Privacy policy

1. Data controller

This policy has been prepared by LEÓN BORJA GONZÁLEZ CORTÉS — hereinafter bokstudio — controller of the personal data collected on the site ia.bokstudio.com.

Name

LEÓN BORJA GONZÁLEZ CORTÉS

Tax ID (NIF)

43827490R

Address

C/ San Martín 95, 38001 Santa Cruz de Tenerife, Spain

Email

info@bokstudio.com

Phone

+34 600 683 869

2. Summary of processing

This site has no forms, comments or user registration. These are all the personal data processing activities it carries out:

3. Details of each processing activity

3.1. Audience measurement (Google Analytics 4)

• Data: online identifiers (_ga cookies), pages visited, traffic source, technical browser and device information, and approximate location (country and city). Google Analytics 4 does not log or store full IP addresses.
• Purpose: understanding, in aggregate, which content is read and how people navigate, to improve the site.
• Legal basis: consent (Art. 6.1.a GDPR and Art. 22.2 LSSICE). Without consent, Google Analytics is not loaded.
• Retention: the period configured in Google Analytics, up to 14 months; cookies expire after 2 years or when consent is withdrawn.

3.2. Video playback (YouTube and Vimeo)

• Data: IP address and browser information received by YouTube (Google) or Vimeo when their player loads, and whatever those services collect during playback.
• Purpose: letting you watch videos inside the site.
• Legal basis: consent, by enabling “External content” or pressing “Play here” on each video. Until then only a thumbnail hosted on this site is shown and those services are not contacted. YouTube loads in its privacy-enhanced mode (youtube-nocookie.com).
• YouTube and Vimeo act as controllers of their own processing under their policies: Google, Vimeo.

3.3. Email enquiries

• Data: whatever you provide when writing to info@bokstudio.com: name, email address and message.
• Purpose: answering enquiries, error reports, requests to correct or remove content, and rights requests.
• Legal basis: consent (Art. 6.1.a GDPR) and, for rights requests, compliance with a legal obligation (Art. 6.1.c GDPR).
• Retention: 6 months from the last contact, unless longer retention is needed to address potential legal liabilities.

3.4. Server logs

• Data: IP address, date and time, requested page, response code and browser, logged automatically by the server on each visit.
• Purpose: keeping the site secure, detecting abuse and resolving technical issues.
• Legal basis: the controller’s legitimate interest in keeping the site secure and operational (Art. 6.1.f GDPR).
• Retention: as long as the hosting provider keeps them for technical and security reasons.

3.5. Preferences stored in your browser

Your cookie choice and, if you change it, the light or dark theme are stored in your browser’s local storage. This data is not sent to any server. More in the Cookie policy.

4. Data we do not collect

• We do not ask for registration, name or email to read or watch the content.
• We do not use advertising or cross-site tracking cookies, and we do not share data with ad networks.
• We do not process special categories of data (health, beliefs, etc.).

5. Recipients and processors

No data is disclosed to third parties unless required by law (for example, to public authorities or courts). The following have access to data, under the conditions stated:

• Web hosting provider (Dinahosting, Spain): hosts the site and its server logs, as processor.
• Google Ireland Ltd.: Google Analytics, as processor, only with consent; and YouTube, as independent controller, only when you play a video.
• Vimeo: as independent controller, only when you play a video hosted on Vimeo.

6. International data transfers

Google Analytics and YouTube may involve data transfers to the United States, covered by the EU-US Data Privacy Framework and Standard Contractual Clauses under the GDPR. Vimeo may also process data in the United States, with the safeguards provided for in the GDPR. These transfers only happen if you consent to analytics or external content.

7. Automated decisions and profiling

No automated decisions with legal or similarly significant effects are made, and no profiles are built for commercial purposes. Analytics is used only in aggregate.

8. Children

The site is not specifically aimed at children under 14. We do not knowingly collect data from minors; if you are a parent or guardian and believe a minor has provided us with data, write to us so we can delete it.

9. Data security

We apply technical and organisational measures appropriate to the risk:

• HTTPS/TLS encryption on every page.
• Static site, with no forms and no user databases.
• Publishing over an encrypted connection with an account restricted to the site’s folder.
• Security headers on the server and blocking of internal files.
• Third-party services loaded only after consent.

10. Your rights

You may exercise the following rights at any time:

• Access: find out whether we process your data and get a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data when it is no longer needed.
• Objection: object to processing based on legitimate interest.
• Restriction: ask us to suspend processing while a claim is resolved.
• Portability: receive the data you gave us in a structured format.
• Withdrawing consent: at any time, from “Cookie settings” (floating button or footer), without affecting the lawfulness of prior processing. Withdrawing analytics consent deletes Google Analytics cookies for this domain.

11. How to exercise your rights

1. Email info@bokstudio.com with the subject “Data protection”.
2. State the right you wish to exercise and attach proof of identity.
3. We will reply within one month at most, extendable to two in complex cases, in which case we will let you know.

If you are not satisfied with the response, you may file a complaint with the Spanish Data Protection Agency (AEPD).

12. Changes to this policy

This policy may be updated to reflect changes to the site, the services used or the law. The version in force is the one published on this page, with the last-updated date shown at the top. If changes affect processing based on your consent, we will ask for it again.

See also the Legal notice.