Privacy Policy
Last updated: February 24, 2026
CHUBBY STUDIO, S.L. cares about the personal data it processes and the strict compliance with the current regulations on the protection of personal data, among others, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, as well as Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights.
In accordance with this, the following issues regarding the processing of personal data carried out by CHUBBY STUDIO, S.L. are informed:
Who is responsible for the processing of your personal data?
Identity: CHUBBY STUDIO, S.L.
NIF: B44691418
Postal Address: C/ Apartado 134, 01080 Vitoria-Gasteiz, (Álava)
Email: hola@chubby.studio / hello@chubby.studio
Principles regarding treatment
In the processing of personal data, the principles required by the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, GDPR), are respected:
Principle of legality, loyalty, and transparency:
The data we collect is processed lawfully, fairly, and transparently, with the prior consent of the individuals when necessary or, where applicable, for the execution of a contract in which the individual is a party or, if the processing is necessary for the compliance with a legal obligation.
Purpose limitation principle:
The personal data we process is used for the purposes indicated in the section "What do we use your personal data for?".
Data minimization principle:
According to this principle, the only personal data we collect from users is strictly necessary to manage and respond to the inquiries or requests they make to us.
Principle of accuracy:
The personal data we collect will be kept accurate and, if necessary, updated. To do this, in case of any change in personal data, the user must communicate it so that the appropriate update can be made.
Limitation period for retention:
The personal data we process will be kept for the periods indicated in the section "How long will we keep your personal data?".
Principle of integrity and confidentiality:
To uphold this principle, personal data will be processed in a manner that ensures an adequate level of security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by applying appropriate technical and organizational measures.
What categories of personal data do we process?
The data categories we deal with through this website are:
Data obtained through the contact forms:
Identifying data (name and email address).
We inform you that we do not process data classified as "special categories of data" (health data, biometric data, trade union affiliation, etc.) or personal data related to convictions or criminal offenses by the General Data Protection Regulation.
The personal data we collect through these forms are necessary to address the inquiry or request; therefore, it is mandatory to provide them in such a way that, otherwise, we will not be able to attend to it.
How have we obtained your personal data?
All personal data we process is provided by the interested parties themselves or their legal representatives.
The personal data we collect through this website has been obtained through the contact forms integrated into our site.
What purpose do we use your personal data for?
Data collected through the contact forms:
We use your personal data to manage and respond to the inquiries and requests made by users of our website.
Analysis and improvement of our website:
We use Google Analytics to analyze user behavior and improve the experience on our website.
What is the legitimacy for the processing of your personal data?
Data collected through the contact forms:
The legal basis that legitimizes the processing of personal data provided to us by users is the consent given when contacting us and the necessity of such processing to address and respond to the inquiries or requests made to us.
Website analysis:
The legal basis is our legitimate interest in improving and optimizing our services and the user experience.
To which recipients will your personal data be communicated?
The personal data provided by users of this website will not be communicated to third parties unless it is necessary to manage the requests made to us or to comply with legal obligations.
To manage our website, we use third-party services that act as data processors, with whom we have signed the corresponding data processing contract in accordance with the provisions of Article 28.3 of the GDPR:
Framer: hosting provider and web publishing platform. Responsible for storing contact forms and associated data.
Google Analytics: web analytics tool to understand user behavior on our site.
How long will we keep your personal data?
Data collected through the contact forms:
The personal data you provide will be retained for as long as necessary to address and resolve the query or request you make. Once the processing is completed, it will be deleted within a maximum period of 90 days, unless there is a legal obligation that requires its prolonged retention.
What are your rights when you provide us with your personal data?
Right to request access to your personal data:
In order to understand and verify the legality of the processing, users may request confirmation at any time of whether CHUBBY STUDIO, S.L. is processing their personal data and, in such a case, they will be informed, among other things, about which data is being processed, its purpose, its source, the expected retention period, and, if applicable, the recipients or categories of recipients.
Right to request your rectification:
Users will be able to request the rectification of personal data that is inaccurate or to complete any incomplete data, including through an additional declaration. In such cases, they must indicate in their request which data they are referring to and the correction to be made, and must attach, where applicable, the supporting documentation for the inaccuracy or incompleteness of the data being processed.
Right to request your deletion ("right to be forgotten"):
Users can request that their personal data be deleted and stop being processed if it is no longer necessary for the purposes for which it was collected or processed otherwise, withdraw their consent, have been processed unlawfully, or must be deleted to comply with a legal obligation.
Right to request the limitation of the processing of your personal data:
In this case, we will only retain personal data for the formulation, exercise, or defense of claims, or with a view to protecting the rights of another natural or legal person, or for reasons of significant public interest.
Right to the portability of your personal data:
Users can request that we provide their personal data to them or to another party they designate, in a structured, commonly used, and machine-readable format.
Right to object to processing:
We will cease processing your personal data in the manner you indicate, unless we must continue processing it for compelling legitimate reasons or for the formulation, exercise, or defense of possible claims.
How to exercise your data protection rights
To exercise such rights, it is necessary to send a written request addressed to CHUBBY STUDIO, S.L., at C/ Apartado 134, 01080 Vitoria-Gasteiz (Álava), or by sending an email to hola@chubby.studio or hello@chubby.studio, always accompanied by a photocopy of your ID.
CHUBBY STUDIO, S.L. will respond to all requests within the timeframes and conditions required by current regulations on personal data protection (maximum 30 days, extendable to 60 days in complex cases).
How to file a complaint with the Spanish Agency for Data Protection
If any user believes that CHUBBY STUDIO, S.L. has not properly handled their personal data or has not adequately addressed the exercise of their data protection rights, they can file a complaint with the Spanish Agency for Data Protection, either through its electronic headquarters or at its address, Calle Jorge Juan, nº 6, C.P. 28001 in Madrid.
More information about data protection rights and complaints to the Control Authority can be found at www.aepd.es.
Security
In accordance with the provisions of Article 32 of the GDPR, CHUBBY STUDIO, S.L. has adopted appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
In order to assess the adequacy of the level of security, particular consideration has been given to the risks associated with data processing, particularly as a result of the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or the unauthorized communication or access to such data.
Duty of secrecy
CHUBBY STUDIO, S.L. has adopted measures to ensure that any person acting under their respective authority and having access to the personal data provided by users can only process it following their instructions, and must also maintain the corresponding professional secrecy regarding the same, which will last indefinitely.
Use of the web by minors
We ask users to read the policies for the use of the web by minors that we have published in the "Legal notice" on our website.
Cookies
Cookies are small text files that are stored on the hard drive or in the memory of the computer that accesses or visits the pages of certain websites, so that user preferences can be known when reconnecting.
See information about the cookies used on this website in the section "Cookie Policy".
