PRIVACY POLICY

The purpose of this policy is to inform interested parties about the different personal data processing activities carried out by this organization through its website, which may affect your personal data, in accordance with the provisions of the Spanish Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).

1. IDENTIFICATION AND CONTACT DETAILS OF THE DATA CONTROLLER

The organization Operary Studio OÜ, with registered address at Sepapaja tn 6, 15551 Tallinn, Harju County, Estonia, registration number 16680557, contact phone number +34 912 901 815, and contact email admin@operary.com.

2. PURPOSES OF PROCESSING YOUR PERSONAL DATA

USERS / WEB SURFERS OF THE CONTROLLER’S WEBSITE

The personal data you provide through our web forms will be processed for the following purposes:

  • To handle requests, complaints, and incidents submitted through our contact channels on the website.
  • To understand user behavior on the website in order to detect possible cyberattacks.
  • To comply with the legal obligations that are directly applicable to us and regulate our activities.
  • To protect and enforce our rights or respond to claims of any kind.
  • Where applicable, to send commercial communications related to the services we offer and/or industry news or newsletters.

To manage, administer, and monitor your activity on the blog/forum integrated into the website.

3. LEGAL BASIS FOR PROCESSING

USERS / WEB SURFERS OF THE CONTROLLER’S WEBSITE

  • Your consent, which you have provided for the processing of your data. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.
  • Compliance with legal obligations applicable to us. In this case, you may not object to the processing of your personal data.
  • Our legitimate interest in protecting our image, business, and exercising the rights recognized in section eight of this policy.

4. DATA RETENTION PERIODS OR CRITERIA

The personal data provided will be kept for as long as necessary to maintain the relationship with the client and/or for the legally established retention periods.

5. AUTOMATED DECISIONS AND PROFILING

The website does not make automated decisions or carry out profiling activities.

6. RECIPIENTS

During the processing of your personal data, the organization may communicate your data to the following recipients:

  • Courts and Tribunals.
  • Law Enforcement Agencies.
  • Other competent public bodies or authorities when we are legally required to disclose personal data.

7. INTERNATIONAL DATA TRANSFERS

The organization does not carry out any international data transfers.

8. RIGHTS

Data subjects may, at any time and completely free of charge, exercise their rights of access, rectification, and erasure of their data, as well as request the restriction of processing, object to it, request the portability of their data (where technically possible), or withdraw the consent given. They may also object to being subject to an automated decision, including profiling.

To do so, you may use the forms provided by the organization or send your request in writing to the postal address or email address indicated above. In any case, your request must be accompanied by a copy of your identity document or another equivalent document to verify your identity.

If you believe that your rights regarding the protection of personal data have been violated, especially if you are not satisfied with the exercise of your rights, you may lodge a complaint with the competent Supervisory Authority.

9. ACCURACY OF THE DATA

The data subject guarantees that the information provided is truthful and is responsible for communicating any changes to it. The organization shall be exempt from any liability arising from the failure to comply with this obligation.

Last revision: November 11, 2025