En Foco Studio

Privacy policy

1. Data controller

• Controller: [full name or registered company name]
• Tax ID: [number]
• Address: [full address]
• Contact and rights requests: studio@enfoco.site

2. What data we process

• What you give us in the form: name, email, phone or WhatsApp, country and city, property type, listing link and whatever you write in the message.
• Photos and videos of your property that you upload or share by link.
• Billing details when you become a client: legal name, tax or VAT number and address.
• Technical browsing data, if you accept analytics cookies (see the cookie policy).

3. Photographs of properties

The photos you send are generally images of spaces and contain no personal data. If identifiable people, number plates or other identifying elements appear in any of them, we remove or blur them during editing unless you tell us otherwise in writing and confirm you have those people's consent.

We never publish, share or use any of your images as a commercial sample without your prior written permission.

4. Why we process your data and on what legal basis

• To reply to your enquiry and produce the test video. Legal basis: pre-contractual measures at your request (Art. 6.1.b GDPR).
• To deliver and invoice the service you hire. Legal basis: performance of a contract and legal obligations (Art. 6.1.b and 6.1.c GDPR).
• To send you marketing about our services, if you opt in. Legal basis: consent (Art. 6.1.a GDPR), withdrawable at any time.
• To measure site usage with analytics tools, if you accept the relevant cookies. Legal basis: consent.

5. How long we keep it

Enquiries that don't lead to a project are kept for [12] months. Client data is kept for the duration of the relationship and afterwards for the applicable tax and commercial limitation periods (generally 6 years). Working files are kept for [12] months after delivery so we can resend them if you ask, then deleted.

6. Who we share it with

We do not sell or trade your data. We use suppliers acting as processors, each covered by an Article 28 GDPR agreement:

• Web hosting: [provider and country]
• Form and email service: [provider and country]
• File storage and delivery: [provider and country]
• Invoicing and accounting: [provider or accountant]
• Web analytics: [provider], only if you accept cookies

Where a supplier is outside the European Economic Area, the transfer relies on the Standard Contractual Clauses approved by the European Commission.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time, and withdraw any consent given, by writing to studio@enfoco.site. We reply within one month at the latest.

If you believe we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the supervisory authority in your own country.

8. Security

We apply reasonable technical and organisational measures to protect your information: restricted access to files, private delivery links that expire, and encrypted backups.

Last updated: [date]