PRIVACY POLICY

1. Data controller

2. Purpose of processing

At dras.es, we process personal data provided by users in order to:

  • Respond to requests submitted through contact forms or other communication channels available on the website.
  • Provide the requested information and/or services.
  • Manage the administrative, contractual and/or commercial relationship that may arise.
  • Handle inquiries related to the website, projects, collaborations or professional services.
  • Where applicable, manage communications strictly related to the requested service.

We do not process data for purposes incompatible with those described above.

3. Legal basis (lawfulness of processing)

The legal bases for processing your data may include:

  • Your consent, when you contact us or submit a form and accept this Privacy Policy. You may withdraw your consent at any time.
  • Pre-contractual measures and/or performance of a contract, where processing is necessary to manage a request, quotation, or the provision of a service.
  • Compliance with legal obligations, when required by applicable regulations.

4. Data categories

Depending on the form or channel used, we may process:

  • Identification and contact data (e.g., name, email, phone number)
  • Professional data (e.g., company/role, if provided)
  • Any information you voluntarily include in the message content

We do not request special categories of data (sensitive data). Please avoid sending sensitive information through the forms or email.

5. Recipients and data transfers

Your personal data will not be shared with third parties unless:

  • It is necessary for the provision of a service (e.g., technical providers acting as data processors under our instructions), and always under appropriate contractual safeguards; and/or
  • There is a legal obligation.

International data transfers may occur if third-party service providers (e.g., hosting, email delivery, analytics) are located outside the European Economic Area. In such cases, appropriate safeguards will be applied in accordance with applicable data protection laws.

6. Data retention

Personal data will be retained:

  • For as long as the relationship is maintained or as long as necessary to respond to your request.
  • Until you request deletion (where applicable).
  • For the periods required to comply with legal obligations.

7. User rights

You may exercise the following rights, when applicable:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to object
  • Right to data portability

To exercise these rights, please send an email to studio@dras.es with the subject “Data Protection Rights”, and include:

  • Your request (which right you wish to exercise)
  • Sufficient information to identify you
  • A copy of your ID document (only when necessary to verify identity)

If you consider that your rights have not been properly addressed, you may lodge a complaint with the competent data protection supervisory authority (in Spain, the Spanish Data Protection Agency – AEPD).

8. Data security

The Website Owner applies reasonable technical and organizational measures aimed at protecting personal data against unauthorized access, alteration, loss or disclosure. However, no system is completely secure and the absolute security of data transmitted over the Internet cannot be guaranteed.