top of page

Privacy Policy

The data provided to Mariana Yolanda Bernal Fernández de Castro through the website ​www.thestudio79.com​ (hereinafter, the “Website”) when using the services provided by THESTUDIO79 (hereinafter, the “Services”) will be processed in accordance with personal data protection legislation (GDPR, EU Regulation 2016/679).

THESTUDIO79 informs users of the following.

 

1. Data controller

1.1. The Controller of personal data is Mariana Yolanda Bernal Fernandez de Castro, with registered address at Calle Umbría de Peralejo 5, registration number 17553519B and tax ID (CIF) 17553519B (hereinafter “THESTUDIO79” or the “Controller”), telephone +34638564574, info@thestudio79.com.

 

2. Nature of the data processed and purposes of processing

2.1. The personal data processed belong exclusively to users who have reached the age of majority, personal data being understood as any information relating to an identified or identifiable natural person, whether directly or indirectly by reference to any other information.

 

The data processed are those provided by the user to the Controller when signing up for the newsletter Service and/or when requesting the provision/activation of a TheStudio79 Service and/or when sending communications to TheStudio79 by email or through a form provided for that purpose, such as first name and surname, date of birth, email address, postal address and telephone number, as well as the data collected by TheStudio79 while browsing the Website, such as IP address and information obtained through cookies.

 

2.2 The data will be used for the following purposes:

 

A) to provide the Services requested, to comply with obligations arising from the law and from EU regulations or legislation, and to exercise rights before the Courts;

 

B) to promote, via email, telephone calls with an operator, SMS and MMS, commercial proposals related and/or connected to TheStudio79's Services, to send advertising material exclusively about TheStudio79's products or services, to carry out marketing surveys, and to send free samples or promotional gifts of modest value;

 

C) to analyse consumers' consumption habits and choices and to build a user profile based on the information and preferences shown while browsing the Website or using the Services requested, in order to send personalised advertising communications by email, SMS, MMS, post and telephone calls with an operator.

 

The profiling activity identified in section 2.2C will not produce legal effects on the user nor affect them personally, other than the communication and promotion of personalised offers.

 

3. Mandatory/optional nature of providing data

 

3.1 Providing the data requested when activating the Services for the purposes identified in section 2.2A above is mandatory, as it is strictly necessary to provide the Services requested and to comply with legal obligations. Refusal to provide the data will make it impossible for TheStudio79 to complete the provision of the Services requested and/or to comply with legal obligations.

 

3.2 Providing the data requested for the purposes identified in sections 2.2B and 2.2C above is optional.

 

Refusing consent for the purposes in sections 2.2B and 2.2C will have no effect on the provision of the Services. Users may still use TheStudio79's Services.

 

Users may object to processing for the purposes identified in sections 2.2B and 2.2C, either immediately, by not giving their consent when activating the newsletter Service or other Services, or at a later time, by sending an email to info@thestudio79.com. Users tick the checkboxes when activating the Services to give their consent to the use of the data identified above for the purposes specified therein; if users do not tick a particular checkbox, they will be deemed not to have consented to processing for that purpose.

 

4. Processing methods

 

4.1 Users' data will be collected online when the Services requested are activated, by comparing items of information, or through the use of the email service.

 

4.2 Users' data will be processed through recording, consultation, communication, storage and deletion operations carried out mainly with electronic tools and manually, ensuring that appropriate measures are taken to protect the security and guarantee the confidentiality of the data processed.

 

 

Our website is hosted by Wix.com. Where data are transferred outside the European Economic Area, such transfers are covered by the EU-U.S. Data Privacy Framework, adopted by the European Commission through its adequacy decision of 10 July 2023, and/or by the Standard Contractual Clauses approved by the European Commission.

 

4.4 Personal data will be processed by TheStudio79's employees and/or collaborators acting as processors or persons in charge of processing, within the scope of their respective roles and in accordance with the instructions given by Studio79.

 

5. Disclosure of data

 

5.1 Users' personal data may be disclosed to certain parties designated by TheStudio79 in order to provide the Services requested and comply with legal obligations.

 

Data may be disclosed to:

 

a) individuals, companies or professionals providing TheStudio79 with accounting, administrative, legal, tax and financial assistance, and consultancy and collaboration services;

 

b) parties delegated and/or appointed by TheStudio79 to carry out activities or parts of activities related to the provision of the Services requested, and all other external parties that collaborate with Studio79 and must be informed of the data in order to properly fulfil TheStudio79's obligations under the contract for the provision of Services;

 

c) Public Authorities in the exercise of their institutional functions, within the limits established by laws and regulations.

