Summary: At EficiencIAl Studio we process your data solely to handle the audiovisual production requests you send us, improve our services, and comply with our legal obligations. We never sell your data to third parties. This policy explains what we collect, for what purposes, for how long, and how you can exercise your rights.
Data controller
The controller responsible for the processing of your personal data is:
EficiencIAl Studio
Data we collect
2.1 Data provided directly by the user
When you fill in our contact form or get in touch with us, we collect:
- Name and surname
- Email address
- Phone number (if provided)
- Name of the company or organization (if applicable)
- Description of the audiovisual project or free-form message
2.2 Data collected automatically
When you browse our website, we automatically collect:
- IP address (anonymized when possible)
- Browser type and operating system
- Pages visited and visit duration
- Date and time of access
- Referring URL
2.3 Audiovisual production data
In the context of production projects, it may be necessary to process additional data such as images, voice, and contact details of persons participating in the productions. This data is governed by a specific production contract and/or by individual consents obtained in accordance with Art. 6.1.a of the GDPR and, where applicable, Art. 9 for special categories.
Purposes of processing and legal basis
The General Data Protection Regulation (GDPR — Regulation EU 2016/679) requires that any processing of personal data have a lawful legal basis. The following table details each processing activity:
| Purpose | Legal basis (Art. 6 GDPR) | Detail |
|---|---|---|
| Handling of inquiries and quotes | Art. 6.1.b — Pre-contractual measures | Respond to requests for information about audiovisual projects before formalizing a contract. |
| Provision of the production service | Art. 6.1.b — Performance of the contract | Manage and execute the contracted audiovisual production assignment. |
| Commercial communications and portfolio | Art. 6.1.a — Express consent Art. 6.1.f — Legitimate interest (existing clients, where applicable) |
Sending of news, projects, and collaboration proposals. You may withdraw your consent at any time. |
| Website improvement and statistical analysis | Art. 6.1.f — Legitimate interest | Analysis of website performance through anonymized or pseudonymized data. |
| Compliance with legal obligations | Art. 6.1.c — Legal obligation | Retention of invoices and commercial documentation in accordance with the Spanish Commercial Code and tax legislation. |
| Defense against claims | Art. 6.1.f — Legitimate interest | Defense against potential legal claims arising from the professional activity. |
Note on legitimate interest: When we rely on legitimate interest as a legal basis, we have carried out a balancing assessment in accordance with Art. 6.1.f of the GDPR and have concluded that our interest does not override your fundamental rights and freedoms. You have the right to object to such processing at any time.
Retention periods
Your data will be retained only for as long as necessary for each purpose:
- Contact data and inquiries: 2 years from the last contact, or until you request its erasure.
- Contract execution data: During the term of the contract and an additional 5 years for the exercise or defense of claims (Art. 1964 of the Spanish Civil Code).
- Tax and commercial documentation: 6 years pursuant to Art. 30 of the Spanish Commercial Code; 4 years for tax obligations under the General Tax Law (LGT).
- Commercial communications: Until you withdraw your consent or exercise your right to object.
- Browsing data (logs): Maximum 12 months, unless a longer retention is required by law.
- Production images and recordings: As agreed in the specific production contract. In the absence of agreement, 5 years from the final delivery.
Once these periods have elapsed, the data will be deleted or irreversibly anonymized.
Recipients and data processors
EficiencIAl Studio does not transfer or sell your personal data to third parties unrelated to the provision of the service. We only share it in the following cases:
5.1 Data processors (service providers)
We rely on the following processors, all of them bound by contract in accordance with Art. 28 of the GDPR:
- Web hosting and CDN services — for the technical operation of the site.
- Productivity and communication tools — for internal project management (e.g. Google Workspace or equivalent).
- Artificial intelligence platforms — for projects involving AI-generated content; pseudonymization measures and confidentiality agreements apply.
- Payment gateway — when invoicing is managed electronically.
- Tax and accounting advisors — for compliance with accounting and tax obligations, under a duty of professional secrecy.
