1. Data controller
Canary Film Factory, Sociedad Limitada (Canary Film Factory, S.L.), NIF B76326941, with registered office at Calle Sor Brígida Castelló, 13, 35001 Las Palmas de Gran Canaria, Las Palmas, Spain, is the controller of personal data processed through this website.
Privacy contact: info@canaryfilmfactory.com | +34 660 211 923.
2. Scope and data collected
This website is directed primarily to companies and professionals. Nevertheless, business contact information relating to an identifiable person is personal data and is processed in accordance with applicable data protection law.
The contact form collects the information entered by the user: name, company, email address, phone or WhatsApp number, project type and message. Fields marked as required are necessary to submit and answer the enquiry. The form does not provide a file-upload function.
Technical providers involved in delivering the website or the form may also process limited technical data such as IP address, browser and device information, date and time, referring page and security or anti-spam logs.
3. Purposes of processing
- To receive, answer and manage professional enquiries.
- To assess requested production, post-production, distribution, investment, co-production, private-access or audiovisual service opportunities.
- To take steps requested before entering into a contract and, where applicable, to manage the resulting professional relationship.
- To maintain necessary records of communications, prevent abuse and protect the website and Canary Film Factory’s legal interests.
- To comply with applicable legal, accounting or administrative obligations where relevant.
Contact data will not be used for newsletters or unrelated promotional campaigns unless a separate lawful basis has been established.
4. Legal basis
Processing is based, as applicable, on steps taken at the user’s request before entering into a contract; performance of a contract; Canary Film Factory’s legitimate interest in managing requested B2B communications, maintaining security and establishing or defending legal claims; and compliance with legal obligations.
Consent is used where specifically required, including for optional cookies or any future optional marketing subscription. Consent may be withdrawn at any time without affecting prior lawful processing.
5. Required information
Required form fields are necessary to identify and respond to the enquiry. If they are not provided, the request cannot be submitted or properly answered. Optional information should be limited to what is relevant to the professional request.
6. Recipients and service providers
Personal data may be accessed by Canary Film Factory personnel who need it for the purposes described above and by technical providers necessary to operate the website, deliver email, process forms, prevent spam, maintain security or provide hosting services.
The contact form is processed through Web3Forms. According to Web3Forms’ current public information, submissions are transmitted over HTTPS, stored using AWS infrastructure with encryption at rest, and may be checked by spam-prevention providers. Web3Forms states that submission retention depends on the applicable service plan.
Data will not be sold. It will only be disclosed to other parties where required by law, necessary for a requested professional transaction, or authorised under an appropriate legal basis.
7. International data transfers
Some technical providers may process information outside the European Economic Area. Where an international transfer takes place, Canary Film Factory will require an applicable mechanism under Chapter V of the GDPR, such as an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard. Information about the applicable safeguards may be requested at info@canaryfilmfactory.com.
8. Data retention
Enquiries that do not lead to a professional relationship will ordinarily be retained for up to 12 months after the last relevant communication, unless earlier deletion is appropriate or a longer period is necessary to establish, exercise or defend legal claims.
If negotiations, a contract or a commercial relationship arise, data will be retained for the duration of that relationship and subsequently for the statutory limitation periods and any legally required accounting, tax or administrative retention period. Technical and anti-spam logs are retained according to the security needs and the relevant provider’s documented retention settings.
9. User rights
Data subjects may request access, rectification, erasure, restriction of processing, portability where applicable, or object to processing. They may also withdraw consent where processing is based on consent.
Requests may be sent to info@canaryfilmfactory.com, identifying the request and providing only the information reasonably necessary to verify identity. Requests are normally answered within one month, subject to the extensions permitted by law.
10. Right to lodge a complaint
If a data subject considers that their rights have not been properly addressed, they may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or with another competent supervisory authority.
11. No automated decisions
The website does not use the contact form to make decisions producing legal or similarly significant effects solely by automated means, and it does not carry out automated profiling through the form.
12. Sensitive information, confidential material and third-party data
Users must not submit special-category data, highly sensitive information, complete scripts, confidential business material or personal data belonging to third parties unless this has been expressly requested and there is a lawful basis and appropriate protection for doing so.
13. Security
Canary Film Factory applies reasonable technical and organisational measures appropriate to the nature of the information processed. No internet transmission is completely risk-free; users should therefore limit submissions to the information necessary for the initial professional enquiry.
14. Changes to this policy
This policy may be updated when the website, providers or processing activities change. The date shown above identifies the current published version.