Privacy policy

Data controller

The controller of the personal data you provide through this website is balta.studio. For any data-protection-related queries, you can contact us at hola@balta.studio.

What data we process

We only process the data you voluntarily provide when you contact us. Specifically:

• Contact data: name, email address and, where applicable, the organization or council you represent.
• Message content: the information you choose to share in your communication.
• Technical browsing data: IP address, browser type, operating system and pages visited, collected in aggregate for statistical and security purposes.

We do not request or collect special categories of data (health, ideology, religion, etc.).

Purpose of processing

The personal data we collect is used for the following purposes:

• Responding to information requests, proposals or messages you send us.
• Maintaining communications related to requested projects or services.
• Ensuring the website's proper operation and security.

We do not use your data for advertising purposes nor share it with third parties for such purposes.

Legal basis

Processing of your data is based on the legal grounds provided by Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the protection of personal data and guarantee of digital rights (LOPDGDD):

• Consent given expressly when sending us a communication or information request.
• Legitimate interest for maintaining the website's security and preventing fraudulent use.
• Performance of a contract for professional relationships derived from agreed projects.

Retention period

Data will be kept for as long as strictly necessary to handle your request and, afterwards, for the periods legally required to comply with legal, tax or administrative obligations. Once those periods have elapsed, the data will be securely deleted.

Recipients and transfers

We do not share your data with third parties except when required to fulfill a legal obligation or when essential to deliver a requested service (for example, hosting or communication providers).

Our providers act as data processors and are bound by contracts that guarantee compliance with data-protection regulations. No international transfers of data outside the European Economic Area are foreseen without adequate guarantees.

User rights

As the data subject, you have the right to exercise the following at any time:

• Access: know what data of yours we are processing.
• Rectification: update inaccurate or incomplete data.
• Erasure: request deletion of your data when it is no longer needed.
• Objection: object to processing under certain circumstances.
• Restriction: request that processing be restricted in specific cases.
• Portability: receive your data in a structured, commonly used format.
• Withdrawal of consent: at any time, without retroactive effect.

You can exercise these rights by sending a request to hola@balta.studio, identifying yourself appropriately and stating which right you want to exercise. You also have the right to file a complaint with the Spanish Data Protection Agency (aepd.es) or the Catalan Data Protection Authority (apdcat.gencat.cat) if you believe the processing does not comply with current regulations.

Security measures

We apply reasonable technical and organizational measures to protect information against loss, unauthorized access, alteration or improper disclosure. Even so, no system connected to the Internet is infallible: if you spot a security incident, please let us know immediately.

Changes to this policy

We may update this privacy policy to adapt it to legal, regulatory or studio-practice changes. We recommend reviewing it periodically; we will always indicate the date of the last update at the top of the document.