Privacy Policy – Masha Films

Last updated: 14.11.2025

This Privacy Policy describes how Masha Films (“I”, “me”, “my”), based in Spain, collects and processes personal data when you visit mashafilms.com (“the Website”). I comply with the General Data Protection Regulation (GDPR) and Spain’s LOPDGDD (Ley Orgánica 3/2018).

1. Data Controller

Masha Films
Address: Carrer Historiador Joan Mari Cardona 7, 07800 Ibiza (Balearic Islands), Spain
Email: info@mashafilms.com

2. Personal Data I Collect

a. Data you provide directly

  • Name
  • Email address
  • Messages you send through the contact form

b. Data collected automatically

  • IP address
  • Browser type and settings
  • Pages visited
  • Time spent on the Website
  • Device information
  • Cookies and tracking technologies

c. Data from third parties

  • Analytics services (Google Analytics)
  • Advertising platforms (Meta Ads, Google Ads)
  • Payment processor (SumUp) — see below

3. Payment Information

I do not collect or process payment information directly on this Website.
If you make a payment for my services, this is handled externally through SumUp, a third-party payment provider.

Any personal data you provide when making a payment (such as card details, billing information, transaction data) is processed directly by SumUp, in accordance with their own Privacy Policy and GDPR obligations.

SumUp acts as an independent data controller for the processing of payment information.

4. Purpose and Legal Basis of Processing

PurposeLegal Basis
Responding to messages sent through the contact formLegitimate interest / consent
Website analytics and performanceLegitimate interest
Advertising and remarketing (Meta Ads, Google Ads)Consent
Security and maintenance of the WebsiteLegitimate interest
Compliance with Spanish and EU lawLegal obligation
Processing service payments (SumUp)Contract, legitimate interest (via SumUp as controller)

5. How Long I Keep Your Data

  • Contact form messages: up to 12 months
  • Analytics data: according to Google Analytics retention settings
  • Cookie data: according to the cookie duration specified in the Cookie Policy
  • Payment-related data: stored by SumUp under their own legal retention obligations (e.g., tax compliance)

I only keep the minimum necessary personal data for the shortest time required.

6. Sharing Your Data

I may share personal data with the following service providers:

  • Website hosting provider
  • Google Analytics
  • Advertising platforms (Meta Ads, Google Ads)
  • Security and technical service providers
  • SumUp (independent processor for payments)

All third parties operate under GDPR-compliant conditions.
I do not sell personal data.

7. International Data Transfers

Some providers (such as Google and Meta) may process data outside the European Economic Area.
When this occurs, I rely on legal safeguards such as:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions issued by the European Commission

8. Your Rights

Under GDPR and LOPDGDD, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time
  • File a complaint with the Spanish Data Protection Authority (AEPD)

To exercise your rights, contact me at: [your contact email].

9. Cookies and Tracking Technologies

This Website uses cookies for:

  • Essential website functionality
  • Analytics (Google Analytics)
  • Advertising and remarketing (Meta Ads, Google Ads)

When you visit the Website, a cookie consent banner allows you to accept, refuse, or customise cookie settings.

For full details, see the Cookie Policy.

10. Children’s Privacy

This Website is not intended for individuals under 14 years old.
I do not knowingly collect personal data from minors.

11. Security Measures

I implement appropriate technical and organisational measures, including:

  • HTTPS encryption
  • Secure servers
  • Access controls
  • Regular monitoring

However, no method of online transmission is 100% secure.

12. Changes to This Policy

I may update this Privacy Policy from time to time.
Any updates will appear on this page with a new “Last updated” date.