Privacy policy

Here we explain what personal data we collect, what we use it for and what rights you have, under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD). We try to collect only what is strictly necessary.

1. Data controllers

The controllers of your data are Daniel Alonso Rivero (tax ID 11825573P) and Alejandro Martínez Almeida (tax ID 14302599A), who work together as Dos Gatos Fotografía and process data jointly (joint controllers, article 26 GDPR). You can contact either of us at hola@dosgatosfoto.com or at C/ Marqués de Viana, 35, 1º A, 28039 Madrid (España).

2. What data we process and why

When you write to us (contact form, email, phone or social media)

• Data: name, email, phone, date and type of event, and whatever you tell us in your message.
• Purpose: to reply to you and prepare a quote.
• Legal basis: taking steps, at your request, prior to a possible contract (art. 6.1.b GDPR).
• Retention: if we don't end up working together, we delete it no later than one year after our last contact.

When you book us

• Data: contact and billing details, and the photographs from your coverage, in which you and often your guests appear.
• Purpose: to photograph your event, deliver the photos in a password-protected private gallery and invoice you.
• Legal basis: the contract (art. 6.1.b GDPR) and, for invoicing, our tax obligations (art. 6.1.c GDPR).
• Retention: the private gallery stays on the website for 3 months from delivery; after that we remove it. We keep a copy of the photos in our archive for a maximum of 5 years from delivery, so we can recover them if you ask us to, unless you ask us to delete it sooner. Billing data is kept for the periods required by law (six years, under the Spanish Commercial Code).

Testimonials

• Data: the names you want to appear under, the place of the event, your text and, if you allow it, a photo from your coverage.
• Purpose: to publish them in the section of Dos Gatos dedicated to our clients' reviews.
• Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time.
• Retention: for as long as it is published or until you ask us to remove it.

Photos on the website and social media

• We only publish photos of recognisable people on our website or social media with their permission, usually given in the coverage contract. In the case of minors (First Communions, christenings…), with the permission of their parents or guardians.
• Legal basis: your consent (art. 6.1.a GDPR).
• If you appear in a published photo, including as a guest, and would prefer us to remove it, write to us at hola@dosgatosfoto.com.

Website security

• We use your IP address momentarily to block anyone trying many passwords in a row in the client area; we do not store it. Our hosting provider also keeps technical access logs for a short time.
• Legal basis: our legitimate interest in protecting the website and your galleries (art. 6.1.f GDPR).

We do not send advertising or newsletters. If we ever do, it will only be to people who have expressly given us permission.

3. Who we share data with

We do not sell or pass on your data to anyone, except where required by law (for example, to the tax authorities). To run the website we use the following providers, which only process data on our instructions and whose data processing agreements we have accepted:

• Vercel: website hosting.
• Neon: database (messages, galleries and testimonials).
• Cloudflare: photo storage and email reception.
• Resend: sending the website's emails (message and gallery notifications).
• Google (Gmail): our mailbox.

Some of these companies are based in the United States, so there may be international data transfers. These are made with the safeguards required by the GDPR: companies certified under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.

4. Your rights

You can ask us at any time to access, correct or delete your data, to object to or restrict its use, to receive it in a format you can take elsewhere (portability) or to withdraw any consent you have given us. Just write to hola@dosgatosfoto.com saying what you would like; if we have doubts about your identity, we may ask you to prove it. We will reply within one month at the latest.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

5. Security

The website always runs over an encrypted connection (HTTPS), each private gallery is protected by its own password and only the two of us have access to the panel where messages and galleries are stored.

For cookies, see our cookie policy.