Privacy Policy

Privacy Policy

In accordance with the principles of lawfulness, fairness and transparency established by Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we make this Privacy Policy available to you.

1. Who is responsible for processing your personal data?

Data Controller: STUDIO LESARC, S.L. (Sociedad Unipersonal)

Tax Identification Number (NIF)B-24790164
Registered OfficeCalle Velázquez 14, 1.º Derecha, 28001 Madrid, Spain
Emailinfo@studiolesarc.com (copy to ag@emunainv.com)
Telephone+34 919 07 12 14

2. What do we use your personal data for?

At STUDIO LESARC, S.L. (Sociedad Unipersonal), we process the personal information you provide depending on your relationship with us and for the following purposes:

Prospective Clients

  • To manage potential commercial and/or professional relationships.
  • To respond to requests for information and enquiries.
  • To provide quotations or proposals where requested.
  • To send information about services and/or products that may be of interest to you.

Clients

  • To manage the contractual and commercial relationship.
  • To provide our professional services.
  • To inform you about services and/or products similar to those you have already engaged.

Suppliers

  • To manage the commercial and contractual relationship with suppliers.

Job Applicants

  • To manage recruitment and staff selection processes.

Website Users

  • To analyse browsing activity in accordance with our Cookie Policy.

3. What is the legal basis for processing your data?

The legal basis for processing your personal data depends on the category of data subject concerned.

Prospective Clients

  • Article 6(1)(b) GDPR: processing is necessary in order to take steps at your request prior to entering into a contract (such as preparing quotations or service proposals).
  • Article 6(1)(f) GDPR: the Controller's legitimate interest in responding to enquiries and providing requested information.
  • Article 6(1)(a) GDPR: your consent to receive information regarding our products and services.

Clients

  • Article 6(1)(b) GDPR: processing is necessary for the performance of a contract.
  • Article 6(1)(f) GDPR: legitimate interest in sending commercial communications relating to products or services similar to those previously contracted, in accordance with Article 21.2 of the Spanish Information Society Services and Electronic Commerce Act (LSSICE).

Suppliers

  • Article 6(1)(b) GDPR: processing is necessary for the performance of a contract.

Job Applicants

  • Article 6(1)(a) GDPR: your consent.

Website Users

  • Article 6(1)(a) GDPR: your consent.

The personal data we request are adequate, relevant and limited to what is necessary for the purposes described above. You are under no legal obligation to provide such information; however, failure to do so may prevent us from providing the requested service or responding appropriately to your enquiry.

Where processing is based on our legitimate interests, you have the right to object at any time, on grounds relating to your particular situation, in accordance with Article 21 GDPR.

4. Marketing Communications

In accordance with Article 21 of the Spanish Information Society Services and Electronic Commerce Act (Law 34/2002 – LSSICE), STUDIO LESARC, S.L. (Sociedad Unipersonal) will only send marketing communications by electronic means where:

  • you have expressly requested or authorised them; or
  • you are an existing client and the communications relate to products or services similar to those previously contracted.

Every marketing communication will include a simple and free mechanism enabling recipients to unsubscribe or object to further promotional communications, both at the time personal data are collected and in every communication subsequently sent.

5. How long do we retain your personal data?

As a general rule, we retain your personal data only for as long as necessary to fulfil the purposes for which they were collected and to comply with any applicable legal obligations.

Clients and Suppliers

Personal data will be retained throughout the contractual relationship and, once it has ended, will remain securely blocked for the statutory limitation periods applicable to legal claims and regulatory obligations, including:

  • six (6) years under the Spanish Commercial Code; and
  • four (4) years for tax purposes.

Prospective Clients

Personal data will be retained for as long as necessary to deal with your enquiry and, where applicable, for a maximum period of three (3) years from our last contact unless you request their earlier deletion.

Job Applicants

Personal data will be retained for the duration of the recruitment process and, in any event, for no longer than three (3) years from receipt of your application, unless you have expressly consented to longer retention for future recruitment opportunities.

