Controller
Trocalia Digital S.L. (tax ID B70751490), Barcelona. For any privacy matter, write to info@spotalia.com.
What data we process and why
Contact and order data (name, email, phone, business details, brief): to produce and deliver your video, run your campaign if you order one, and assist you. Legal basis: performance of the contract.
Billing and payment data: payment is handled by Stripe; we never see or store your card details. Legal basis: the contract and our tax obligations.
Your website address and its public content: to suggest a video idea before you buy. We only read public pages.
The material you upload (logos, photos, clips, documents): to produce your video. If it shows people, we process it on your behalf, as explained below.
Contact form messages: to reply to you. Legal basis: your request.
IP address and technical logs: for service security and to prevent abuse. Legal basis: our legitimate interest.
Who else is involved
We use providers that process data on our behalf, under contract and with safeguards: Stripe (payments), SMTP2GO (email delivery), our hosting provider in the European Union, Google (reading your public website and suggesting an idea with its Gemini model) and the AI providers we use to generate images, voice and music.
Some are based in the United States or use sub-processors there. In those cases the transfer relies on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
If you order a campaign, we work inside your own Meta (or TikTok, or Google) account with partner access: you are the controller of that data towards the platform.
We do not sell your data or use it for advertising.
Material showing people: data processing on your behalf
When you send us photos or clips showing your staff, customers or other people, you are the controller of that data and we only process it to produce your video, following your instructions (article 28 GDPR). The terms of service set out this arrangement.
You confirm that you have those people’s consent to use their image in advertising.
How long
Order and billing data: six years, as required by commercial and tax law.
The material you upload and the delivered videos: 365 days from delivery, so you can download them again. You can ask us to delete them sooner.
Contact messages that don’t lead to an order: one year.
Your rights
You can request access, rectification, erasure, objection, restriction and portability of your data by writing to info@spotalia.com. If you believe we are not handling it properly, you can complain to the Spanish Data Protection Agency (aepd.es).