(Legal) Privacy
Privacy policy.
What data we process, why, and how you can exercise your rights.
This English translation is provided for convenience. If there is any discrepancy, the Spanish version prevails.
Data controller
- Controller
- Elena Romero Díaz (ODDEYE)
- Tax ID (NIF)
- 02299967J
- Address
- Avenida de Madrid 81, 28817 Los Santos de la Humosa (Madrid)
- Contact
- info@oddeye.es
What data we process and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| You write to us through the contact form | Name, email, what you need and your message | To reply to you and, if you ask us to, prepare a quote | Your consent (Art. 6(1)(a) of the General Data Protection Regulation, Regulation (EU) 2016/679, GDPR [RGPD]) and steps taken prior to entering into a contract (Art. 6(1)(b)) |
| You apply to be an Oddity | Name, email, where you live, languages, speciality and experience, tools, sectors, portfolio and any files you attach, social media, availability, confirmation that you are registered as self-employed (autónomo) in Spain, rate and anything you tell us in the text fields | To assess your application and contact you if a suitable project comes up | Your consent (Art. 6(1)(a) GDPR) |
| You subscribe to the newsletter | Your email | To send you the studio's newsletter: projects, processes and news | Your consent (Art. 6(1)(a) GDPR and Article 21 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce [LSSI-CE]) |
| You write to us by email, phone or WhatsApp | Whatever data you give us | To reply to you | Your consent and our legitimate interest in responding to people who contact us (Art. 6(1)(f)) |
| You browse the website | Aggregated, anonymous usage data: pages viewed, referring website, country, browser and device type | To see which pages work and to improve the website | Our legitimate interest (Art. 6(1)(f) GDPR) |
To measure visits we use Umami, an analytics tool that does not use cookies, does not store your IP address and cannot identify you or track you across websites.
We do not make automated decisions or build profiles with your data, and we only send you the newsletter if you have subscribed. Every email includes a link to unsubscribe in one click.
How long we keep it
- Contact messages: for as long as we need to reply to you. If we do not end up working together, we delete them within one year at the latest. If we do work together, we keep what is necessary for the periods required by law (for example, tax law).
- Newsletter: for as long as you stay subscribed. If you unsubscribe, we delete your email from the list.
- Oddities applications: up to two years, or until you ask us to delete them.
- Analytics: aggregated data only, with no information that identifies you.
Who else has access to it
We do not sell your data or pass it on to third parties, unless required by law. The following providers do process it on our behalf, under a data processing agreement:
- Hostinger International Ltd. (Cyprus, European Union): website hosting.
- Google Ireland Limited (Ireland, European Union): email (Google Workspace), where we receive the messages sent through the forms.
- MailerLite Limited (Ireland, European Union): managing the mailing list and sending the newsletter.
- Umami Software, Inc.: cookie-free visitor analytics, using anonymous data.
If you write to us on WhatsApp, that service is provided by Meta Platforms Ireland Ltd. under its own privacy terms.
Your rights
You can ask us at any time to access your data, rectify it, erase it, object to its processing, restrict it or take it to another service (portability). You can also withdraw your consent whenever you like, without affecting anything we did on the basis of that consent before you withdrew it.
Email us at info@oddeye.es with the subject line “Data protection” and tell us which right you want to exercise. If we need to verify your identity, we will ask you to.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es (opens in a new tab).
Minors
This website is not aimed at children under 14. If you are under that age, please do not send us your data.
Security
The website runs over an encrypted connection (HTTPS) and we apply reasonable technical and organisational measures to protect your data against loss, unauthorised access or misuse.