Privacy policy

Last updated: 28 September 2026.

This policy explains what personal data we process when you visit rebobinart.com or write to us, what we use it for and what rights you have. It is governed by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Who is the data controller

2. What data we process

  • Contact and quote forms: name, email address, phone number, type of organisation, type of project and the message you write to us.
  • Emails and phone calls: the information you give us when you write to us or call us.
  • Clients, suppliers and artists: the contact and billing details needed to prepare and carry out a project.
  • Browsing data: statistical information about how the site is used, collected with cookies. See the cookies policy for details.

We do not ask for special categories of data. Our forms are not intended for children under 14.

3. What we use it for and on what legal basis

  • Answering your enquiries and preparing quotes. Legal basis: your consent, given by ticking the box on the form, and taking pre-contractual steps at your request.
  • Managing commissioned projects (commercial, administrative and accounting management). Legal basis: performance of the contract and compliance with tax and accounting obligations.
  • Sending you information about our projects and services. Only if you have given us your express consent, which you can withdraw at any time.
  • Understanding how the site is used and improving it through usage statistics. Legal basis: your consent, as explained in the cookies policy.
  • Protecting our forms from spam with Google reCAPTCHA. Legal basis: our legitimate interest in keeping the site secure.

We do not make automated decisions or build profiles with your data.

4. How long we keep it

  • Enquiries and quotes that do not lead to a commission: for as long as needed to answer and follow them up; after that we delete them.
  • Commissioned projects: for the duration of the relationship and then for the periods required by tax and commercial law (generally six years).
  • Information mailings: until you withdraw your consent.
  • Browsing data: for the periods stated in the cookies policy.

5. Who has access to it

We do not sell or pass your data on to third parties unless required by law. To run the site and our email we rely on providers that process data on our behalf, under contract and only for that purpose:

  • Dinahosting (Spain): hosting of the website and its forms.
  • Google: email, statistics (Google Analytics), spam protection (reCAPTCHA) and the maps and YouTube videos embedded on some pages.
  • Microsoft: usage statistics and heatmaps (Microsoft Clarity).
  • Vimeo: videos embedded on some pages.

If a project requires it, we may share the essential contact details with the artist or organisation taking part, and we will always tell you beforehand.

6. International transfers

Google and Microsoft may process data in the United States. Both companies are certified under the EU-US Data Privacy Framework, which the European Commission recognises as an adequate safeguard, and they use standard contractual clauses.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time without affecting processing carried out before. Write to info@rebobinart.com or to the postal address above, stating which right you wish to exercise and enclosing a document that identifies you.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid).

8. Security

We apply technical and organisational measures to prevent the loss, misuse, alteration of and unauthorised access to data. The site uses an encrypted connection (HTTPS).

9. Changes to this policy

We may update this policy when the law or the way we work changes. The version in force is always the one published on this page, with the date of the last update at the top.