 

Users' data will not be disseminated.

 

The Data Controller has appointed Data Processors for the processing of personal data. The updated list of all Processors can be requested at the following email address: info@thestudio79.com. Studio79 may update the list from time to time.

 

6. Users' rights

 

6.1 Users (hereinafter, the "data subject") have the right to obtain confirmation of the existence of their personal data and of the purposes for which the data are processed at any time. Users also have the right to request the updating, rectification, erasure or blocking of the data and to refuse their use, in whole or in part.

 

6.2 Users' rights are listed below. Specifically:

 

6.2.1 The data subject shall have the right to obtain confirmation as to whether or not personal data concerning them are being processed and, where that is the case, access to the personal data and the following information.

 

6.2.2 The data subject shall have the right to be informed of:

 

a) the identity and contact details of the controller and, where applicable, of the controller's representative;

 

b) the contact details of the data protection officer, where applicable;

 

c) the categories of personal data, their source, the purposes of the processing for which the personal data are intended, and the legal basis for the processing;

 

d) the legitimate interests pursued by the controller or by a third party, where applicable;

 

e) the recipients or categories of recipients of the personal data, if any;

 

f) where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.

 

6.2.3 In addition to the above information, the controller shall provide the data subject with the following further information:

 

a) the period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period;

 

b) the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject, or to object to processing, as well as the right to data portability;

 

c) where processing is based on the users' consent, the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;

 

d) the right to lodge a complaint with a supervisory authority (Data Protection Authority);

 

e) whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and the possible consequences of failure to provide such data;

 

f) the existence of automated decision-making, including profiling, and, in cases where such automated decisions produce legal effects concerning them or similarly significantly affect them, meaningful information about the logic involved, as well as the significance and the consequences of such processing for the data subject.

 

6.2.4 The data subject shall have the right to object, at any time, to the processing of personal data concerning them:

 

a) on grounds relating to their particular situation, including profiling;

 

b) where personal data are processed for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing.

 

6.2.5 The data subject shall have the right to:

 

a) obtain from the controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement;

 

b) receive the personal data concerning them, which they have provided to TheStudio79, in a commonly used, easily readable electronic format, and have the right to transmit those data to another controller without hindrance;

 

c) obtain from the controller the erasure of personal data concerning them, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

 

- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

 

- the data subject withdraws the consent on which the processing is based and there is no other legal ground for the processing;

 

- the data subject objects to the processing and there are no overriding legitimate grounds for the processing;

 

- the personal data have been unlawfully processed;

 

- the personal data have to be erased for compliance with a legal obligation under European Union or Member State law to which the controller is subject;

 

d) obtain from the controller restriction of processing.

 

6.3 To exercise the above rights and to receive information about the parties to whom the data are disclosed, or the parties who may become aware of the data while acting as processors or persons in charge of processing, users may contact TheStudio79 by sending a request using the contact details provided above.

 

The controller shall provide information on action taken on a request from a data subject without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. The controller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the data subject makes the request by electronic means, the information shall be provided by electronic means where possible, unless otherwise requested by the data subject.

 

7. Duration of processing

 

7.1 Personal data will be processed for the purpose mentioned in section 2.2.A for no longer than is necessary to provide the Services requested, and for as long as is necessary to comply with applicable civil and tax obligations, and in any case for no more than 10 years from the termination of the underlying obligation (in accordance with the applicable limitation provisions).

 

7.2 Personal data will be processed for the purposes mentioned in section 2.2.B (marketing/promotional activities) for a maximum period of 24 months from the date on which consent to the processing of personal data was given.

 

7.3 Personal data will be processed for the purposes mentioned in section 2.2.C (profiling activity) for no more than 12 months from the date on which consent to the processing of personal data was given.

 

7.4 At the end of the data processing period, the data will be deleted or permanently anonymised.

 

8. Legal basis for processing

 

8.1 The legal basis for processing shall be the user's consent, the fulfilment of a contractual requirement and legal provisions.

 

9. Updates to the Privacy Policy

 

9.1 This Privacy Policy is subject to occasional review. TheStudio79 will notify users when changes are made to the data processing conditions by publishing the amendments on the website. Where required by applicable law, users will have the option to consent to any new data processing. If the user refuses, their data will not be processed in accordance with the changes in the new privacy policy.

bottom of page