Skip to content
Casco Antiguo • Mon-Fri 10-7, Sat 10-2 By appointment only 95 460 94 08

Privacy Policy

The binding version is the Spanish version available at Privacidad

This policy comes into effect on 14 October 2026.

User Summary:
  • We only collect data strictly necessary to manage your bookings and quotes.
  • We use FormSubmit for form processing, which involves data transfer to the USA.
  • Your data is stored for specific periods based on our business rules.
  • You have full rights to access, rectify, or delete your personal information.

1. Data Controller

The controller responsible for the processing of personal data is Asterniva S.L., a company with a share capital of 10,000 €, represented by its director Javier Ramos López, with professional offices at Calle San Fernando, 42, 41004 Sevilla. For any communication regarding privacy, you may contact us via email at [email protected] or by calling 95 460 94 08.

2. Data We Collect

We process information that you provide to us voluntarily through the following channels:

  • Contact Forms: Name, email address, and message content.
  • Direct Communications: Data provided via email or telephone for the management of photography sessions.
  • B2B Interactions: Basic tax data for the invoicing of corporate services, subject to the payment terms detailed in our Terms of Service.

3. Purpose and Legal Basis

The processing of your data is based on Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD). The purposes are:

  • Contract Execution: Managing bookings, coordinating studio sessions, and delivering final materials.
  • Legitimate Interest: Responding to inquiries and requested quotes.
  • Legal Obligation: Compliance with tax and accounting regulations under Spanish law.

4. International Transfers and Providers

For the technical operation of the website, we use the following external services:

  • FormSubmit (formsubmit.co): A service used for form management. When sending a message, your data is processed on servers located in the United States. The user accepts this transfer based on the provider's security guarantees.
  • Raiola Networks S.L.: Our hosting provider, located at Avenida de Magoi 66, semisótano derecha, 27002 Lugo, acting as the processor for website storage.

5. Retention Periods

Personal data is kept according to the nature of the service:

  • Contact data: Until the user requests deletion or the commercial relationship ends.
  • RAW files and originals: Stored for a period of 6 months after delivery, after which they are permanently deleted.
  • Accounting documentation: For the legal periods required by Spanish tax regulations.

6. Data Subject Rights

You may exercise your rights of access, rectification, erasure, limitation of processing, portability, and opposition at any time. To do so, you must send a written request to [email protected] providing proof of your identity.

7. Consent Control and Security

We use a consent key stored in the browser's localStorage under the name "astr-consent" with a validity of 180 days. This mechanism ensures your privacy preferences are respected without the need for intrusive cookies. For more details, see our Cookie Policy.

All images displayed on the site are illustrative and are managed under strict usage license protocols.

8. Complaints and Jurisdiction

If you believe that the processing of your data does not comply with the law, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), located at C/ Jorge Juan 6, 28001 Madrid, or through their portal www.aepd.es.

For any legal dispute, the parties expressly submit to the jurisdiction of the courts and tribunals of the city of Sevilla, waiving any other jurisdiction that may correspond to them.