This page explains what we do with the data you give us when you contact us through this website, on WhatsApp, by phone or by email. We do so in accordance with the General Data Protection Regulation (GDPR) and Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD, the Spanish Data Protection and Digital Rights Act).
Data controller
- Controller
- Isla Studio Digital S.L.
- NIF (tax ID)
- B13960737
- Registered address
- García Luna 22, 28002 Madrid
- Contact
- info@isla-studio.com
What data we process
- Contact form: your name, your company, your email address, the service you are interested in, the timeframe and whatever you tell us about the project.
- WhatsApp, phone or email: the data you choose to give us in the conversation (name, number, email address and the content of the message).
- Browsing: through Google Analytics, data on how the website is used: which pages you visit, where you came from, which buttons you click, your type of device and browser, and an approximate location (Google Analytics does not store your IP address). It uses cookies, which are set when the page loads; we explain this in the cookie policy.
We do not ask for special categories of personal data. Please do not include them in your messages.
Purpose: why
- To answer your enquiry and, if you ask us to, prepare a quote.
- If you commission a project from us, to manage it: communication, deliveries and invoicing.
- To learn, through usage statistics, which parts of the website work and which do not, so we can improve it.
We do not make automated decisions or create profiles. We will not send you marketing communications unless you ask us to.
Legal basis
- Answering your enquiry or preparing a quote: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) and the consent you give by contacting us (Article 6(1)(a) GDPR).
- Managing a commission: the performance of the contract (Article 6(1)(b) GDPR).
- Keeping the records of the commission: compliance with legal obligations (Article 6(1)(c) GDPR).
- Website usage statistics: our legitimate interest in knowing what works so we can improve it (Article 6(1)(f) GDPR). You can object as explained in the cookie policy.
Retention: how long
- If you have only made an enquiry: one year from our last contact, if no commission follows.
- If you are a client: for as long as our working relationship lasts and, after that, for the periods required by law (six years for commercial records and four for tax records).
- What you send us through the form reaches us by email, and the website keeps a copy for 12 months in case the email does not arrive; after that, it is deleted automatically.
- Usage statistics: 14 months in Google Analytics.
After that, we delete or anonymise the data.
Who else sees it
We do not share your data with anyone, unless required by law. To keep the website and email running, some providers process it on our behalf (data processors): the website hosting; Cloudflare (which protects the website and, on the form, uses Turnstile to check that the person writing is not a robot; it does not see what you write); the email service, Resend (which delivers the form messages to us by email); Google Ireland Limited (Google Analytics, for usage statistics); and nolvo, the agency that develops and maintains the website. They only use it to provide us with that service.
Resend (Resend, Inc.) and Google Analytics (Google LLC) may involve a transfer of data to the United States, covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.
If you message us on WhatsApp, that message also goes through WhatsApp (Meta), which processes it under its own privacy policy and may store data outside the European Union.
Your rights
At any time, you can exercise the following rights:
- Right of access: to know what data of yours we hold.
- Right to rectification: to correct it if it is inaccurate.
- Right to erasure: to delete it when it is no longer needed.
- Right to object and right to restriction of processing.
- Right to data portability: to receive it in a format you can take with you.
- Right to withdraw your consent, without affecting anything we have done before.
Email us at info@isla-studio.com with the subject “Data protection”. We will reply within one month. If you believe we have not handled your data properly, you can file a complaint with the Agencia Española de Protección de Datos (AEPD, the Spanish Data Protection Agency) (aepd.es).
Security
The website runs over an encrypted connection (HTTPS), and we apply technical and organisational measures to protect your data against loss, unauthorised access or misuse. If we change this policy, you will see it here, with the date it was updated.