Website Users

Personal data obtained through cookies will be retained for the periods specified in the Cookie Policy.

6. Who may receive your personal data?

STUDIO LESARC, S.L. (Sociedad Unipersonal) will not disclose your personal data to third parties unless required by law or unless you have been expressly informed beforehand.

However, your personal data may be disclosed where necessary to:

  • banks and financial institutions for the processing of payments relating to contracted services or purchased products;
  • public authorities where disclosure is required by applicable legislation.

In addition, your personal data may be accessed by service providers acting on behalf of the Controller, including providers of:

  • website hosting;
  • IT maintenance;
  • analytics services;
  • digital marketing;
  • legal or accounting services.

These providers act as Data Processors under Article 28 GDPR and process personal data solely in accordance with our documented instructions and the applicable data processing agreements.

7. International Data Transfers

Certain technology providers used by the Controller, particularly those providing analytics and marketing services identified in the Cookie Policy (including Google LLC and Meta Platforms, Inc.), may transfer personal data to the United States or other countries outside the European Economic Area.

Such transfers are primarily based on the European Commission Implementing Decision (EU) 2023/1795 concerning the EU–US Data Privacy Framework, where the relevant provider is certified under that framework.

Where certification is not available, transfers are carried out using the appropriate safeguards provided for under Chapter V GDPR, particularly the European Commission's Standard Contractual Clauses (SCCs).

8. Automated Decision-Making and Profiling

The Controller does not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

9. Your Data Protection Rights

Where applicable, you have the right to:

  • access your personal data;
  • request the rectification of inaccurate data;
  • request the erasure of your personal data;
  • object to processing;
  • request restriction of processing;
  • request data portability;
  • not be subject to decisions based solely on automated processing.

To exercise any of these rights, you may write to the registered office of STUDIO LESARC, S.L. (Sociedad Unipersonal) or send an email to:

Email: info@studiolesarc.com
(copy to ag@emunainv.com)

You may be asked to provide sufficient identification to verify your identity.

Further information and standard application forms are available from the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) at www.aepd.es.

10. Can I withdraw my consent?

Yes.

Where processing is based on your consent, you may withdraw it at any time as easily as it was originally given.

Withdrawal of consent will not affect the lawfulness of any processing carried out before its withdrawal.

11. How can I lodge a complaint?

If you believe that your personal data have not been processed in accordance with applicable data protection legislation, or that your request to exercise your rights has not been handled appropriately, you may lodge a complaint with the competent supervisory authority.

In Spain, this authority is the Spanish Data Protection Agency (AEPD).

This is without prejudice to your right to contact the Controller beforehand in order to seek an amicable resolution.

12. Security and Accuracy of Your Personal Data

STUDIO LESARC, S.L. (Sociedad Unipersonal) has implemented the appropriate technical and organisational measures required to protect your personal data against unauthorised access, alteration, loss or destruction, in accordance with applicable data protection legislation.

Although every reasonable effort is made to safeguard your information, no method of transmission or storage can be guaranteed to be completely secure.

You are responsible for ensuring that the personal information you provide remains accurate and up to date, and we kindly ask you to notify us promptly of any changes.

13. Confidentiality

All personal data processed by STUDIO LESARC, S.L. (Sociedad Unipersonal) are handled with the utmost confidentiality.

All personnel involved in any stage of the processing are bound by strict confidentiality obligations and professional secrecy.

Your personal data will not be disclosed to third parties except where required by law or where you have given your explicit consent.

14. Children

This Website and its services are not intended for children under the age of fourteen (14).

STUDIO LESARC, S.L. (Sociedad Unipersonal) does not knowingly collect personal data relating to children under this age.

If a parent or legal guardian becomes aware that a child has provided personal data without the appropriate consent, they may request its deletion by contacting:

Email: info@studiolesarc.com
(copy to ag@emunainv.com)