Privacy Policy

In compliance with Regulation (EU) 2016/679 (GDPR/RGPD), Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE), notice is hereby given that the controller for the processing of personal data processed through the websites delstudio.store and delstudio.site (hereinafter, the "Websites") is:

Controller: Eduard Varariu Diaconu (sole trader), acting under the trade name DEL Studio

NIF (Tax ID): 54773086N

Contact and correspondence address in the United Kingdom: Suite 10, 44–46 Elmwood Avenue, Belfast, County Antrim, Northern Ireland, BT9 6AZ, United Kingdom

Contact email: hello@delstudio.site

Email for data protection matters: privacy@delstudio.site

In this Policy, "DEL Studio", "we", "us" or "our" refer to the indicated controller.

DEL Studio provides software development, automation, integrations, digital systems and related services for companies and professionals.

Depending on the activity, we act in two different ways:

As a data controller, when we decide for what purpose and how the data is processed. This applies to data from Website visitors, persons who contact us, our clients and their billing. This Policy describes these processing activities.

As a data processor, when we process personal data on behalf of a client following their instructions. This is the case, for example, for data of persons who make bookings or enquiries through the systems we develop or manage for a client. In that scenario, the controller is the client, who must inform those persons, and our processing is governed by the data processing agreement provided for in Article 28 of the GDPR (RGPD). If you are one of those persons and wish to exercise your rights, please contact the business with which you contracted or made the booking in the first instance; you may also write to us and we will forward your request to the controller.

Commercial communications. We do not send commercial communications by electronic means without prior consent, except where a prior contractual relationship exists and they refer to services similar to those contracted, in accordance with Art. 21 of the LSSI-CE. You may object at any time by writing to privacy@delstudio.site or using the unsubscribe mechanism included in the communication.

Payments. Payments may be made by bank transfer to our account (IBAN) or through Stripe. We do not receive or store your full card details; these are managed by Stripe. Stripe may process certain data as an independent controller in accordance with its own privacy policy.

Mandatory data. Fields marked as mandatory in the forms are necessary to attend to your request. If you do not provide them, we will not be able to respond to it.

The data normally comes from you. We may also receive professional contact details from the organisation you work for or from a client, in relation to a project, in which case we will inform you where appropriate.

We do not sell your personal data. To provide our services, we use providers who access personal data on our behalf (data processors), with whom we maintain the contractual guarantees required by Art. 28 of the GDPR (RGPD). The categories of recipients are:

Providers of technological infrastructure, web hosting and databases.

Providers of email, productivity tools and communications, including business messaging.

Payment service providers and banking entities.

Providers of web analytics tools, only when you have given your consent.

Professional advisors (tax, accounting and legal), subject to a duty of confidentiality.

Public administrations, courts and tribunals, where there is a legal obligation.

We do not transfer data to other third parties unless there is a legal obligation or you expressly authorise us to do so.

Some of our providers may process data outside the European Economic Area, including the United States. In those cases, the transfers are covered by one of the safeguards provided for in Chapter V of the GDPR (RGPD): an adequacy decision by the European Commission (including the EU-US Data Privacy Framework where the provider is certified), the European Commission's standard contractual clauses or another valid mechanism. You may request information about the safeguards applied by writing to privacy@delstudio.site.

We retain the data only for the time necessary for the purpose for which it was collected and, thereafter, blocked during the limitation periods for liabilities that may arise:

Enquiries and communications without contracting: up to 24 months from the last contact, unless you request erasure earlier.

Contractual and project data: during the contractual relationship and, thereafter, during the legal limitation periods for actions.

Invoices and accounting and tax documentation: during the periods required by tax and commercial regulations (generally, up to six years).

Technical and security logs: up to 12 months, unless needed to investigate an incident.

Data based on consent (for example, analytics): until you withdraw consent or the cookie period expires, according to the Cookie Policy.

Once the periods have elapsed, the data is erased or anonymised.

You may exercise the following rights:

Access: to know what data we process and obtain a copy.

Rectification: to correct inaccurate or incomplete data.

Erasure: to request that we delete your data when it is no longer necessary or you withdraw your consent, among other legal scenarios.

Objection: to object to processing based on our legitimate interest.

Restriction: to request that we suspend processing in the cases provided by law.

Portability: to receive your data in a structured format, when the processing is based on consent or a contract and is carried out by automated means.

Withdrawal of consent: at any time, without affecting the lawfulness of the prior processing.

To exercise these rights, write to privacy@delstudio.site indicating the right you wish to exercise and accompanying, if necessary, a document that allows for your identification. We will respond within one month, extendable by a further two months in complex cases in accordance with the GDPR (RGPD).

If you consider that your rights have not been correctly addressed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

We use artificial intelligence and automation tools to develop our services and manage internal tasks. We do not make decisions based solely on automated processing that produces legal effects on you or similarly significantly affects you. If such a situation were to occur in any specific service, we will inform you specifically and respect the rights recognised to you by law.

We apply technical and organisational measures appropriate to the risk to protect personal data against unauthorised access, loss, alteration or disclosure, including access controls and the use of providers that offer security guarantees. In the event of a security breach that poses a risk to your rights, we will act and notify in accordance with the provisions of the GDPR (RGPD).

The Websites use cookies and similar technologies. Non-essential cookies, including analytics cookies, are only installed if you accept them. You can configure them or withdraw your consent at any time from the banner or the settings panel. You will find more information in our Cookie Policy.

Our services are aimed at companies and professionals. We do not deliberately process data of minors under 14 years of age through the Websites. If we detect that such data has been collected, we will delete it.

The Websites may contain links to third-party sites, which are governed by their own privacy policies. We recommend reading them before providing them with personal data.

We may update this Policy to reflect regulatory changes or changes in our processing activities. The current version will always be available on the Websites, with its update date. If the change is significant, we will communicate it to you when required by law.

This Policy is provided in Spanish. If it is published in other languages, the Spanish version shall prevail in the event of discrepancy.