Privacy Policy
Last updated: [8/9/2026]
Controller
For website enquiries and marketing activity, the controller is [Maria Gabriela Torres Villegas], trading as Gabi Torres Photographer, at [Madrid, 28027], email [gabifreelancemgr@gmail.com]. For an assignment contracted through the UK business, [MGTV Photography] may be the controller for that assignment as identified in its estimate and privacy information.
Information processed and purposes:
Sources of information
Information normally comes from you, your employer or commissioning client, people involved in an assignment, website technology, or publicly available professional sources relevant to the assignment. If a client provides information about another person, the client must be authorised to do so and provide any required notice.
Recipients and service providers
Information may be shared only as needed with Squarespace for website hosting, forms and mailing lists; Microsoft for business email and documents; Dropbox and WeTransfer for file storage or transfer; professional advisers; payment and accounting providers identified in an assignment; and assistants, retouchers, videographers, producers or other suppliers engaged for the work. Public authorities may receive information where required by law.
International transfers
Some providers may process information outside Spain, the European Economic Area or the United Kingdom. Where required, the controller relies on an adequacy decision, approved contractual clauses, the EU-US Data Privacy Framework or UK Extension where valid for the recipient, or another lawful transfer mechanism. Information about the relevant safeguard may be requested at [PRIVACY EMAIL].
Your rights
Subject to applicable law, you may request access, correction, erasure, restriction or portability; object to processing based on legitimate interests or direct marketing; and withdraw consent without affecting earlier lawful processing. Send a request to [gabifreelancemgr@gmail.com]. Reasonable identity verification may be required.
You may complain to the Spanish Data Protection Authority at https://www.aepd.es. If UK data-protection law applies, you may also complain to the Information Commissioner at https://ico.org.uk/make-a-complaint/. Please contact us first if you would like us to investigate a concern directly.
Security and required information
Reasonable technical and organisational safeguards are used. No internet service is completely secure. Information marked as required on a form is needed to answer the request; without it, the enquiry or assignment may not be handled.
Automated decisions and children
The website does not currently make decisions producing legal or similarly significant effects solely by automated means. The website is aimed at business and adult clients. Information about children may be processed only where necessary for an assignment and with the appropriate authority and safeguards.
Changes
This policy may be updated when services, providers or legal requirements change. The current version and update date will appear on this page.
