Privacy Policy
Last updated: September 2026
1. Data Controller
| Field | Value |
|---|---|
| Controller | Raúl Martínez Rus |
| Tax ID (NIF) | 75112450Q |
| Address | C. Pablo Iglesias, 15, Navas de San Juan, 23240, Jaén, Spain |
| hola@raulmar.es | |
| Website | https://bgr.raulmar.es |
This Policy is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and with Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
2. Data We Process
Data processing takes place in two distinct areas: website visitors and plugin users.
2.1. Website Visitors
Browsing the Site may involve the collection of technical data (IP address, browser type, operating system, pages visited) through cookies or equivalent technologies, as set out in the cookies section. If a visitor contacts us by email, their identifying and contact data are processed solely to respond to their enquiry.
2.2. Users of the Best Google Reviews Plugin
Best Google Reviews is a tool that a business installs on its own WordPress site to display the public reviews of its own Google Business Profile listing. In this context, the controller of the review data is the owner of the site that installs the plugin (hereinafter, “the User”), not Raúl Martínez Rus. This section describes how the plugin works, for transparency and compliance with Google’s requirements.
3. The Plugin and Google Business Profile Data
This section describes how the plugin accesses, uses, stores and shares Google user data, in compliance with the Google API Services User Data Policy and its Limited Use requirements.
3.1. Data Accessed
With the User’s express authorization through Google’s OAuth consent, the plugin may access the following public data from the User’s own business listing:
- Business name and basic business information.
- Average rating and total number of reviews.
- Individual reviews: text, rating, author name, profile photo and date.
3.2. Where the Data Is Stored
All the above data is downloaded and stored on the User’s own server (their WordPress installation and database), not on the servers of Raúl Martínez Rus.
Profile photos of review authors are downloaded and cached locally on the User’s site (in the wp-content/uploads/bgr/ folder) for a maximum of 30 calendar days, in accordance with the Google Business Profile content policy. After that period they are deleted and re-downloaded if necessary.
3.3. The Connection Service (OAuth)
To connect the plugin with Google, OAuth 2.0 is used. The domain https://bgr.raulmar.es acts as a token exchange endpoint: it temporarily receives the authorization code and exchanges it for access tokens, which are returned immediately to the User’s site.
- The application’s
client_secretis stored on the controller’s servers to enable the connection. - Access and refresh tokens are stored on the User’s site, encrypted at rest.
- The connection endpoint does not store reviews or access tokens long term.
3.4. Purpose of the Data Use
Google data is used solely to display the business’s reviews and rating on the User’s website. In accordance with Google’s Limited Use requirements:
- The data is not used for advertising or profiling.
- The data is not sold, assigned or transferred to third parties.
- The data is not manipulated or aggregated in any way other than as displayed by Google.
- The use of the data is limited to the visible features of the plugin.
3.5. Revoking Access
The User may disconnect the integration at any time from the plugin settings, which revokes access to their Google listing. In addition, uninstalling the plugin (with the deletion option enabled) removes the data stored on their site.
4. Purposes and Legal Basis
| Purpose | Legal basis |
|---|---|
| Responding to visitor enquiries | Legitimate interest and, where applicable, consent |
| Technical operation of the Site (technical cookies) | Legitimate interest |
| Connecting the plugin with Google Business Profile | Express consent of the User (OAuth) and performance of the relationship with the User |
| Displaying reviews on the User's site | Performance of the relationship with the User |
5. Data Retention
- Enquiry data: for the time necessary to respond and, where applicable, the applicable legal obligations.
- Reviews and ratings on the User’s site: while the User keeps the integration active, unless the applicable law requires otherwise.
- Cached profile photos: a maximum of 30 calendar days.
6. Recipients and International Transfers
Data is not disclosed to third parties, except where required by law. Connecting with Google involves the transfer of data to Google (Google Business Profile services), whose infrastructure may be located outside the European Economic Area. Such transfer is based on the User’s consent and on the applicable clauses and safeguards for Google services.
7. Data Subject Rights
Data subjects may exercise, with respect to the data for which Raúl Martínez Rus is the controller, the rights of access, rectification, erasure, objection, restriction of processing and data portability, by writing to hola@raulmar.es, stating the right being exercised. They may also lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing does not comply with the regulations.
With respect to review data stored on a third party’s site, the data subject must contact the owner of that site, who is the controller of such processing.
8. Cookies
This Site may use technical cookies necessary for its operation. The user may configure their browser to reject them. Where applicable, non-technical cookies will be disclosed in accordance with the applicable regulations.
9. Security
Appropriate technical and organizational measures are applied to protect the data, including encryption at rest of the plugin’s credentials and tokens, and encryption of communications via HTTPS.
10. Changes to This Policy
The controller reserves the right to update this Policy to adapt it to regulatory or product changes. The current version will be the one published on this Site.
