GDPR
Until now, data privacy matters were governed by the LOPD (the Spanish Data Protection Act), which from 25 May 2018 is replaced by the European Union’s General Data Protection Regulation (GDPR).
This Privacy Policy applies only to personal data obtained on the Website. It does not apply to information collected by third parties on other websites, even if those websites are linked from the Website.
With it, the Website states its commitment to maintaining and guaranteeing its business relationship with the User securely, by protecting their personal data and guaranteeing their right to privacy.
Personal data required by the Website
In order to provide our services, we need some identifying data, depending on the service the Website provides.
For the contact form:
- Full name: in order to reply to the enquiry.
- Telephone: in order to reply to the enquiry.
- Email: in order to reply to the enquiry.
In addition, when you visit our Website, certain information is stored automatically for technical reasons, such as the IP address assigned by your internet service provider.
Legal basis
Your consent allows us to process your data, and it is a mandatory requirement for you to access the Website’s services correctly.
Users have the right to be forgotten whenever they want all their data to be deleted from our databases.
Categories of data
The data collected by the Website is not considered sensitive or protected data.
Under Article 9.1 of the European Union’s new General Data Protection Regulation (GDPR), sensitive or protected data is personal data revealing:
- Racial or ethnic origin.
- Political opinions.
- Religious or philosophical beliefs.
- Trade union membership.
- The processing of genetic data.
- Biometric data for the purpose of uniquely identifying a natural person.
- Data concerning health.
- Data concerning a natural person’s sex life or sexual orientation.
We only work with the minimum identifying data needed to do our work: first name, surname, address, telephone, email and tax identification number.
Data retention period
The data collected by the Website is not considered sensitive or protected data.
Client data (name, telephone, postal address, email address, etc.) will remain in our system for as long as is legally and technically required for the normal operation of the Website, unless the User exercises their right to have it deleted or updated.
Applicable legislation
Since 25 May 2018, the Website has been governed by the European Union’s General Data Protection Regulation (GDPR).
https://eur-lex.europa.eu/eli/reg/2016/679/oj
Security measures
The Website is hosted on systems operated by Mun Films Produccions (hereinafter, Mun Films), where the technical and organisational measures necessary to guarantee the security of the User’s personal data have been implemented, in order to prevent its alteration, loss, processing and/or unauthorised access. This takes into account the state of technology, the nature of the stored data and the risks to which it is exposed, whether from human action or from the physical or natural environment. All of this is in accordance with the provisions of the GDPR.
Exercising your rights
Any User who has provided their data to the Website may contact the website owner in order to exercise, free of charge, their rights of access, rectification or erasure, restriction and objection regarding the data held in its files.
Users should contact the Website by email or in writing.
Users may exercise their rights by writing to the Website with the reference “Data protection”, stating their details, proving their identity and giving the reasons for their request, at the following address:
C/Roquetes 28, Local 1 Baixos, 08960 Sant Just Desvern, Barcelona, Spain. info@munfilms.com
Any information that we need to keep because of a legal, tax or contractual obligation will be blocked and used only for those purposes, instead of being deleted.
Changes to this Privacy Policy
The Website reserves the right to modify this Privacy Policy as a result of changes in legislation, case law or the doctrine of the Spanish Data Protection Agency.
Any change to the Privacy Policy will be published at least ten days before it takes effect.
Data controller and data processor
The data controller is the Website.
Services provided by third parties
To provide services that are strictly necessary for its proper operation, the Website uses the following service providers, under their respective privacy terms:
- Google Analytics, for statistics. https://policies.google.com/privacy?hl=en
- MailChimp, for sending emails. https://mailchimp.com/legal/privacy/
Social plugins
On our Website we offer links and services related to different social networks. If the User is a member of a social network and clicks on the corresponding link, the social network provider may link their profile data with information about their visit to the Website.
The User should therefore be informed about the functions and policies of the respective social network regarding the processing of their personal data, whether they access one of our web pages with one of their social network profiles or share information through them.
The User can access the privacy policies of the different social networks at any time, and configure their profile to protect their privacy.
- Facebook: https://www.facebook.com/help/323540651073243/
- Instagram: https://help.instagram.com/155833707900388
- Twitter: https://twitter.com/privacy
- YouTube: https://policies.google.com/privacy?hl=en
Acceptance, consent and withdrawal
The User declares that they have been informed of these terms on the protection of personal data, and accepts and consents to their processing by the Website in the manner and for the purposes indicated in the Legal Notice.
The User may withdraw their data at any time, without this affecting actions already carried out in the past; that is, without retroactive effect.
