Legal
Privacy policy
Last updated: 2 July 2026
At Piscastudio we care about your privacy. This policy explains clearly who is responsible for your data, what data we collect, for what purpose, on what legal basis and what rights you have, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 of 5 December, Ley Orgánica de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD, the Spanish Data Protection and Digital Rights Act).
1. Data controller
- Controller: Pisca Studio, SCP
- Tax ID (NIF): J67194845
- Registered address: Mas el Cogul, s/n, 08540 Centelles (Barcelona)
- Email: info@piscastudio.com
- Telephone: +34 931 595 905
2. What data we collect and how
We only process the data you voluntarily provide to us through the following channels:
- Contact form: your name, email address and the content of the message you send us.
- Direct communications: the data you provide when you contact us by email, telephone or social media.
- Browsing data: technical data such as your IP address and information about your device or browser, collected through cookies and similar technologies, as detailed in our Cookie policy.
We do not collect special categories of data (sensitive data), and the website is not intended for children under the age of 14.
3. Purposes and legal basis for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to the enquiries, quote requests and communications you send us through the form or other channels. | Your consent and/or the taking of pre-contractual steps at your request (Art. 6(1)(a) and 6(1)(b) GDPR). |
| Managing the business relationship and the provision of the services contracted. | Performance of a contract (Art. 6(1)(b) GDPR). |
| Complying with applicable legal, accounting and tax obligations. | Compliance with a legal obligation (Art. 6(1)(c) GDPR). |
| Ensuring the operation, security and improvement of the website (technical cookies and, if you accept them, analytics cookies). | Legitimate interest for technical cookies and your consent for all others (Art. 6(1)(f) and 6(1)(a) GDPR). |
4. How long we keep your data
We keep your data for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the limitation periods of any resulting legal obligations. Specifically:
- Enquiries that do not lead to a contract: for as long as necessary to respond to them and for a maximum of 1 year.
- Contractual relationships: for the duration of the relationship and, once it has ended, for the applicable statutory periods (tax, commercial, etc.), usually up to 6 years.
5. Recipients and data processors
We do not disclose your data to third parties unless required to do so by law. However, in order to provide our services we rely on providers who act as data processors and who have access to certain data solely for the purpose of providing their service to us:
| Provider | Service | Location / transfer |
|---|---|---|
| Web3Forms | Processing of contact form submissions. | United States. International transfer covered by the European Commission's Standard Contractual Clauses. |
| Dinahosting, S.L. (Tax ID B15805419) | Website hosting and server log records. | Spain (European Union). No international data transfer. |
| Google (Google Fonts) | Web font service that loads the site's typefaces. | May involve your IP address being disclosed to Google's servers. Transfer covered by the Standard Contractual Clauses. |
6. International transfers
Some of the providers listed may be located outside the European Economic Area. In such cases, we ensure that the transfer is carried out with the appropriate safeguards provided for in Chapter V of the GDPR, mainly the Standard Contractual Clauses approved by the European Commission or adequacy decisions in force.
7. Your rights
You may exercise the following rights at any time:
- Access: to find out what data of yours we process.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to ask us to delete your data when it is no longer necessary.
- Objection: to object to a particular processing activity.
- Restriction: to request that we restrict its processing.
- Portability: to receive your data in a structured, commonly used format.
- Withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, write to us at info@piscastudio.com stating which right you wish to exercise and attaching a copy of a document proving your identity. We will respond free of charge and within the statutory time limits.
If you believe that we have not handled your rights correctly, you are entitled to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid.
8. Data security
We apply appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration or destruction, taking into account the state of the art and the nature of the data processed. The website uses an encrypted connection (HTTPS).
9. Changes to this policy
We may update this privacy policy to reflect regulatory or operational changes. Any changes will be published on this page, indicating the date of the update.