In accordance with the current legislation on Personal Data Protection, and in particular the European General Data Protection Regulation 2016/679, Artefacto informs the Users of its Website about the Privacy and Data Protection Policy that will be applied in the processing of personal data that the User voluntarily provides through the forms available on the Website artefactofilms.com.

Without prejudice to other legal bases of Artefacto indicated below that legitimize the treatment, the User, by providing Artefacto with personal data through the electronic forms of the Web, also expressly consents that Artefacto may treat such data under the terms of this clause of Privacy and Data Protection Policy.

To contact Artefacto it is necessary that Users read this Privacy and Data Protection Policy and accept it by checking the box in the corresponding form. When filling in the form they will have to provide the following real data:

– Email

– First name and last name

– Location, city and country

Artefacto declares its commitment to comply with the legislation in force at all times regarding data protection, specifically with the European General Data Protection Regulation 2016/679 as well as, as long as they are applicable, the Organic Law 15/1999, of December 13, on Personal Data Protection; the Royal Decree 1720/2007, of December 21, which approves the Regulation of development of the Organic Law 15/1999; and other applicable legislation.

Data Controller

In accordance with Article 13 of the RGPD, the data controller of the data collected and processed within the framework of the provision of Artefacto’s services is ARTEFACTO FÍLMICO, S.L., with address at C/ Jocs Florals 163 1-1. Barcelona. Barcelona, Spain.

Contact:

E-mail: hola@artefactofilms.com

Data collected

– User registration: In the user registration process, the user’s identification and contact data are collected.

– Commercial Services: In the CUSTOMER registration process for payment services that Artefacto may provide, the contact telephone number is also collected. The payment data will not be collected by Artefacto but by our payment service provider and will be treated according to its own privacy policy.

– Festivals: In connection with audiovisual festivals, we receive and process the data shared by the organizers of such festivals, in accordance with the consent given by the participants concerned.

– As a processor: In the provision of services, Artefacto may access and process personal data of contact persons and collaborators of the user/Customer, as well as those indicated in the contents and Customer Projects. In this case, the company will sign a data processing agreement with the client in accordance with the applicable regulations. Please contact us at the email indicated above.

Legal basis

We process the data collected on the following legal bases:

Legitimate interest: means our company’s interest in running and managing our business in order to provide you with the best service / product and the best and safest experience. We ensure that we consider and balance any potential impact on you (both positive and negative) and your rights before processing your personal data for our legitimate interests.

Contract Performance: means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps when requested by you prior to entering into such a contract.

Complying with a legal or regulatory obligation: means processing your personal data where necessary to comply with a legal or regulatory obligation to which we are subject.

As a general rule, we do not rely on consent as a legal basis for processing your personal data, except to send you marketing communications by email or text message. You have the right to withdraw your consent to these mailings at any time by contacting us at the email address above.

Purposes

The purpose of data collection and processing are the following:

– The management of our users and customers.

– To provide you, where appropriate, specific services you have requested.

– To respond to your direct questions.

– Where appropriate, sending commercial communications, notifications of news and information of interest.

– Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

– To send you marketing materials (see below).

– When we need to comply with a legal or regulatory obligation.

Disclosures, Transfers and communications of data.

We may need to share your personal information with the parties listed below:

Service Providers, Processors, acting on our behalf, as well as technical and communication service providers such as Amazon Webservices Inc (Platform Hosting), Google Inc. (Gmail), Intercom R&D Unlimited Company and Intercom Software UK Limited (Intercom), Wildbit, LLC (Postmark). Although some of these companies are not within the European Economic Area, and may be in countries that do not provide an adequate level of protection, these companies are in the USA-EU Privacy Shield and we require all third parties to respect the security of your personal data and to treat it in accordance with the law and the contract with us, which includes the European Union Model Clauses.

Companies in the same business group as Artefacto.

Third parties with whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other companies or merge with them, if we are part of a bankruptcy proceeding or other change of control.

Third parties with whom we must share your information to investigate suspected fraud, harassment or other violations of any law, rule or regulation, or website policies.

We do not allow our external service providers to use your personal data for their own purposes and we only allow them to process your personal data for specific purposes and in accordance with our instructions.

Except as indicated here, as well as with new service providers or as indicated in the Particular Conditions of each service, Artefacto will not transfer or communicate your data to any third party.

Security

Artefacto has adopted the necessary measures to maintain the required level of security, according to the nature of the personal data processed and the circumstances of the processing, in order to avoid, as far as possible and always according to the state of the art, its alteration, loss, unauthorized access or processing.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which we have collected it, including to comply with legal, accounting or reporting requirements.

In determining the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, whether we can achieve those purposes through other means, and applicable legal requirements. This will normally be the duration of the legal relationship with the user/customer plus 6 years.

In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use and retain this information indefinitely without notice.

Data relating to children

Our website is designed for persons over the age of 18. We do not knowingly collect information from anyone under the age of 14. If we become aware that we have received such information, or any information that violates our policy, we will use reasonable efforts to locate and delete such information from our records.

User/Customer Rights

The User may exercise his/her rights of access, rectification, cancellation, restriction and opposition in compliance with the provisions of the applicable regulations on Personal Data Protection, as well as the portability of the data collected from the user, taking into account that the exercise of these rights is very personal, so the company may require the affected party to prove his/her identity.

The exercise of these rights must be made in writing signed by the owner of the data, indicating his address, attaching a copy of his Identity Document, if applicable, and addressed to Artefacto, at the e-mail artefactofilmico@gmail.com.

How to unsubscribe from our messages

To unsubscribe from any future promotional messages from us, you must send us a request to unsubscribe to hola@artefactofilmico.com or use the «unsubscribe» indicated at the bottom of the message. If you do not want personal data to be shared with third parties so that they may use such information for direct marketing purposes, you may opt-out of receiving such disclosure by sending an email to hola@artefactofilmico.com. We will deal with your request within a reasonable time after receipt (max. 2 month). Please note that if you opt out of unsubscribing or receiving communications from third parties, certain aspects of the website may no longer be available to you.

Withdrawing your consent

If you have given us your consent to process your personal data, you have the right to withdraw such consent at any time. Please see the section entitled your legal rights for more information on how to withdraw your consent.

Supervisory authority

You also have the right to lodge a complaint with the Spanish Data Protection Agency, at www.agpd.es We prefer that you contact us first to resolve any complaints.

Links to Third Party Websites

Our Service may, from time to time, contain links to third party websites, including, but not limited to, those of other users, network partners, advertisers, merchant partners, news publications, audiovisual professionals…. If you open a link to any of these sites, please be aware that these sites may collect information about you while you are browsing and that they have their own privacy policies; we assume no responsibility for their collection of your activity or their policies. Please review the individual policies before you submit any information to these sites.

Changes to this policy

We may update this privacy policy from time to time, so you should periodically review this page. When we change this privacy policy in any material way, we will update the «last updated» date, indicated at the bottom of this policy. Changes to this privacy policy will be effective when posted on this page.

This privacy policy was last updated on December 2, 2023.