1. Controller
Controller: Pascual Embid García (trade name: Caiman Interactive)
Tax ID (NIF): 78002558J
Address: 17730 Llers (Girona), España
Privacy email: studio@caimaninteractive.com
Phone: +34 608 091 464
2. Applicable law
We process personal data under Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD), the LSSI-CE and other applicable rules.
3. Data we process
Depending on the channel, we may process:
- Identity and contact data: name, email, phone and message (contact form, email or chatbot).
- Professional/company data provided for quotes, contracts or invoicing.
- Client-area account data: email, credential hashes, language/theme preferences and activity logs needed for the service.
- Payment data when paying via a gateway (mainly processed by the payment provider; we do not store full card numbers).
- Minimal server logs (e.g. IP, timestamp, user agent) when needed for security.
4. Purposes and legal bases
We process data to:
- Handle contact and quote requests (legitimate interest and/or pre-contractual steps; consent when the form checkbox is ticked).
- Deliver contracted services, client area, contracts, quotes and invoicing (contract performance and legal obligations).
- Handle rights requests and keep the Site secure (legitimate interest and/or legal obligation).
- Meet tax, accounting and record-keeping duties (legal obligation).
5. Recipients
We do not sell personal data. Providers may access data as processors or independent controllers only for the stated purposes:
Formspree: contact form intake. https://formspree.io/legal/privacy-policy/.
Stripe: payment processing when a gateway is used. https://stripe.com/es/privacy.
Hosting, email, maintenance or essential tooling providers may also intervene under confidentiality and, where required, a data-processing agreement.
We may disclose data to public authorities when legally required.
6. International transfers
Some providers (e.g. Formspree or Stripe) may process data outside the EEA. Appropriate GDPR safeguards (such as standard contractual clauses) apply according to the provider’s policy.
7. Retention
We keep data only as long as needed: contact requests for the management period and a reasonable claims window; contractual/invoicing data for the contract term plus legal retention periods; security logs for the minimum time needed to prevent or investigate incidents.
Where processing is based on consent, you may withdraw it at any time without affecting prior lawfulness.
8. Your rights
You may exercise access, rectification, erasure, objection, restriction, portability and, where applicable, rights relating to automated decision-making by emailing studio@caimaninteractive.com with reasonable identification.
You may also lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es).
9. Minors
The Site targets professionals and businesses. If you are under 14 (or the applicable minimum age), do not send us personal data without parental/guardian authorisation.
10. Security
We apply reasonable technical and organisational measures (HTTPS, access control, password hashing, etc.). No system is 100% secure; please safeguard your credentials.
11. Chatbot and other channels
The Site assistant may prefill the contact form using temporary browser storage (e.g. sessionStorage). It does not replace formal submission via the form or email.
If you contact us by email or phone, we process the data needed to reply.
12. Changes
We may update this policy to reflect legal or service changes. The version on this page with its update date is the one in force.