GoCast
Request a quote
Menu
Request a quote

Privacy policy

Last updated: [LEGAL_REVIEW_DATE]

Base text pending review by a legal adviser. In case of discrepancy, the Spanish version prevails.

1. Data controller

  • Controller: Nuevos Medios Producciones [FORMA_JURÍDICA_PENDIENTE]
  • Tax ID: [VAT_ID]
  • Address: [LEGAL_ADDRESS]
  • Privacy contact: [PRIVACY_EMAIL]

2. Data we process

The data you provide in the contact form: first and last name, company, job title, work email, phone (optional), country, city and details about your project. We also process technical request data (IP address, referring page and UTM campaign parameters) to prevent abuse and measure our channels. We do not request special category data.

3. Purposes and legal basis

  • Replying to your request and preparing a quote. Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR).
  • Sending GoCast news by email, only if you tick the box. Legal basis: consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
  • Form security (spam and abuse prevention). Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Web analytics, only if you accept it in the cookie banner. Legal basis: consent.

4. Retention

We keep request data for the duration of the pre-contractual or contractual relationship and then for [RETENTION_PERIOD] or the applicable legal periods. Newsletter data is kept until you withdraw consent.

5. Recipients and processors

  • GoDaddy (web hosting). [VERIFY_SERVER_LOCATION_AND_SAFEGUARDS]
  • Mailchimp, by Intuit Inc. (contact management and email). Involves international transfer to the US. [VERIFY_APPLICABLE_SAFEGUARD]
  • Google Ireland Ltd. (Google Tag Manager and Google Analytics 4), only with your consent. [VERIFY_TRANSFER_SAFEGUARDS]

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [PRIVACY_EMAIL]. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply reasonable technical and organisational measures: encrypted connection (HTTPS), server-side validation, rate limiting and credentials stored outside the public directory.