PRIVACY POLICY

1. Data Controller

• Identity: Elisa Peteiro Pérez

• National ID (DNI): 34962212G

• Address: Ourense, Spain (32002)

• Email: elisapeteiro.art@gmail.com

2. What Personal Data Do We Process?

We process the data you voluntarily provide when contacting us through the website form, email, or WhatsApp Business, such as: name, email address, phone number, the company or studio you work for, and billing details in case you hire our services.

3. What Do We Use Your Data For?

• Responding to inquiries and managing the business relationship with photographers, studios, and other professional clients.

• Preparing quotes, license agreements, and invoices.

• Managing payments for hired services through platforms such as Revolut, Wise, or PayPal.

• Maintaining communication through WhatsApp Business when the user initiates contact through that channel.

• Sending commercial communications, only if the user has given explicit consent to receive them.

4. Legal Basis

The legal basis for processing your data is:

• Your consent, when explicitly given.

• The performance of a contract or pre-contractual measures requested by you.

• The legitimate interest of the owner in carrying out her professional activity.

• Compliance with legal obligations (tax and accounting).

5. How Long Do We Keep Your Data?

Your data will be kept for as long as the business relationship is maintained and, afterward, for the periods legally required to address potential liabilities, in accordance with applicable Spanish tax and commercial statute-of-limitations periods.

6. Who Do We Share Your Data With?

Data is not shared with third parties except where legally required. Only the data strictly necessary is shared with service providers who assist the owner's activity, such as payment platforms (Revolut, Wise, PayPal), messaging services (WhatsApp Business/Meta), translation tools (Google Translate), and, where applicable, accounting or tax advisory services.

7. International Data Transfers

As the owner works with clients located outside the European Economic Area (for example, in the United States, the United Kingdom, or Australia), some data may be processed through providers located outside the EU. In such cases, this processing is carried out through providers that offer the appropriate safeguards required under the GDPR, such as European Commission-approved standard contractual clauses or applicable adequacy decisions.

8. What Are Your Rights?

You have the right to access your personal data, request correction of inaccurate data, request deletion, restriction of processing, object to processing, or request data portability by writing to elisapeteiro.art@gmail.com. You also have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) if you believe your data is not being processed in accordance with applicable regulations.

9. Security Measures

Appropriate technical and organizational measures have been implemented to ensure the security of personal data and to prevent its alteration, loss, unauthorized processing, or unauthorized access.