How we handle your personal data

Privacy policy

Last updated: 24.07.2026

1. Controller

The data controller under the GDPR is CREATIVEREEL VIDEO AGENCY S.L., CIF B44606812, Calle Na Puig 191, 07669 Felanitx, Illes Balears, España. Data protection contact: info@sotano-grupo.com.

2. Data, purposes and legal bases

We process only the data required for each purpose, always on a legal basis under Art. 6 GDPR.

  • Contact / enquiry form: name, company, email, phone, venue details and message — to handle and answer your enquiry. Basis: consent (Art. 6(1)(a)) and pre-contractual steps (b).
  • Email to hello@artfete.art: to answer your request. Basis: consent / pre-contractual steps.
  • Venue briefings and partner communication: to plan and deliver an edition. Basis: contract performance (b).
  • Audience measurement: only after your consent to the "Analytics" category; without consent no such tool is loaded.
  • Cookies / similar technologies: non-essential cookies only after consent (see cookie policy).

3. Form delivery and processors

This website is hosted on Netlify; form submissions are captured via Netlify Forms and delivered to the operator's inboxes. Data may be processed outside the EEA; we rely on appropriate safeguards under Art. 46 GDPR (EU Standard Contractual Clauses).

4. Retention

Enquiries without a contract
12 months from last interaction
Clients with a delivered service
duration of the relationship + 6 years (accounting)
Invoicing / tax data
6 years (commercial law), up to 10 years (AML)
Consent logs
12 months

5. Your rights

You may at any time request access, rectification, erasure, restriction, portability and objection, and withdraw consent — by email to info@sotano-grupo.com.

You may lodge a complaint with the Spanish data protection authority (AEPD, www.aepd.es) or your competent supervisory authority.

6. Security and international transfers

We apply appropriate technical and organisational measures under Art. 32 GDPR (incl. TLS encryption, access controls). Transfers outside the EEA occur only with Art. 46 GDPR safeguards.