Legal information

Privacy policy

How we process the personal data you provide through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD).

This English text is a translation provided for convenience. In the event of any discrepancy, the Catalan version prevails.

1. Data controller

For any question about the processing of your data or the exercise of your rights, write to lopd@elnacional.cat. For commercial enquiries about the studio, write to studio46@framecreativemedia.tv.

2. What data we process and where it comes from

We only process the data you give us directly. We do not obtain data from third parties or public sources, and we do not carry out profiling or automated decision-making.

Booking request form

  • Full name
  • Company or media outlet (optional)
  • Email address
  • Phone number (optional)
  • Type of project and preferred date (optional)
  • Whatever you include in the message field

When you submit the form, the service that handles it also records technical data associated with the submission, such as the IP address and the date and time, which it uses to prevent automated submissions.

Please do not include any special category data in the message field (health, political opinions, trade union membership, religion, ethnic origin, biometric data or sexual orientation): we need none of it to deal with your request.

Contact by email or phone

If you write to us or call us directly, we process the identifying and contact details you provide, along with the content of the communication.

3. Purpose and legal basis

  • To deal with your request, answer enquiries and prepare quotes. Legal basis: pre-contractual measures at your request (art. 6(1)(b) GDPR) and, in the alternative, your consent (art. 6(1)(a)), which you give by ticking the box on the form.
  • To manage the contractual relationship if the booking is ultimately confirmed. Legal basis: performance of a contract (art. 6(1)(b)).
  • To comply with legal obligations in tax, accounting and commercial matters. Legal basis: compliance with a legal obligation (art. 6(1)(c)).

We do not use your data to send unsolicited marketing communications. If at any point we want to, we will tell you and ask for your consent separately.

4. How long we keep it

  • Requests that do not lead to a booking: up to one year from the last contact, so that we can follow up; afterwards they are deleted.
  • Contractual relationships: for the duration of the relationship and, afterwards, blocked for the applicable statutory limitation periods (up to six years for commercial matters and four for tax matters).
  • Your preference on external content: stored in your own browser, not on our servers, and you can delete it whenever you like.
  • Copy held by the form-handling service: Web3Forms keeps submissions for a maximum of three years, under its own retention design. That period is independent of ours: our deleting a request does not make it disappear from their system straight away. You can ask us to delete it and we will pass the request on to the provider.

5. Who we share data with

We do not pass your data on to third parties, except where legally required. Some providers do have access to it in order to provide services to us, and act as processors under the contract required by article 28 GDPR:

  • Web hosting, domain and email: Nominalia Internet, S.L. (Spain), with servers located in the European Union.
  • Booking form handling: Web3Forms, operated by Web3Creative, based in India. When you submit the form, the data you entered is transmitted to this service, which forwards it to our mailbox by email. To read their privacy policy, you can visit: https://web3forms.com/privacy. You can also read their terms of service and their data processing agreement, or contact them at support@web3forms.com.

The booking form is handled by Web3Forms, an external service that receives the data and forwards it to us by email. We keep no database of our own: on our side it stays only in our mailbox. The provider, however, does keep a copy for the period set out in the previous section.

To provide the service, Web3Creative in turn relies on other providers (sub-processors), including cloud hosting, content delivery and spam-filtering services. The current list is set out in their data processing agreement.

To limit automated spam, the form includes a hidden field that no person sees or fills in: that field collects no data about you. In addition, the service that handles the form uses spam-filtering providers which, in order to assess whether a submission is legitimate, receive the sender's IP address and email address.

6. International transfers

Certain content on this website is served by providers that may process data outside the European Economic Area:

  • Google Ireland Ltd. — the map and the availability calendar. This content is not loaded until you give your express consent. If you accept, Google may receive your IP address and install cookies. See its privacy policy.
  • JW Player (Longtail Ad Solutions, Inc.) — the showreel video on the home page, hosted on our account and served from their delivery network. When it plays, their server receives the visitor's IP address. It installs no cookies and associates no advertising identifier.
  • Web3Forms (Web3Creative, India) — booking form handling. When you submit the form, the data you entered is transmitted to their servers, which forward it to us by email. Unlike the two above, this transmission only happens if you press the send button. To read their privacy policy, you can visit: https://web3forms.com/privacy

The transfers to Google and JW Player are made under the EU-US Data Privacy Framework and, where applicable, the standard contractual clauses approved by the European Commission.

India has no adequacy decision from the European Commission. The transfer to Web3Creative is made under the standard contractual clauses of European Commission Implementing Decision (EU) 2021/914, incorporated into the data processing agreement we have accepted with the provider, with us as data exporter and Web3Creative as data importer. Some of their sub-processors also process data outside the European Economic Area, under the same safeguards.

If you would still rather avoid this transfer, you can send us the same enquiry directly at studio46@framecreativemedia.tv or by calling +34 931 73 00 99.

The website's typeface is hosted on our own server, so loading it involves no communication of data to third parties.

7. Your rights

You may exercise the following rights at any time:

  • Access — find out what data of yours we process.
  • Rectification — have it corrected if it is inaccurate.
  • Erasure — ask us to delete it.
  • Restriction — ask us to suspend processing.
  • Objection — object to processing on grounds relating to your particular situation.
  • Portability — receive it in a structured, commonly used format.
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise them, write to lopd@elnacional.cat stating which right you wish to exercise and enclosing a copy of a document proving your identity. We will reply within one month at the latest.

If you believe we have not dealt with your request properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid) or, where applicable, with the Catalan Data Protection Authority.

8. Security

We apply appropriate technical and organisational measures to protect data against destruction, loss, alteration or unauthorised access, taking into account the state of the art and the nature of the data processed. The website is served entirely over an encrypted connection (HTTPS).

9. Minors

This website is aimed at professionals and companies. It is not intended for children under 14, and we do not knowingly collect their data. If we find that we have received data from a minor without the consent of whoever holds parental responsibility or guardianship, we will delete it.

10. Changes to this policy

We may update this policy to reflect changes in the law or in the services we offer. The version in force is always the one published on this page, with the date it was last updated.

Last updated: 20 August 2026