Legal information
Privacy policy
At The Nimbus Studio we take the protection of your personal data seriously. Here we explain what information we collect, how we use it and what your rights are.
Last updated:
Data controller
The controller of your data is the self-employed professional who provides services under the trade name The Nimbus Studio.
- Trade name: The Nimbus Studio
- NIF (tax number): 53218763Y
- VAT number: ES53218763Y
- Address: Calle Flauta Mágica 11D, 2D, 29002 Málaga (Spain)
- Email: info@thenimbusstudio.com
- Telephone: +34 614 133 778
We have not appointed a data protection officer, as we are not required to do so. For any matter concerning your data, use the email address given.
Personal data collected
We only process the data you provide to us and the technical data that are essential for the site to work:
- Contact form: name, email address, company and telephone number (optional), the services you are interested in, your message and the language in which you visit the website.
- Support form: name, company (optional), email address, telephone number, whether you are a customer and, if so, the number of your contract, how you need the help and, for help on site, the address, postcode, town or city, province (optional) and country, the support categories, the description of the problem, the urgency, and the language. Each request is assigned a tracking number and the date and time are recorded.
- Newsletter: your email address, if you subscribe.
- Contact by WhatsApp, telephone or email: the data you give us through those channels.
- Technical data: as with any website, the server receives your IP address and basic data about your browser in order to show you the pages. To prevent abuse of the support form we store an encrypted fingerprint of the IP address, which does not allow you to be identified, together with the request number.
We do not ask for special categories of data (health, ideology, etc.). Please do not include them in your messages. We do not carry out profiling or take automated decisions.
Purposes of the processing
- To reply to your enquiries and prepare the quotes you request from us.
- To assess, identify and deal with your support requests, to check the cover of your contract where that applies, to contact you and, if necessary, to travel to the address you give us.
- To provide the services contracted and manage the relationship with our clients, including invoicing.
- To send you our newsletter, if you have subscribed.
- To protect the site and the forms against automated or abusive submissions.
- To show the Google Maps map, only if you allow it.
- To compile statistics on the use of the website with Google Analytics, only if you allow it.
- To measure our advertising campaigns and show relevant advertisements, only if you allow it.
We do not use the data from the contact and support forms to send you advertising, nor do we pass them on for commercial purposes, and we never send the content of the forms to analytics or advertising tools.
Legal bases
- Enquiries and quotes: the taking of pre-contractual steps at your request (Art. 6(1)(b) GDPR).
- Support requests: taking steps at your request before a contract or, if you are already a client, the performance of the contract (Art. 6(1)(b) GDPR).
- Contracted services: the performance of the contract or of the assignment you give us (Art. 6(1)(b) GDPR).
- Newsletter: your consent when you subscribe (Art. 6(1)(a) GDPR), which you can withdraw at any time by unsubscribing.
- Invoicing and accounting: compliance with legal obligations (Art. 6(1)(c) GDPR).
- Security of the site and prevention of abuse: our legitimate interest in keeping the service available and secure (Art. 6(1)(f) GDPR).
- Third-party content such as Google Maps, and analytics and marketing cookies: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
The data marked as mandatory in the forms are necessary for us to be able to deal with your request. If you do not provide them, we will not be able to process it.
Recipients and providers
We do not sell your data. They are only accessed by the providers we need in order to provide the service:
- Formspree, Inc. (United States): receives the messages from the contact and support forms and delivers them to us by email.
- Hostalia: hosts the website and processes support requests before delivering them.
- Klaviyo, Inc. (United States): stores the addresses subscribed to the newsletter and sends it.
- Our email provider, where we receive your messages.
- Google Ireland Limited: only if you agree to show the Google Maps map, your browser connects to Google, which receives your IP address and may use its own cookies.
- Google Ireland Limited (Google Analytics and Google Ads): only if you accept analytics or marketing cookies.
- Meta Platforms Ireland Limited (Meta Pixel): only if you accept marketing cookies.
- komoot GmbH (Germany), the Photon search service on the data of OpenStreetMap: if you type an address in the support form, what you type in that field is sent to that service to offer you suggestions. No other data from the form is sent to it.
- WhatsApp (Meta Platforms Ireland Limited): only if you choose to write to us by WhatsApp; the conversation is governed by the terms of that service.
- Public authorities and courts, where there is a legal obligation.
International transfers
Formspree processes the messages from the forms in the United States, and Klaviyo the addresses subscribed to the newsletter, so submitting a form or subscribing involves an international transfer of data to that country.
Google and Meta may process data outside the European Economic Area in accordance with their own privacy policies when you use their services.
Data retention
- Enquiries and quotes: for the time needed to deal with them and, afterwards, for as long as liabilities may arise from the relationship maintained.
- Support requests and client data: for as long as the relationship lasts and, afterwards, for the limitation periods of the legal obligations.
- Newsletter: until you unsubscribe.
- Invoices and accounting records: for the periods required by tax and commercial law.
- Register of request numbers: it only contains the number, the date, the delivery status and encrypted fingerprints; it does not contain your contact details or your message.
When the data are no longer necessary, we delete or anonymise them.
Rights of data subjects
You have the right to:
- Access your data and know how we process them.
- Rectify inaccurate or incomplete data.
- Request their erasure when they are no longer necessary.
- Object to processing based on our legitimate interest.
- Request the restriction of processing.
- Request the portability of the data you have provided to us.
- Withdraw your consent at any time, without this affecting what was processed until then.
How to exercise those rights
Write to us at info@thenimbusstudio.com stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for the information needed to confirm it. We will reply within a maximum of one month, which the law allows to be extended in complex cases. Exercising your rights is free of charge.
Complaints to the AEPD
If you believe that we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (C/ Jorge Juan, 6, 28001 Madrid) through www.aepd.es . We would be grateful if you gave us the opportunity to resolve it first.
Information security
We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), validation of the forms on the server, restricted access to the messages and use of providers with their own security measures. No measure is infallible; if a security breach affecting you were to occur, we would act in accordance with the law.
Cookies and similar technologies
The site stores your choice about cookies in your browser. Third-party content, such as Google Maps, and analytics or marketing cookies are only activated if you allow it. You will find all the details in the cookie policy .
Updates to the policy
We may update this policy to adapt it to changes in the law or in the site itself. The date of the last update appears at the top of the page. If the changes are significant, we will indicate this visibly on the site.