Privacy
The controller responsible for processing personal data related to this website is Ovisara XXI, S.L. (hereinafter, the controller), with Tax ID (C.I.F.) B-83827642 and registered address at Av. de Madariaga 1 – 3º D, 48014 Bilbao, Vizcaya (Spain). For any matter relating to this Privacy Policy, please contact studio@alvaroybarra.com.
The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y Garantía de los Derechos Digitales (Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, "LOPDGDD"), and Ley 34/2002, de 11 de julio, de Servicios de la Sociedad de la Información y de Comercio Electrónico (Law 34/2002 on Information Society Services and Electronic Commerce, "LSSI-CE").
This website is an informational and documentary publication for the photographic project "The Legacy We Will Become". It has no contact forms, user registration, accounts, private area, online store, payment gateway or newsletter subscription, and it does not request personal data through its pages.
The only communication channel is the email address published on the site. If a user voluntarily writes to that address, the controller will process the data included in the message (name, email address and the content of the inquiry) solely to address and respond to it.
For technical purposes, the hosting provider records the usual connection data required to serve the pages and ensure the security of the service (for example, IP address and the date and time of the request).
Data is processed exclusively for the following purposes: addressing and responding to inquiries sent by email; ensuring the security, availability and proper technical functioning of the website; and complying with applicable legal obligations. No profiling is carried out, no automated decisions are made, and no commercial communications are sent.
The legal basis legitimizing processing depends on the purpose: the consent of the data subject, given by voluntarily sending an inquiry by email; the legitimate interest of the controller in ensuring the security and proper functioning of the website; and compliance with legal obligations where applicable.
Personal data will be retained for as long as necessary to address the inquiry received and, where applicable, for the limitation periods established under applicable law. Once no longer necessary, it will be deleted using appropriate security measures.
The controller does not transfer personal data to third parties, except where legally required. To provide website hosting and email services, the controller works with providers acting as data processors, who process data solely in accordance with the controller's instructions and the GDPR.
In the event of international data transfers outside the European Economic Area, the controller will adopt the appropriate safeguards provided for under the GDPR to ensure a level of protection equivalent to that afforded in Europe.
Users may exercise, at any time, their rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw any consent given, by sending a written request to studio@alvaroybarra.com or to the postal address indicated in section 1, along with a copy of a document proving their identity.
Users also have the right to lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency, www.aepd.es) if they consider that the processing of their data does not comply with applicable regulations.
The controller adopts the technical and organizational measures necessary to ensure the security, integrity and confidentiality of personal data, preventing its alteration, loss, unauthorized processing or access, in accordance with the state of the art, the nature of the data and the risks to which it is exposed.
This website does not use analytics, advertising, profiling or third-party tracking cookies. Only cookies or local storage strictly necessary for the technical operation of the pages may be used, if any, which are exempt from the prior consent requirement under the LSSI-CE. Should non-essential cookies be introduced in the future, users will be informed in advance and their consent will be requested.
The controller reserves the right to modify this Privacy Policy to adapt it to legislative or case-law developments, as well as to the actual operation of the website. Any modification will be published on this website.