At The Fabric Creando Artistas, S.L. (hereinafter "The Fabric") we take the protection of your personal data very seriously. This Privacy Policy governs the processing of data collected through the website thefabric.es and any other contact channel we make available to you, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
The controller responsible for the processing of your personal data is:
| Company name | The Fabric Creando Artistas, S.L. |
|---|---|
| Tax ID (CIF) | B72997364 |
| Registered address | Avd. Antonio Domínguez, 5 Local 37 — 38650 Arona (Playa de Las Américas), S/C de Tenerife, Spain |
| General email | [email protected] |
| Privacy email | [email protected] |
| Commercial Registry | Registered with the Commercial Registry of Santa Cruz de Tenerife, Volume 3835, Folio 22, Sheet TF-69343 |
2. Purposes of processing and legal basis
We process your personal data for the following purposes, each based on the legal grounds set out under Article 6 GDPR:
| Purpose | Legal basis |
|---|---|
| Responding to enquiries, quotation requests and information requests via the contact form, email or WhatsApp. | Consent of the data subject and pre-contractual measures (Art. 6(1)(a) and 6(1)(b) GDPR). |
| Management of the contractual relationship with clients (show bookings, service contracts, academy students). | Performance of a contract (Art. 6(1)(b) GDPR). |
| Compliance with tax, accounting and administrative obligations. | Legal obligation (Art. 6(1)(c) GDPR). |
| Sending commercial communications about our services, news or events. | Explicit consent (Art. 6(1)(a) GDPR) or legitimate interest in prior contractual relations. |
| Management and download of commercial dossiers via email validation. | Consent and legitimate interest in protecting commercial material (Art. 6(1)(a) and 6(1)(f) GDPR). |
| Statistical analysis and improvement of the website through analytical cookies (where applicable). | Consent of the data subject (Art. 6(1)(a) GDPR). |
| Handling the exercise of rights regarding data protection. | Compliance with legal obligation (Art. 6(1)(c) GDPR). |
3. Data we process
The categories of data we may process are as follows:
- Identification data: first name, last name, tax identification number (where applicable).
- Contact data: postal address, email address, telephone number.
- Professional or commercial data: company, position, sector of activity (in B2B enquiries).
- Financial and billing data: only when there is a contractual relationship.
- Browsing data: IP address, cookie identifiers, technical data of the device and browser (see Cookie Policy).
- Any other data voluntarily provided by the data subject when filling in forms or contacting us.
We do not process special categories of data (health, ideological, religious data, etc.) unless strictly necessary for service provision and supported by a specific legal basis.
Minors' data: For the registration of minors in academy activities, we will request the data of the parent or legal guardian, who will act as legal representative and provide consent in accordance with Article 7 LOPDGDD.
4. Retention periods
Data will be kept only for as long as necessary to fulfil the purposes for which it was collected:
- Non-contracted enquiries: up to 12 months from the last contact, unless deletion is expressly requested.
- Client data: for the duration of the contractual relationship and afterwards for the legally established periods to address potential liabilities (generally 6 years under the Commercial Code and 4 years for tax obligations).
- Commercial communications: until consent is withdrawn.
- Cookie records: as indicated in the Cookie Policy.
5. Recipients and processors
Your data will not be transferred to third parties except where legally required. However, for the provision of certain services we use providers acting as processors under Article 28 GDPR, with whom we maintain the corresponding contracts:
- Hosting, web infrastructure and email providers.
- Payment gateways and banking entities (in the case of contracting).
- Business management software and communication providers (including WhatsApp Business messaging).
- Tax, accounting and labour advisory services.
- Tax Authority, Social Security and other public bodies where legally required.
6. International data transfers
Some of our technology providers may have servers located outside the European Economic Area (for example, in the United States). In such cases, we guarantee the legitimacy of the transfer through the mechanisms provided in Chapter V GDPR: adequacy decisions of the European Commission, standard contractual clauses or explicit consent of the data subject, as applicable.
7. Data subject rights
Under current regulations, you may exercise the following rights at any time:
- Right of access: to know what data we process about you.
- Right to rectification: to correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): to request deletion when data is no longer necessary.
- Right to object: to object to the processing of your data on grounds related to your particular situation.
- Right to restriction of processing: to request restriction in certain cases.
- Right to data portability: to receive your data in a structured, commonly used format, or to request its direct transmission to another controller.
- Right not to be subject to automated decisions: including profiling with legal effects.
- Right to withdraw consent: at any time, without affecting the lawfulness of prior processing.
How to exercise your rights
You may exercise these rights by sending an email to [email protected] indicating:
- The right you wish to exercise.
- Your full name.
- A copy of your ID or equivalent document proving your identity.
- Specific request and address for notification purposes.
We will respond to your request within a maximum period of one month from receipt, extendable by up to two additional months in cases of particular complexity.
8. Right to lodge a complaint with the Supervisory Authority
If you consider that the processing of your personal data does not comply with the regulations, or if you have not obtained a satisfactory response when exercising your rights, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):
- Website: www.aepd.es
- Electronic office: sedeagpd.gob.es
- Postal address: C/ Jorge Juan, 6 — 28001 Madrid, Spain
- Phone: +34 901 100 099 / +34 91 266 35 17
9. Security measures
The Fabric has adopted the technical and organisational measures necessary to guarantee the security, integrity and confidentiality of personal data, preventing its alteration, loss, unauthorised processing or access, in accordance with Article 32 GDPR. These measures include encryption of communications, access controls, periodic backups and monitoring of systems.
10. Changes to this Privacy Policy
The Fabric reserves the right to modify this Privacy Policy to adapt it to legislative or jurisprudential developments or to changes in our services. Any modification will be published on this website with reasonable notice before taking effect.
If you have any questions about this Privacy Policy, please contact us at [email protected].