Legal

Privacy Policy

Last updated: July 2026

This is a courtesy translation. The Spanish version prevails and is the legally binding text: Política de Privacidad.

This Privacy Policy applies to the kyven.studio website (the “Website”) and has been drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

This Website is not required to appoint a DPO under Article 37 GDPR, as Pablo Pérez-Navarro Amores is a self-employed professional not carrying out large-scale processing nor processing special categories of data. Privacy queries: pablo@kyven.studio.

2. Personal data collected and purposes

2.1 Contact form

The Website includes a contact form on all pages. Users may voluntarily provide: name; email; project type (free text); message (free text). As those fields are free text, users may voluntarily add further data (company, phone, etc.). Kyven Studio processes only the data strictly necessary to handle the enquiry.

Submissions are received by Pablo Pérez-Navarro Amores via Netlify Forms (see section 4) and used to: respond to the enquiry; and manage the pre-contractual and, where applicable, contractual relationship.

When the form is submitted successfully, a conversion event (generate_lead) is sent to Google Analytics 4 including, among other parameters, the “project type” free text entered by the user, the form language and the page of submission, in order to measure campaign effectiveness.

Legal basis: performance of pre-contractual measures at the data subject’s request (Art. 6.1.b GDPR); for general enquiries, legitimate interest (Art. 6.1.f GDPR).

Retention: 24 months from the last contact, after which submissions are manually deleted in Netlify. Data that must be retained by legal obligation (e.g. invoicing) is kept for the legally required periods.

2.2 Automatically collected data

Certain third-party services may automatically collect the visitor’s IP and technical device data, as described in section 4.

3. Cookie policy

3.1 Google Analytics

The Website uses Google Analytics 4 (GA4) by Google LLC, which sets cookies to collect statistical information about Website use (pages, time on page, device, country, etc.), sent to Google servers that may be located in the US or other countries. GA4 is activated only upon the user’s prior acceptance via the cookie banner. If the user rejects, GA4 collects no data. More info: policies.google.com/privacy. Opt-out: tools.google.com/dlpage/gaoptout.

3.2 Vimeo

The Website embeds videos hosted on Vimeo (player.vimeo.com): a background video on the homepage and each project’s video on the work pages. All Vimeo embeds load in “Do Not Track” mode (dnt=1 parameter), which prevents Vimeo from setting tracking cookies. In this mode Vimeo only sets essential technical cookies required for the secure operation of the player (e.g. player_clearance, cf_clearance, _cf_bm, _cfuvid), which do not require prior consent under cookie regulations. On mobile, the homepage background video is replaced by a static image. Vimeo’s policy: vimeo.com/privacy.

3.3 Google Ads

The Website uses Google Ads by Google LLC for conversion measurement and remarketing. Google Ads sets cookies (e.g. _gcl_au, _gcl_aw, 90 days) that allow Kyven Studio’s ads to be shown on other websites the user subsequently visits and that measure campaign performance. It is activated only upon the user’s prior acceptance via the cookie banner; if the user rejects, Google Ads sets no cookies and collects no browsing data for that purpose. More info: policies.google.com/privacy.

3.4 Meta Pixel

The Website uses the Meta Pixel by Meta Platforms Ireland Ltd. for conversion tracking, remarketing and the creation of custom audiences for campaigns on Facebook and Instagram. It sets cookies (e.g. _fbp, _fbc, 90 days) and may combine the information with the user’s Meta account where the user is logged in to those platforms. It is activated only upon the user’s prior acceptance via the cookie banner; if the user rejects, the Meta Pixel collects no browsing data. More info: facebook.com/privacy/policy.

3.5 Managing or rejecting cookies

The Website provides a consent banner in line with the AEPD’s guidance on cookie use. Cookies requiring consent (Google Analytics, Google Ads, Meta Pixel) are not activated until the user expressly accepts them. Vimeo videos run in Do Not Track mode and set no tracking cookies. Users may also configure their browser to block or delete cookies. Blocking certain cookies may affect the functioning of some Website elements.

4. Third-party services that process data

International transfers: The above involve transfers to the US. Kyven Studio uses providers relying on the EU–US Data Privacy Framework (DPF) or that have signed the Standard Contractual Clauses (SCCs), per Chapter V GDPR.

Joint controllership with Meta: in the creation of custom audiences from Website visitors, Kyven Studio and Meta Platforms Ireland Ltd. act as joint controllers within the meaning of Article 26 GDPR. You may exercise your rights before either Kyven Studio or Meta.

5. Data subject rights

Under Articles 15–22 GDPR and the LOPDGDD: access, rectification, erasure, restriction, portability, objection, withdrawal of consent. To exercise them, write to pablo@kyven.studio with sufficient identification. Users may also complain to the AEPD (aepd.es).

6. Data security

Kyven Studio adopts the necessary technical and organisational measures. All content is served over HTTPS (TLS). Contact-form submissions are transmitted encrypted via Netlify Forms.

7. Minors

The Website and services are aimed exclusively at businesses and professionals. Kyven Studio does not knowingly collect data of minors under sixteen (16). Deletion requests: pablo@kyven.studio.

8. Updates to this policy

Kyven Studio may update this Policy at any time. The current version is always at kyven.studio/privacy.

KYVEN STUDIO · pablo@kyven.studio · C/ Los Helechos 37, 11380 Tarifa, Cádiz, Spain