§1 Privacy Policy (GDPR & CCPA)
EU 2016/679DigitalMotionPartners, registered at 28005, C. Cava Baja, 47 004 B, Madrid, Madrid, Spain (“Controller”, “we”, “us”), is the data controller for personal data processed through digitalmotionpartners.com and related service communications. This Privacy Policy describes what we collect, why we collect it, and the rights available to data subjects under Regulation (EU) 2016/679 (GDPR) and the California Consumer Privacy Act (CCPA).
1.1 Categories of Data We Process
- Identity & contact data: first name, last name, business email, phone number, company name submitted through our inquiry console.
- Project data: specifications, budgets, and timelines you voluntarily include in a brief.
- Transaction data: invoice identifiers, payment status, and billing address processed via our payment provider. Full card details never touch our servers.
- Technical data: IP address, browser type, device identifiers, and page events collected through essential cookies and privacy-respecting analytics.
1.2 Legal Bases for Processing
- Art. 6(1)(b) GDPR — Contract: preparing quotes, delivering contracted services, and administering accounts.
- Art. 6(1)(f) GDPR — Legitimate interests: securing the platform, preventing fraud, and improving service quality with minimal data impact.
- Art. 6(1)(a) GDPR — Consent: non-essential cookies and optional marketing communications. Consent may be withdrawn at any time.
- Art. 6(1)(c) GDPR — Legal obligation: tax, accounting, and regulatory record-keeping.
1.3 Retention
Inquiry records are retained for up to 24 months from last contact. Contractual and financial records are retained for the statutory period required under Spanish commercial and tax law (generally up to 6 years). Data is deleted or anonymized thereafter unless a longer lawful basis applies.
1.4 Recipients & International Transfers
Data is shared only with processors necessary to operate our service: cloud hosting providers within the EEA, our payment processor (Stripe), email delivery infrastructure, and professional advisers bound by confidentiality. Where a processor operates outside the EEA, transfers rely on Standard Contractual Clauses (SCCs) and supplementary safeguards.
1.5 Your Rights
Subject to statutory conditions, you have the right to access, rectify, erase, restrict, and port your data; to object to processing based on legitimate interests; and to lodge a complaint with a supervisory authority (in Spain: the Agencia Española de Protección de Datos). CCPA residents may additionally request disclosure, deletion, and opt-out of “sales” of personal information — we do not sell personal data.
1.6 How to Exercise Rights
Email [email protected] with the subject line “Data Subject Request”. We respond within 30 days, free of charge, after verifying your identity.