Last updated: 2 July 2026

At Ibero Studio, we respect the privacy of people who visit our website, contact us, or receive professional communications relating to our services.

This policy explains how we collect, use, retain, and protect personal data processed through the website https://iberostudio.com and through our professional communications.

1. Data Controller

The controller responsible for processing personal data is:

Controller: Ibero Studio
Owner: Iván Calás del Castillo
Website: https://iberostudio.com
Contact email: info@iberostudio.com

If a registered company name, tax identification number, registered business address, or dedicated privacy email address is used in the future, those details must be added or replaced here.

2. Personal Data We May Process

We may process personal data that you voluntarily provide through forms, email, telephone, WhatsApp, or other contact channels.

This may include:

  • Name
  • Email address
  • Telephone number or WhatsApp contact
  • Company or project
  • Service requested
  • Approximate budget
  • Current website
  • Message or project description
  • Page from which the request was submitted

We may also process technical data required for the operation and security of the website and for preventing abuse, such as IP address, browser, device, access date and time, technical logs, or cookie-related information, depending on the website’s configuration.

3. Purposes of Processing

We process your data for the following purposes:

  • Responding to enquiries.
  • Preparing requested quotations or commercial proposals.
  • Contacting you by email, telephone, or WhatsApp where you have provided those details.
  • Managing requests relating to web design, online stores, local SEO, WordPress maintenance, SEM campaigns, website optimisation, or other digital services.
  • Maintaining website security and preventing spam or misuse of forms.
  • Managing personalised B2B professional communications.
  • Complying with legal, administrative, or tax obligations where applicable.

We do not add your data to newsletters, mailing lists, or recurring campaigns without your consent.

4. Legal Basis for Processing

The legal basis will depend on the circumstances:

  • Consent: when you submit a form or expressly agree to the processing of your data.
  • Pre-contractual measures: when you request information, a quotation, or a proposal concerning our services.
  • Legitimate interests: for maintaining website security, preventing abuse, and, in certain cases, carrying out personalised B2B professional outreach.
  • Compliance with legal obligations: where data must be processed or retained for legal, tax, or administrative purposes.

Where professional contact details relate to a person working for a company or organisation, processing may be based on legitimate interests when only the information necessary to contact that person in a professional capacity is used and the purpose is to maintain relations with the company for which they work.

5. Contact and Quotation Request Forms

When you use a contact or quotation request form, the information provided is used to respond to your enquiry and, where appropriate, prepare a proposal tailored to your project.

Mandatory fields are required for us to handle your request properly. Optional fields help us understand the project in greater detail but are not essential.

By submitting the form, you confirm that the information provided is accurate and that you accept this Privacy Policy.

6. B2B Professional Communications

In certain circumstances, Ibero Studio may contact companies, organisations, or professionals using contact details published on corporate websites, professional directories, professional social networks, or publicly available business contact channels.

The purpose of such contact will be to send personalised communications concerning digital services that may be professionally relevant to the recipient organisation, including:

  • Web design
  • Website redesign
  • Online stores
  • Local SEO
  • WordPress maintenance
  • Website speed optimisation
  • SEM campaigns
  • Digital consultancy

This contact may be based on legitimate interests where:

  • The recipient is a company, organisation, or professional.
  • The information used consists of professional contact details.
  • The communication relates to the recipient’s professional activity.
  • The proposal is personalised and not part of an indiscriminate mass campaign.
  • The identity of the sender is clearly stated.
  • A simple method of objecting to further communications is provided.

At any time, the recipient person or organisation may request not to receive further communications by writing to:

info@iberostudio.com

In such cases, the contact will be added to an internal suppression list to prevent further communications.

These details will not be used to send newsletters, recurring automated campaigns, or mass communications without prior consent.

7. Commercial Communications by Electronic Means

Where a communication is commercial in nature and is sent by electronic means, such as email, SMS, WhatsApp, or equivalent channels, the obligations established under Spain’s Information Society Services and Electronic Commerce Act, commonly known as the LSSI, will be taken into account.

Commercial communications must be identified as such where required and must provide a simple way to object or unsubscribe. The LSSI restricts the sending of commercial communications by email or equivalent electronic means where prior consent has not been obtained, except in cases permitted by law.

For this reason, Ibero Studio will not add contacts obtained from public sources to newsletters or recurring campaigns without their consent.

8. Data Retention

We will retain personal data for as long as necessary to deal with the request, manage the professional relationship, or comply with legal obligations.

As a general rule:

  • Enquiries will be retained for as long as necessary to respond and carry out appropriate follow-up.
  • If no contractual relationship begins, the data may be deleted once it is no longer needed.
  • If a service is contracted, the data may be retained for the applicable statutory periods.
  • Contacts included on suppression lists will be retained only to prevent further communications.

If form submissions are stored in the WordPress database, an internal timetable for their periodic review and deletion should be established.

9. Recipients of Personal Data

We do not sell or disclose your data to third parties for commercial purposes.

Data may be accessed by service providers required for the operation of the website and the delivery of our services, including:

  • Hosting providers.
  • Email service providers.
  • Security tools.
  • WordPress plugins or technical service providers.
  • Analytics tools, where enabled.
  • Communication services such as email or WhatsApp, where used to respond.
  • Legal, tax, or administrative advisers, where necessary.

These providers will only access the data to the extent required to provide their services.

10. International Data Transfers

Some technology providers may be located outside the European Economic Area or may process data on international servers.

Where this occurs, we will endeavour to work with providers that offer appropriate safeguards under the General Data Protection Regulation, such as adequacy decisions, Standard Contractual Clauses, or other legally recognised mechanisms.

11. Rights of Data Subjects

You may exercise the following rights:

  • Access
  • Rectification
  • Erasure
  • Objection
  • Restriction of processing
  • Data portability
  • Withdrawal of consent

To exercise these rights, you may write to:

info@iberostudio.com

Please indicate which right you wish to exercise and provide the information needed to identify and process your request.

You also have the right to lodge a complaint with the Spanish Data Protection Agency if you believe that the processing of your personal data does not comply with the applicable regulations.

12. Data Security

We apply reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure.

The website may use security and anti-spam measures such as:

  • Hidden verification fields.
  • Submission limits based on IP address.
  • Technical logs.
  • Security tools.
  • Backups.
  • Server protection measures.

13. Cookies and Third-Party Tools

This website may use technical cookies and, where configured, analytics, measurement, or marketing cookies.

Detailed information concerning cookies should be provided in a separate Cookie Policy or through the relevant consent banner.

14. Changes to This Policy

Ibero Studio may update this Privacy Policy to reflect legal, technical, or operational changes affecting the website.

The version currently in force will be the one published on this page.