Privacy policy

1. Data controller

2. Personal data we process

In a B2B context, we mainly process professional contact details of individuals acting on behalf of, or within a relationship with, a legal entity (for example, employees, collaborators or representatives of corporate customers, prospects or suppliers).

3. Purposes and lawful bases

We process personal data for the purposes and on the lawful bases below (Article 6 GDPR):

3.1 Contact form and handling requests

Purpose: to manage and respond to enquiries, information requests or collaboration proposals submitted via the contact form or by email.

Lawful basis: consent (Article 6(1)(a) GDPR) and/or taking steps at the data subject’s request prior to entering into a contract (Article 6(1)(b) GDPR) where the request relates to a potential contractual relationship.

3.2 Managing the business/professional relationship (customers and suppliers)

Purpose: to manage the contractual relationship, administration and invoicing with customers and suppliers, as well as project coordination.

Lawful basis: performance of a contract (Article 6(1)(b) GDPR) and, where applicable, our legitimate interests in maintaining professional relationships with corporate contact persons (Article 6(1)(f) GDPR and Article 19 of the Spanish Organic Law 3/2018).

3.3 Marketing communications (newsletter and B2B marketing)

Purpose: to send communications about our services, content, news and events (e.g., newsletters).

Lawful basis: consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time and opt out via the unsubscribe link or by contacting us by email.

3.4 Website analytics and improvement

Purpose: to analyse the use of the website and improve its operation, security and performance.

Lawful basis: consent where non-essential cookies are used (see the Cookie Policy) and/or legitimate interests for strictly necessary cookies required to provide the service.

4. Recipients and processors

We do not disclose personal data to third parties unless required by law or where necessary to provide the service.

We may use service providers that process data on behalf of Voxel Studios, S.L. (data processors). Currently:

We enter into the data processing agreements required under Article 28 GDPR with such providers.

5. International transfers

The use of analytics services (e.g., Google Analytics) may involve international transfers of personal data, in particular to the United States, depending on the configuration and the providers used. Where applicable, such transfers will be carried out in accordance with the safeguards required by the GDPR (e.g., adequacy decisions or Standard Contractual Clauses) and you will be informed where required.

6. Retention periods

We will keep personal data for the following periods:

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw consent at any time (where processing is based on consent).

To exercise your rights, please contact: info@voxelstudios.es, indicating the right you wish to exercise and providing sufficient information to verify your identity.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).

8. Security measures

We implement reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

9. Changes to this policy

We may update this Privacy Policy where necessary to reflect legal changes or changes to our processing activities. The date of the last update will be shown at the top of the document.