Warm Studio — Ir a la página de inicio
Warm Studio — Ir a la página de inicio

Privacy Policy

Last updated: 14 August 2026

1. Who we are

This website (the «Website») is operated by:

  • Legal/Trade name: WARM STUDIO, S.L.
  • Tax ID (NIF/CIF): B44573095
  • Registered address: C/ Sierrabermeja 10, 28210 – Valdemorillo (Madrid), Spain
  • Contact email: warmstudiosl@gmail.com
  • Website address: https://warmstudio.es

For the purposes of the applicable data protection legislation, the entity identified above acts as the Data Controller of the personal data collected through this Website.

Data Protection Officer (DPO): WARM STUDIO, S.L. has not appointed a Data Protection Officer, as its processing activities do not meet any of the criteria set out in Article 37 GDPR and Article 34 LOPDGDD. Data subjects may therefore direct any data protection enquiry to warmstudiosl@gmail.com.

This Privacy Policy explains what personal data we collect, the purposes and legal bases for processing it, who we share it with, how long we keep it, and the rights you can exercise. It is governed by Regulation (EU) 2016/679 (the General Data Protection Regulation, «GDPR») and, where applicable, Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights («LOPDGDD»).

2. What personal data we collect and why

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user-agent string to help with spam detection.

An anonymized string created from your email address (also called a «hash») may be provided to the Gravatar service to check whether you are using it. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After your comment has been approved, your profile picture is visible to the public in the context of your comment.

  • Purpose: publishing and managing comments, and preventing spam and abuse.
  • Categories of data: name, email address, website (optional), comment content, IP address, browser user-agent string.
  • Legal basis: your consent when you choose to submit a comment (Art. 6(1)(a) GDPR), and our legitimate interest in maintaining a secure, spam-free site (Art. 6(1)(f) GDPR).

Media

If you upload images to the Website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the Website can download and extract any location data from images published on the Website.

Contact by email

This Website does not include a contact form. All enquiries are handled by email: when you write to us at warmstudiosl@gmail.com (or at any other email address published on this Website), we process the data contained in your message and in your email signature.

  • Purpose: responding to your enquiry and, where relevant, managing a potential or existing professional relationship.
  • Categories of data: name, email address, and any other information you voluntarily include in your message (for example, telephone number, company name or project details).
  • Legal basis: your consent, given by contacting us on your own initiative (Art. 6(1)(a) GDPR), and/or the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

Cookies

This Website uses cookies. For full details on the cookies used, their purpose and duration, please see our Cookie Policy at https://warmstudio.es/cookies/.

If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience, so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen-options cookies last for a year. If you select «Remember Me», your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics and measurement

This Website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to understand how visitors use the site.

  • Purpose: measuring and analysing traffic and usage to improve the Website.
  • Categories of data: online identifiers stored in cookies, truncated IP address, device and browser information, pages visited and interactions with the Website.
  • Legal basis: your consent, obtained through the cookie consent banner (Art. 6(1)(a) GDPR). Analytics cookies are not set until you accept them, and you may withdraw your consent at any time through the cookie settings panel.

3. Who we share your data with

We do not sell your personal data. We share it only with the providers and in the situations described below:

  • Hosting provider: the Website is hosted by Hostinger International Ltd. (Švitrigailos str. 34, Vilnius, Lithuania), which stores the data on our behalf as a data processor.
  • Gravatar / Automattic Inc.: an anonymized hash of your email address may be sent to Gravatar (Automattic Inc.) as described in the «Comments» section above.
  • Spam-detection service: visitor comments may be checked through Akismet Anti-Spam (Automattic Inc.), where this service is enabled on the site.
  • Analytics provider: Google Ireland Limited, as described in the «Analytics and measurement» section above.
  • Email provider: Google Ireland Limited / Google LLC, as the provider of the email service through which we receive and store your enquiries.

Each of these providers acts under a data processing agreement or equivalent contractual terms that comply with Article 28 GDPR.

If you request a password reset, your IP address will be included in the reset email.

We may also disclose personal data where required to comply with a legal obligation or a lawful request from a competent authority.

4. International data transfers

Some of the providers listed above are established in, or may process data from, the United States. Where personal data is transferred outside the European Economic Area, such transfers are carried out subject to appropriate safeguards under Chapter V of the GDPR.

The transfer mechanisms currently applicable to our providers are the following:

  • Automattic Inc. (Gravatar, Akismet): EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. See https://automattic.com/privacy/
  • Google LLC / Google Ireland Limited (Google Analytics 4, email): EU-US Data Privacy Framework certification and the European Commission’s Standard Contractual Clauses. See https://business.safety.google/privacy/
  • Hostinger International Ltd.: data is stored within the European Union; any ancillary transfer is covered by the Standard Contractual Clauses. See https://www.hostinger.com/privacy-policy

5. How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically, instead of holding them in a moderation queue.

For users who register on our Website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except that they cannot change their username). Website administrators can also see and edit that information.

For other data, we apply the following retention periods:

  • Email enquiries that do not result in a contract: kept for up to 1 year from the last communication, and then deleted.
  • Data relating to clients and contracted services: kept for the duration of the contractual relationship and, thereafter, blocked for the applicable limitation periods — 4 years for tax obligations (Art. 66 of the Spanish General Tax Act 58/2003), 6 years for accounting and commercial records (Art. 30 of the Spanish Commercial Code), and 5 years for personal actions (Art. 1964 of the Spanish Civil Code).
  • Analytics data: retained for a maximum of 14 months in Google Analytics 4, in accordance with the retention setting configured in the account.
  • Server and security logs: retained for a maximum of 12 months.

Once these periods expire, the data is securely deleted or irreversibly anonymised.

6. What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Under the GDPR and the LOPDGDD, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data («right to be forgotten»), where applicable.
  • Restrict the processing of your data in certain circumstances.
  • Data portability, receiving your data in a structured, commonly used, machine-readable format.
  • Object to processing based on our legitimate interests.
  • Withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, please contact us at warmstudiosl@gmail.com (you may be asked to verify your identity).

You also have the right to lodge a complaint with a supervisory authority. In Spain, this is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), www.aepd.es.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.

7. Where your data is sent

Visitor comments may be checked through an automated spam-detection service. Beyond the cases described in this Policy, your data is processed within the European Economic Area, except for the international transfers detailed in section 4.

8. Security of your data

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, taking into account the state of the art, the costs of implementation, and the nature, scope and purposes of the processing.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable legislation. The version in force is the one published on this Website, with the «Last updated» date shown at the top.

10. Contact

If you have any questions about this Privacy Policy or about how we process your personal data, please contact us at: warmstudiosl@gmail.com.