google data is not used to develop, improve, or train generalised AI or machine-learning models.

 

For more information on the Google API Services User Data Policy, see: https://developers.google.com/terms/api-services-user-data-policy

3. Additional Information

3.1. Purposes of personal data processing

At ROCKSTARDATA we process the information you provide through the various forms or contact addresses on the website for the following purposes:

 

• Handling information requests submitted via contact forms.
• Sending new blog posts to users who have previously accepted receipt of that information.
• Including in ROCKSTARDATA’s recruitment processes those users who have sent us their CV through the means indicated on the website.

 

3.2. Legal basis for processing

Our legal basis is the user’s free and voluntary provision of their data in order to handle any of the requests indicated. The data processed will be the minimum necessary to properly handle those requests. In each communication, ROCKSTARDATA will remind how to withdraw consent, with effect from the moment it is exercised.

 

3.3. Retention of personal data

Your data will be kept for the minimum time needed to properly provide the requested service, and to address any liabilities arising from it and any legal requirement:

 

• Information requests: for the time needed to handle your requests, and deleted one year after the last communication.
• Blog subscribers: until the user withdraws authorisation.
• CVs: kept by the HR department for two years from receipt of the latest CV.

 

3.4. Disclosure of data

ROCKSTARDATA may disclose personal data to meet its obligations to Public Administrations when required by applicable law, and to Judicial or State Security bodies.

4. User Rights

As data subject, you have the following rights:

 

• Right of access: to obtain information on whether your personal data are being processed, to access them, and to obtain information about the processing.
• Right to obtain a copy of your personal data.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of data when they are no longer needed or when legally provided circumstances apply.
• Right to restriction of processing: to request restriction of processing in the cases set out in Art. 18 GDPR.
• Right to portability: to receive your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent for any specific purpose at any time, without affecting the lawfulness of prior processing.

 

You may exercise these rights by sending your request, together with your ID or equivalent identification document, to:

 

Email: [email protected]

Post: ROCKSTARDATA — Av. Diagonal, 263, 08013 – Barcelona (Spain)

 

For more information on exercising your rights, see the Spanish Data Protection Agency website: www.aepd.es

RVB BUSINESS CONSULTING, S.L. (ROCKSTARDATA) — CIF: B67091959

[email protected]  |  Av. Diagonal, 263, 08013 – Barcelona

Google API Services Disclosure

English: Our platform integrates with Google API services (specifically the Google Business Profile API) to collect performance and management data from business locations authorized by our clients. Rockstar Data’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Español: Nuestra plataforma se integra con los servicios de Google API (específicamente la API de Google Business Profile) para recopilar datos de rendimiento y gestión de las ubicaciones comerciales autorizadas por nuestros clientes. El uso y la transferencia por parte de Rockstar Data de la información recibida de las APIs de Google se adherirá a la Política de Datos de Usuario de los Servicios de API de Google, incluidos los requisitos de Uso Limitado.