Summary: At EficiencIAl Studio we only process your data to manage your enquiries, prepare commercial proposals and meet our legal obligations. We never sell your data to third parties or use it for automated marketing. This policy explains what we collect, why, for how long and how you can exercise your rights.
Data controller
The controller of your personal data is:
DroneHive S.L.
Personal data we collect
Through our contact form we collect: full name, professional email, company or agency, project type, project description and a link to reference material (optional). We do not collect sensitive data unless you voluntarily provide it in the free-text field. In addition, when you submit the form, technical connection data is automatically logged (IP address, browser identifier, referring page, language and date/time) for the sole purpose of ensuring the security of the service and preventing fraudulent or abusive use of the form.
Purpose of processing
We process your data in order to: respond to your request, prepare commercial proposals and visual demos generated with AI assistance based on the brief you provide, maintain contact during the pre-contractual phase and comply with applicable legal obligations. We do not use your data for automated marketing nor transfer it to third parties for advertising purposes.
Legal basis
- Consent of the data subject when submitting the form (art. 6.1.a GDPR).
- Performance of pre-contractual measures at the data subject's request (art. 6.1.b GDPR).
- Legitimate interest in managing the pre-contractual commercial relationship (art. 6.1.f GDPR).
- Legitimate interest in the security of the service and the prevention of abuse or fraud in the form, including the logging of technical connection data such as the IP address (art. 6.1.f GDPR).
Recipients and processors
Data is shared with the following technology providers, all bound by a data processing agreement under art. 28 GDPR:
- Formspree, Inc. (United States): web form provider. Certified under the EU-US Data Privacy Framework.
- Google LLC (United States): corporate email (Google Workspace). Certified under the EU-US Data Privacy Framework.
- Anthropic, PBC (United States): Claude AI model, used to process the brief and generate the proposal. Certified under the EU-US Data Privacy Framework. Data is not used for model training.
We do not transfer or sell personal data to third parties for commercial or advertising purposes.
International transfers
International transfers to the United States occur via the providers listed above. All of them adhere to the EU-US Data Privacy Framework recognised by the European Commission.
Retention period
Data is retained for as long as necessary to manage the request and any resulting commercial relationship. Unless a longer retention is required by law, data is deleted 3 years after the last active commercial contact.
Your rights
You have the right to: access, rectification, erasure, objection, restriction, portability and not to be subject to automated decisions with legal effects. To exercise them you can write to contact@eficiencial.com with a copy of your ID, passport or equivalent document. We will respond to your request within one month at most.
Complaints
If you believe your rights have not been respected, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
Cookies
This site uses first-party and third-party cookies for technical, analytical and experience improvement purposes. You can see the detail, manage your preferences and revoke consent from our Cookie Policy.
Changes to this policy
We reserve the right to amend this policy when necessary. The current version will always be the one published at https://eficiencial.com/estudio/en/privacy. We recommend reviewing it periodically.
Transparency in the use of AI
EficiencIAl Studio is an AI-native production company: a large part of our content (images, video, people, voices and real or fictional settings) is created or manipulated with generative AI and may not correspond to real people, places or events.
In compliance with Article 50 of Regulation (EU) 2024/1689 (the AI Act), applicable from August 2, 2026, we undertake to: clearly disclose when content has been generated or manipulated and may appear authentic; embed, where technically feasible, machine-readable markings (metadata or C2PA-type credentials); label content that constitutes a "deepfake"; and refrain from misleading, impersonating identities or spreading disinformation.
If you appear in a production, we will inform you of the use of AI and the extent of the manipulation of your image or voice. The brief you provide (description, project type and free-text field) may be processed by AI providers such as Anthropic, PBC acting as data processors, without it being used to train their models and under a contract pursuant to Article 28 of the GDPR. We recommend that you do not include sensitive data or third-party data in that field.