Legal information
Privacy policy
Last updated: October 2026
1. Data controller
- Controller
- Elisa Peteiro
- Tax ID (NIF)
- 34962212G
- Address
- Avda. Portugal, 63, 32002 Ourense (Spain)
- art@elisapeteiro.com
This policy explains how the personal data of people who visit the website www.elisapeteiro.com and its subdomains, or who contact Elisa Peteiro to ask about or commission work, is processed.
2. What data is processed and where it comes from
The website has no contact forms or purchase system. Personal data is processed only in the following cases:
- Contact. If you write by email or WhatsApp, your name, your email address or WhatsApp number and the content of your message are processed.
- Commissions. To carry out a job, the photographer may provide photographs, names, dates and other data that must appear in the design (for example, birth details), or the message and information needed for a custom song.
- Technical browsing data. The providers that host the site and the integrated services may process technical data, such as the IP address, for operation and security (see the Cookie policy).
- Visit statistics. Cloudflare Web Analytics is used, without cookies, to know how many visits each page receives and from which country or type of device it is accessed. Links to specific pages that are sent by email may include a code identifying that mailing, which makes it possible to know whether the linked page has been visited. This information is used only to assess interest in the proposal that was sent.
3. Purposes and legal bases
- Answering your questions and requests: with your consent, when you get in touch, and to take pre-contractual steps at your request.
- Carrying out agreed commissions: to perform the agreement with the client.
- Complying with legal obligations (for example, tax and accounting), where applicable.
- Security and operation of the website: the owner's legitimate interest.
- Visit statistics and assessing interest in the proposals sent: the owner's legitimate interest. You can object at any time by writing to art@elisapeteiro.com.
No profiles are built and no automated decisions with effects on individuals are made, and data is not used for advertising.
4. Photographs of families and minors
When a photographer provides photographs of their clients, which may include minors, for a commission, Elisa Peteiro acts as data processor on behalf of the photographer, who maintains the relationship with the families and decides how the images are used.
The photographer guarantees that they hold the necessary rights and authorizations, including those of minors' legal guardians. The photographs are used only to carry out the commission, are not published or used for promotional purposes, and are deleted within a maximum of 30 days from delivery of the work, unless there is a legal obligation or an express agreement to the contrary.
This website is not aimed at minors.
5. Retention period
- Contact messages are kept for as long as the conversation or professional relationship lasts and, afterwards, for the legal limitation periods for possible liabilities.
- Photographs received for a commission are deleted within the period stated in the previous section.
- Data needed for tax and accounting obligations is kept for the periods set by law.
6. Recipients and providers
Data may be processed by providers that supply services needed for the business, with the corresponding safeguards in place. Among them:
- Web hosting, security and visit statistics services: Google (Google Sites) and Cloudflare (including Cloudflare Web Analytics).
- Communication and file transfer services: email, WhatsApp (Meta) and WeTransfer.
- Design tools (such as Canva), video editing and AI-assisted music production tools. For song production, only the lyrics and style guidelines are entered.
- YouTube (Google), for playing the example videos.
Data is not disclosed to other people or entities, except where legally required.
7. International transfers
Some of these providers may process data outside the European Economic Area, in particular in the United States. In such cases the transfer is carried out with the safeguards provided for by law, such as the EU-US Data Privacy Framework or standard contractual clauses.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to art@elisapeteiro.com and stating the right you wish to exercise. You may be asked to prove your identity.
If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security
Reasonable technical and organizational measures are applied to protect data against unauthorized access, loss or alteration, and access to photographs and commission files is limited to what is strictly necessary.
10. Changes to this policy
This policy may be updated when the services offered, the tools used or the applicable regulations change. The version published on this website is the one in force at any given time.
11. Contact
For any question about the processing of personal data:
Elisa Peteiro
Email: art@elisapeteiro.com