PRIVACY POLICY
Last updated: 01/14/2026
1. DATA CONTROLLER
Data Controller: Retratos Corporativos — Séfora Camazano
Registered address: Urb Mas Camarena Sector A, 46117 Betera, Spain
Contact email: info@retratoscorporativos.com
Website: https://retratoscorporativos.com
The Data Controller ensures compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).
2. DATA PROTECTION OFFICER (DPO)
A Data Protection Officer (DPO) has not been appointed, as it is not mandatory for this activity.
3. PURPOSES OF PROCESSING
Personal data collected through the Website (contact forms, subscription forms, comments, email communications or professional contact) may be processed for the following purposes:
a) To manage and respond to enquiries and requests.
b) To manage professional or pre-contractual communications, including follow-up communications related to services requested.
c) To manage administrative and commercial aspects of the requested or contracted services.
d) To send commercial communications related to Corporate Portrait services (news, availability, services and relevant updates), only where lawful and/or when you have given consent.
e) To ensure technical operation, security and improvement of the Website (including technical and usage data, in accordance with the Cookies Policy).
Your data will not be used for purposes incompatible with those described above.
4. LAWFUL BASIS FOR PROCESSING
Depending on the specific interaction, processing may be based on one or more of the following lawful grounds:
-
Your consent (Art. 6(1)(a) GDPR), for example when submitting a form or subscribing.
-
Pre-contractual measures (Art. 6(1)(b) GDPR), when you request information prior to hiring services.
-
Performance of a contract (Art. 6(1)(b) GDPR), when you hire services.
-
Legitimate interests (Art. 6(1)(f) GDPR), for professional communications, business administration, and Website security.
You may withdraw consent at any time by contacting: info@retratoscorporativos.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5. DATA WE PROCESS
We may process the following categories of personal data:
-
First and last name
-
Email address
-
Telephone number (if provided)
-
Company name and role/title (if provided)
-
Message content and communications
-
Technical/usage data (cookies and similar technologies, as described in the Cookies Policy)
You guarantee that the data provided is accurate and up to date.
6. WHETHER PROVIDING DATA IS MANDATORY
Where a form indicates required fields, those data are necessary to manage your request.
If you do not provide the required data, we may be unable to process your enquiry or provide the requested service.
7. DATA RETENTION
Personal data will be retained as follows:
-
Enquiries and requests: for the time necessary to manage the request and, thereafter, for up to 12 months, unless a longer period is required by law or further relationship exists.
-
Clients / contracted services: for the duration of the contractual relationship and thereafter for the legally required periods (tax/accounting obligations).
-
Marketing subscriptions: until you unsubscribe or withdraw consent.
8. DATA RECIPIENTS
Your personal data will not be shared with third parties, except:
-
where legally required, or
-
when necessary to provide services through technology providers acting as data processors under appropriate agreements in accordance with Art. 28 GDPR (e.g., hosting, email marketing providers, Website maintenance services).
9. INTERNATIONAL DATA TRANSFERS
Some service providers may be located outside the European Economic Area (EEA) or may carry out processing outside the EEA.
Where international data transfers occur, they will be carried out with the appropriate safeguards required under GDPR, such as Standard Contractual Clauses (SCCs) or other valid transfer mechanisms.
10. YOUR RIGHTS
You may exercise the following rights under GDPR:
-
Access
-
Rectification
-
Erasure
-
Restriction of processing
-
Objection
-
Data portability
To exercise your rights, please contact:
📩 info@retratoscorporativos.com
Where necessary to verify identity, you may be asked to provide a copy of an identification document.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been infringed.
11. SECURITY MEASURES
We apply appropriate technical and organisational security measures designed to ensure confidentiality, integrity and availability of personal data and to prevent unauthorised access, alteration or loss.
12. COMMERCIAL COMMUNICATIONS
You will only receive commercial communications where lawful, including if:
-
you have voluntarily subscribed, and/or
-
you have expressly authorised such communications, in accordance with applicable Spanish legislation (including LSSI-CE).
You may unsubscribe at any time through the unsubscribe link included in each email or by writing to: info@retratoscorporativos.com.
13. SOCIAL MEDIA
Retratos Corporativos may have a presence on social networks. Processing of personal data relating to users who interact with our profiles will be governed by:
-
this Privacy Policy, and
-
each social network’s own terms of use and privacy policy.
14. COOKIES
The use of cookies and similar technologies is governed by our Cookies Policy, available on the Website.
15. APPLICABLE LAW
This Privacy Policy is governed by current European and Spanish data protection legislation.