This policy explains what personal data we process when you use kioseastudio.com, clubs.kioseastudio.com or weddings.kioseastudio.com, or when you write to us, what for and what rights you have. The General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD) apply.
1. Controller
Denis Chiosea Crastin (Kiosea Studio) · NIF 43878621A · C/ Arquitecte Josep Azemar, 3, 1B · 17600 Figueres (Girona), Spain · hola@kioseastudio.com
2. What data we process
- What you give us in the form: name, email, phone (optional), company or club, wedding date and venue where applicable, what you need and your message, plus the optional answer to the automatic question.
- What you give us if you write to us by email, WhatsApp or Instagram.
- Minimal technical data logged by the server so the website works and stays secure (IP address, date and time, page visited).
- Browsing data, only if you accept advertising cookies: the pages you visit on this site and a few actions (opening a video, moving through or sending the form, tapping WhatsApp), linked to an identifier for your browser. Never your name, email, phone number or anything you type in the form (see point 6).
We do not ask for special categories of data. The service is not aimed at children under 14.
3. What we use it for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your request and preparing a quote | Pre-contractual steps taken at your request (art. 6.1.b GDPR) |
| When enabled, sending you an automatic question on receipt of your request to better understand what you need (see point 4) | The same: it is part of handling your request (art. 6.1.b GDPR) |
| Providing the contracted service, invoicing and meeting tax obligations | Contract (art. 6.1.b) and legal obligation (art. 6.1.c GDPR) |
| Keeping the website secure and preventing spam | Legitimate interest (art. 6.1.f GDPR) |
| Measuring our ads on Facebook and Instagram and showing them to people who have visited the site (Meta Pixel) | Your consent (art. 6.1.a GDPR and art. 22.2 of the Spanish LSSI), which you can withdraw at any time |
We do not send you advertising by email or message, and we do not make automated decisions about you. Only if you accept advertising cookies may Meta use your visit to show you our ads (see point 6).
4. The form’s automatic reply
When this feature is enabled, after you submit the form an artificial intelligence system will read your message and suggest a question to complete the information (for example, what the videos would be about or how many guests there will be). It is labelled as an “automatic reply”. It does not decide anything: Denis reads your full request and replies to you personally. Answering that question is optional.
5. How long we keep it
- Requests that do not lead to a booking: 12 months from the last contact; after that they are deleted.
- Clients: for as long as the relationship lasts and, afterwards, for the period required by law (6 years for commercial records and 4 for tax records).
- Server technical logs: 30 days.
- Advertising cookies: up to 3 months in your browser (cookie policy).
6. Who else has access to your data
We do not sell your data or share it without your consent. Some providers process it on our behalf and only to provide us with their service:
| Provider | Purpose | Where |
|---|---|---|
| Hostinger International Ltd. | Website and email hosting | European Union |
| Google LLC (Gmail) | Email management | USA (EU–US Data Privacy Framework) |
| Anthropic, PBC | Generating the form’s automatic question (when enabled) | USA (European Commission standard contractual clauses) |
| Meta Platforms Ireland Ltd. (WhatsApp Business) | Notifying Denis on WhatsApp that a request has arrived (when enabled) | European Union; possible access from the USA (EU–US Data Privacy Framework) |
If you choose to write to us on WhatsApp or Instagram, those platforms (Meta) process the data under their own terms.
Meta Pixel (only if you accept it). Meta Platforms Ireland Ltd. is a joint controller with us for collecting browsing data on this site and sending it to Meta, under its Controller Addendum. Meta is solely responsible for what it does with that data afterwards (Meta’s privacy policy). It may be transferred to the USA under the EU–US Data Privacy Framework. You can withdraw consent at any time from “Cookie settings” at the foot of the page, and exercise your rights with us or with Meta.
We may also disclose data to public authorities when required by law (for example, the Spanish Tax Agency).
7. Your rights
You can ask at any time to access your data, rectify it, erase it, object to its processing, restrict it or receive it to take it to another provider (portability). Write to hola@kioseastudio.com stating which right you wish to exercise. We will only ask you to prove your identity if we have reasonable doubts about who is making the request.
If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
8. People who appear in our work
We publish photos and videos of our work on the website and on social media with the authorisation of the people who appear in them. You can withdraw that authorisation at any time by writing to hola@kioseastudio.com, and we will remove the images.
9. Changes
If we change this policy, we will publish the new version here with its date.
This is a translation for information purposes. In case of discrepancy, the Spanish version prevails.
30 September 2026