5.2 Legal disclosures
We may disclose your data to Public Administrations, Law Enforcement Agencies, or judicial authorities when there is a legal obligation or judicial requirement.
International data transfers
Some of our processors may be established outside the European Economic Area (EEA). In such cases, we guarantee that the transfer is carried out with appropriate safeguards:
- Adequacy decision of the European Commission — for countries recognized as safe (e.g. the U.S. under the EU-U.S. Data Privacy Framework, approved in July 2023).
- Standard Contractual Clauses (SCCs) — adopted by the European Commission in accordance with Art. 46.2.c of the GDPR.
- Binding Corporate Rules (BCRs) — when the provider has them approved by the competent supervisory authority.
You may request detailed information on the safeguards applicable to each transfer by contacting studio@eficiencial.com.
Your rights (ARCO+)
The GDPR and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD) recognize the following rights:
To know what data we process about you, for what purpose, and whether it has been disclosed to third parties.
To correct inaccurate or incomplete data concerning you.
To request the deletion of your data when it is no longer necessary or you withdraw your consent.
To request that we suspend processing while a challenge to accuracy is resolved or an objection is assessed.
To receive your data in a structured, commonly used format in order to transmit it to another controller.
To object to processing based on legitimate interest or for direct marketing purposes, with immediate effect in the latter case.
How to exercise your rights
To exercise any of the above rights, send us an email at studio@eficiencial.com indicating:
- Name and surname
- Copy of your DNI, NIE, or passport (to verify your identity)
- Right you wish to exercise and reason, where applicable
We will respond within a maximum period of one month from receipt of your request, extendable by two additional months in cases of particular complexity (Art. 12.3 GDPR).
Right to withdraw consent: When processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of the processing carried out prior to such withdrawal.
Minors
Our website is not directed at minors under 14 years of age. We do not knowingly collect data from minors of such age without verifiable consent from their parents or legal guardians, in accordance with Art. 8 of the GDPR and Art. 7 of the LOPDGDD.
In audiovisual productions involving minors, express authorization from parents or legal guardians will always be obtained before the start of filming or image capture, in accordance with Organic Law 1/1996 on the Legal Protection of Minors and Organic Law 1/1982 on the right to honor, personal and family privacy, and one's own image.
If you are aware that a minor has provided us with data without parental consent, please notify us at studio@eficiencial.com so that we may proceed with its immediate deletion.
Cookies and similar technologies
This website may use strictly necessary technical cookies for its proper functioning, as well as analytics cookies to measure page performance. The use of analytics or preference cookies will only occur with your prior consent, in accordance with the AEPD Cookies Guide (2023).
You can manage, disable, or delete cookies at any time from your browser settings. Please note that disabling certain cookies may affect the operation of the site.
For more information, see our Cookies Policy.
Information security
EficiencIAl Studio has implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Art. 32 of the GDPR:
- Encryption of communications via HTTPS/TLS protocol.
- Role-based access control and the principle of least privilege.
- Periodic staff training on data protection and cybersecurity.
- Documented procedure for the management and notification of security breaches in accordance with Art. 33 and 34 of the GDPR.
- Data protection impact assessments (DPIAs) for high-risk processing, where required.
In the event of a security breach that may pose a high risk to your rights and freedoms, we will inform you without undue delay in accordance with the provisions of Art. 34 of the GDPR.
Changes to this policy
We reserve the right to update this Privacy Policy in order to adapt it to regulatory, jurisprudential, or business changes. The current version will always be accessible at this same URL.
When the changes are substantial, we will inform you through a prominent notice on the website or, if we have your email address and the change directly affects you, by email communication. The date of the last update is always indicated in the header of this document.
Supervisory authority
If you consider that the processing of your personal data is not in accordance with applicable regulations, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain:
- Headquarters: C/ Jorge Juan, 6 — 28001 Madrid
- Web: www.aepd.es
- Phone: 901 100 099 / 912 663 517
However, we encourage you to contact us first at studio@eficiencial.com, as we are committed to resolving any complaint related to the processing of your data diligently and as quickly as possible.