Privacy Policy. Film and photography for weddings and brands in Barcelona

SINFINFILMS

Effective date: 2 July 2026 · Last updated: 2 July 2026 · Applies to sinfinfilms.com and all related booking forms

This document is a general-purpose template built to reflect standard EU GDPR and Spanish LOPDGDD requirements for a small studio collecting names, contact details, and wedding information through a website form and CRM. It is provided for convenience and is not a substitute for legal advice. Please have a qualified lawyer review this policy — especially the sections on international data transfers and third-party processors — before publishing it live, and update the placeholder details marked in brackets.

1. Who we are

Sinfinfilms ('we', 'us', 'our') is a wedding photography and cinematography studio based in Barcelona, Spain, operating across Europe. We are the data controller responsible for the personal data described in this policy.

Contact: info@sinfinfilms.com · WhatsApp +34 664 540 763

2. What data we collect

When you get in touch with us — through our website form, WhatsApp, email, or Instagram — we may collect:

Contact details: your name, email address, and phone/WhatsApp number
Wedding details: your wedding date, city or venue, and any details you share about your event
Communication history: messages, call notes, and proposals exchanged with us
Technical data: IP address, browser type, device information, and pages visited, collected automatically via cookies and analytics tools
Marketing interaction data: if you click on or engage with our Instagram or Meta ads, Meta may share limited interaction data with us

We do not knowingly collect any special category data (such as health or financial information) through our forms.

3. How we use your data

To respond to your enquiry and discuss your wedding
To prepare and send you a personalised proposal
To manage our relationship with you if you become a client, including contracts and invoicing
To send you relevant updates or offers, where you’ve given us consent to do so
To improve our website and marketing based on aggregated, anonymised trends
To comply with our legal and accounting obligations

4. Our legal basis for processing

Under the GDPR, we rely on the following legal bases:

Consent — when you submit our contact form or subscribe to updates, you consent to us using your data to respond to you and, where opted in, to send marketing communications
Contract — once you book with us, we process your data to fulfil our services
Legitimate interest — for basic analytics and fraud/spam prevention on our forms
Legal obligation — for invoicing, tax, and accounting records

You may withdraw consent at any time — see Section 8, 'Your rights'.

5. Who we share your data with

We use a small number of trusted service providers to run our business. These providers process personal data on our behalf and are bound by data processing agreements:

HubSpot — our CRM, form, and email platform (data may be processed in the EU/US under standard contractual clauses)
Meta (Instagram/Facebook) — for advertising and audience insights
Google — for website analytics and, where applicable, search advertising
WhatsApp Business — for direct communication, subject to WhatsApp’s own privacy terms

We do not sell your personal data to third parties.

6. International data transfers

Some of our service providers (including HubSpot and Meta) may process data outside the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or an equivalent adequacy mechanism recognised under GDPR.

7. How long we keep your data

Enquiries that don’t become bookings: kept for up to 24 months, then deleted or anonymised
Booked clients: kept for the duration of our contract, plus the period required by Spanish tax and accounting law (generally 6 years)
Marketing consent: kept until you unsubscribe or withdraw consent

8. Your rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data ('right to be forgotten'), where applicable
Restrict or object to certain processing, including direct marketing
Port your data to another provider in a structured format
Withdraw consent at any time, without affecting past processing
Complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es, or your local supervisory authority

To exercise any of these rights, contact us at info@sinfinfilms.com. We’ll respond within one month, as required by law.

9. Cookies

Our website uses cookies to remember your preferences, understand how visitors use our site, and measure the performance of our advertising. You can manage or withdraw cookie consent at any time via the cookie banner on our site, or through your browser settings. [Link to a separate Cookie Policy, if you publish one.]

10. How we protect your data

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including secure hosting, access controls, and working only with reputable service providers who meet GDPR-level security standards.

11. Children’s privacy

Our services are intended for adults planning a wedding. We do not knowingly collect personal data from anyone under the age of 18.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The 'Last updated' date at the top of this page will always reflect the most recent version.

13. Contact us

If you have any questions about this policy or how we handle your data, reach out any time:

Email: info@sinfinfilms.com
WhatsApp: +34 664 540 763
Website: www.sinfinfilms.com