We are committed to protecting your personal data. This policy explains what data we collect, why, how we use it, and your rights under EU law.
Mindcreativa.Studio ("we", "us", "our") is a creative AI video and digital growth studio operating within the European Union. We take the privacy of every person who visits our website, enquires about our services, or becomes a client very seriously.
This Privacy Policy sets out how we collect, use, store, share, and protect personal data in accordance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and any applicable national data protection legislation.
Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood this policy. If you do not agree, please refrain from using our website and services.
As data controller, we determine the purposes and means of processing your personal data. We are responsible for ensuring your data is handled lawfully, fairly, and transparently.
We only process your personal data where we have a lawful basis under Article 6 of the GDPR. The legal bases we rely on are:
We do not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only where necessary:
We may disclose your data to competent authorities, courts, or regulators if required by law, court order, or to protect the rights, property, or safety of Mindcreativa.Studio, our clients, or others.
Some of our third-party service providers may be located outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we ensure adequate safeguards are in place in accordance with Chapter V of the GDPR, including:
You may request information about the specific safeguards applied to any international transfer of your data by contacting us.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles:
When data is no longer required, we securely delete or anonymise it.
As a data subject in the European Union, you have the following rights under the GDPR:
| Right | What It Means |
|---|---|
| Right of Access (Art. 15) | Request a copy of all personal data we hold about you. |
| Right to Rectification (Art. 16) | Correct inaccurate or incomplete personal data. |
| Right to Erasure (Art. 17) | Request deletion of your data ('right to be forgotten'), where applicable. |
| Right to Restriction (Art. 18) | Restrict processing of your data in certain circumstances. |
| Right to Data Portability (Art. 20) | Receive your data in a structured, machine-readable format. |
| Right to Object (Art. 21) | Object to processing based on legitimate interests or for direct marketing. |
| Right to Withdraw Consent (Art. 7(3)) | Withdraw consent at any time without affecting prior processing. |
| Right to Lodge a Complaint (Art. 77) | File a complaint with your national data protection supervisory authority. |
If you believe your personal data has been processed in violation of the GDPR, you have the right to lodge a complaint with the competent national supervisory authority in your EU member state of habitual residence, place of work, or the place of the alleged infringement.
A full list of EU national data protection supervisory authorities is available on the European Data Protection Board website: edpb.europa.eu
Our website uses cookies and similar technologies. For full details of the cookies we use, their purposes, and how to manage your preferences, please read our Cookie Policy.
We do not use your personal data for fully automated individual decision-making (including profiling) that produces legal or similarly significant effects, as defined in Article 22 of the GDPR.
Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us immediately and we will delete such data without undue delay.
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access (Article 32 GDPR). These measures include encrypted connections (HTTPS/TLS), access controls, and regular security assessments.
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with Article 34 GDPR.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post any updated version on this page with a revised "Last Updated" date. For significant changes, we will notify you by email (where we have your contact details) or through a prominent notice on our website. We encourage you to review this policy periodically.