Privacy policy

This policy explains how we process the personal data you give us through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

1. Data controller

• Controller: [full name or company name] (FilloyStudio)
• Tax ID (NIF): [NIF]
• Address: [full address]
• Email: filloystudio@gmail.com

2. What data we process

Only what you give us in the contact form or when you write to us: name, company, email address, the type of project you are interested in and your message. We do not ask for special categories of data; please do not include them in your message.

To prevent abuse, the system uses your IP address at the moment you send the form to limit how many messages can be sent per minute. We do not store it.

3. What we use it for

• To reply to your enquiry.
• To prepare a proposal or quote, if you ask for one.

We do not use your data to send you advertising, and we do not make automated decisions or build profiles.

4. Legal basis

Your consent, which you give by sending the form (article 6.1.a GDPR), and taking steps at your request before entering into a contract when you ask us for a proposal (article 6.1.b GDPR). You can withdraw your consent at any time, without affecting processing carried out before.

5. How long we keep it

As long as needed to deal with your enquiry and, if you do not hire us, up to one year after our last contact. If you hire us, for the duration of the relationship and then for the periods required by law (for example, tax and accounting periods).

Enquiries sent through the form are stored in our database and deleted automatically after one year.

6. Who we share it with

We do not share your data with third parties unless required by law. To provide the service we use providers that act as data processors under a GDPR-compliant contract: Cloudflare, Inc., which hosts the website, stores the enquiries sent through the form and notifies us of each one by email, and [mailbox provider]. Cloudflare is certified under the EU-US Data Privacy Framework, and its data processing agreement includes standard contractual clauses. [If the mailbox provider is outside the European Economic Area, state its safeguard.]

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to filloystudio@gmail.com and stating which right you wish to exercise. If you believe your request has not been properly handled, you can complain to the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration. The site is always served over an encrypted connection (HTTPS).

9. Changes to this policy

If we change the way we process your data, we will update this page and show the date of the latest revision.