Privacy Policy

1. Introduction

Studio Six Javea ("we", "us", or "our") operates the website https://www.studiosixjavea.com. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other relevant European privacy laws.

This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our website, send booking inquiries, or communicate with us.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect & Why

We only collect personal information that you voluntarily provide to us or that is gathered automatically through cookies.

• Contact Form Inquiries: When you submit an inquiry to rent our studio space, we collect your Name, Email Address, Phone Number, Event Type, and Message details. We process this data based on the necessity to perform pre-contractual steps (answering your booking request). We retain this data for up to 2 years from the date of your inquiry, after which it is permanently deleted.
• Consent for Marketing: If you explicitly opt-in via our communication checkbox, we process your contact details to send you occasional updates and studio promotions. We retain this data until you withdraw your consent. You can withdraw this consent at any time via our contact form.
• Analytics & Browsing Data: We collect pseudonymous telemetry data (including IP addresses, pages viewed, and device types) to optimize our site's loading speeds and layouts. IP addresses are personal data under GDPR and are treated as such. We use Google Analytics 4 for this purpose and retain this data for 14 months (Google Analytics default retention period).

4. Cookies and Google Analytics 4 (Consent Mode v2)

Our website uses cookies to distinguish you from other users. We implement Google Consent Mode v2 to ensure that no tracking or analytics cookies are set on your browser unless you explicitly click "Accept All" on our Cookie Consent Banner.

If you choose "Essential Only", Google Analytics will run in a restricted mode that does not write or read storage cookies, ensuring your session remains anonymous.

5. Who We Share Data With

We do not sell, trade, or transfer your personal data to outside parties. Your data is stored securely using Supabase database clustering (hosted within the European Union) and notifications are processed via Resend email routing. We ensure all processors comply with EU-US Data Privacy Frameworks or Standard Contractual Clauses.

6. Your Rights Under GDPR

Under European data protection laws, you possess the following rights regarding your personal information:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete information.
• Right to Erasure (Right to be Forgotten): You can request that we delete your data from our active database at any time.
• Right to Restrict Processing: You can request that we limit how we use your data while a dispute is being resolved.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to our processing of your data, or withdraw marketing consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Spanish data protection supervisory authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.

To exercise any of these rights, please use our contact form. We will fulfill your request free of charge within 30 days.