Privacy policy

The controller is Hola Casting S.L. (Studio Cactus), tax ID B13745625, registered at C/ Eusebio Estada, 113d, 6-1, 07004 Palma, Illes Balears, Spain.

For any question about your data, write to info@studiocactus.es.

This website is informational. It only processes personal data in the following cases:

• Enquiries from companies (contact form). Data: name, email, company or production, role, project type, approximate dates, message and language. Purpose: to handle and answer your enquiry. Legal basis: your consent (Art. 6.1.a GDPR), given by ticking the form checkbox.
• Acknowledgement of receipt. After sending the form you receive an automatic email confirming receipt, which does not reproduce your message. Legal basis: our legitimate interest in confirming receipt (Art. 6.1.f GDPR).
• Security and abuse prevention. To prevent spam we temporarily process the IP address, a verification token and an irreversible hash of the email address, and we use the Cloudflare Turnstile verification service. Legal basis: our legitimate interest in protecting the website (Art. 6.1.f GDPR).
• Usage statistics. We use Vercel Web Analytics and Speed Insights, which measure visits and performance without cookies and without identifying people.
• Campaign attribution. If you arrive from a link with UTM parameters (utm_source, utm_medium…), they are kept only in your browser session and attached to your enquiry or to links to the app, to know where the visit came from. They do not identify anyone.

This website does not register talent: sign-up takes place in the Studio Cactus app, which has its own legal information. It does not collect data from minors either. If you are a parent or legal guardian of a minor and write to us by email, we will only process your address and the content of your message in order to reply and, where applicable, send you a secure invitation to the app.

We do not sell or transfer your data. To provide the service we use providers acting as data processors: website hosting (Vercel), email delivery (Resend), anti-spam verification (Cloudflare) and rate limiting (Upstash). They only access the data needed for their function.

Some of these providers may process data outside the European Economic Area, in particular in the United States. In that case appropriate safeguards apply, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

• Security data (IP and email hash): only for the duration of the rate-limiting window (minutes or hours).
• Statistics: aggregated and without personal data.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@studiocactus.es. If you believe your data is not being processed properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

We apply reasonable technical and organisational measures: encrypted connections, server-side validation of forms and restricted access to data.

We may update this policy to reflect changes in the service or in the law. The date of the last update appears at the top. The use of cookies is described in the cookie policy.