1. Data controller

Controller: On White Makers, S.L. (CIF B05300363)
Address: Calle Barrena 5, 41008 Seville (Spain)
Email: hola@owmakers.com

2. What data we process and where it comes from

We process the data you provide voluntarily through the contact and brief forms (name, company or agency, email, phone, city, project date, deliverables, deadline and the content of your message), the data you send us by email or phone, and the browsing data described in the Cookie policy. We do not process special categories of data. If you provide third-party data (for example, a production contact), you guarantee you have their authorisation.

3. Why and on what legal basis

Purpose	Legal basis
Answering your enquiry or quote request and preparing the proposal	Pre-contractual steps at your request (Art. 6.1.b GDPR)
Managing the commercial and contractual relationship if you hire us	Performance of a contract (Art. 6.1.b GDPR)
Keeping in professional contact with agencies and companies we have worked with or that have requested information	Legitimate interest in B2B commercial communication (Art. 6.1.f GDPR), with the right to object at any time
Measuring website usage with analytics	Consent (Art. 6.1.a GDPR), which you can withdraw at any time from the cookie settings
Complying with legal obligations (tax, accounting)	Legal obligation (Art. 6.1.c GDPR)

4. How long we keep your data

Enquiries that do not lead to a commission are kept for a maximum of 24 months from the last contact. Client data is kept for the duration of the contractual relationship and afterwards for the statutory limitation periods (generally 6 years for commercial purposes and 4 for tax purposes). Analytics data is kept as stated in the Cookie policy.

We do not disclose your data to third parties unless legally required. To provide the service we use providers acting as processors with the guarantees of Article 28 GDPR: web hosting and email (IONOS), management and invoicing tools and, only if you accept analytics cookies, Google Analytics (Google Ireland Ltd.). Some providers may involve international transfers covered by adequacy decisions or the European Commission’s standard contractual clauses.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hola@owmakers.com or to the postal address above, enclosing proof of identity. You may also withdraw consent at any time without affecting the lawfulness of prior processing, and lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with the law.

7. Security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or alteration: encrypted communications (HTTPS), access control and providers bound by contractual guarantees.

8. Changes to this policy

This policy may be updated to reflect regulatory or service changes. The current version is always the one published on this page, with its update date.