Privacy policy
Last updated:
This policy explains what personal data we collect through www.contanimation.com, why we collect it, how long we keep it and what rights you have. It applies to visitors anywhere in the world, with specific sections for the European Union and for California.
1. Data controller
- Controller: Contanimation Films, S.L.
- Tax ID: B88797030
- Address: Calle del Comandante Fontanes 73, bajo A, 28019 Madrid, España
- Privacy contact: hello@contanimation.com
We have not appointed a Data Protection Officer, as we are not required to under Article 37 of the GDPR. Privacy enquiries go to the address above.
2. What we collect, why, and on what legal basis
We collect the minimum needed and we do not profile anyone. There is no advertising, no behavioural tracking and no sale of data.
| Data | Why | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Name, email, message and enquiry type sent through the contact form | To answer you and, where relevant, assess a professional collaboration | Your consent — Art. 6(1)(a) | 3 years from the last contact, then deleted |
| Email address given to subscribe to the newsletter | To send you news about our own work: new worlds, work in progress and material we do not publish elsewhere | Your consent — Art. 6(1)(a), given by ticking the box and confirming on Substack | Until you unsubscribe. The list is held by Substack, not on this site |
| Technical server logs (IP address, timestamp, user agent, URL requested) | Site security, abuse prevention and fault diagnosis | Legitimate interest — Art. 6(1)(f) | Up to 30 days, managed by our hosting provider |
Providing the data in the contact form is voluntary, but without it we cannot reply. Writing to us does not subscribe you to anything. The newsletter is a separate, explicit step: you only join it by ticking the box on the newsletter form, and we never add an address that reached us any other way.
The newsletter is about our own work, and nothing else. We do not sell, rent or share the list, we do not use it for third-party advertising, and we do not profile who opens what. You can leave at any time — every email carries an unsubscribe link, and you can also ask us at hello@contanimation.com. Leaving takes effect immediately and does not affect anything you sent us before.
The newsletter runs on Substack, and the button on this site takes you there. When you subscribe, your address is stored by Substack Inc. in the United States and not on this site: it is Substack that confirms your subscription, sends the emails and handles the unsubscribe link. Substack applies its own privacy policy to that data as well as ours. Writing to us at hello@contanimation.com also works — we forward the request — but going through the unsubscribe link is faster, because it acts on the list itself.
3. Who processes data on our behalf
We work with the providers below. Each acts as a processor under a data processing agreement, and none is authorised to use the data for its own purposes.
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website hosting | EE. UU. / UE |
| Resend | Transactional email | EE. UU. |
| Supabase | Contact form database | UE |
| Google Ireland Ltd. | Corporate email (Workspace) | UE / EE. UU. |
| Substack Inc. | Newsletter list and delivery | EE. UU. |
We do not sell, rent or share personal data with third parties for their own purposes.
4. International transfers
Some of these providers are based in the United States or process data there. Those transfers are covered by the EU Standard Contractual Clauses and, where the provider is certified, by the EU–US Data Privacy Framework, together with the additional technical measures each provider documents. You can request a copy of the safeguards in place by writing to hello@contanimation.com.
5. Your rights
You can exercise any of these rights free of charge by writing to hello@contanimation.com. We reply within one month, extendable by two more if the request is complex. We may ask you to confirm your identity before acting.
- Access — obtain confirmation of whether we process your data, and a copy.
- Rectification — correct data that is inaccurate or incomplete.
- Erasure — have your data deleted when it is no longer needed.
- Restriction — limit processing in the cases set out in the GDPR.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent at any time, without affecting processing already carried out.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the supervisory authority of your country of residence.
6. Notice for California residents (CCPA/CPRA)
In the twelve months before this policy's last update, we collected the following categories of personal information as defined by the CCPA: identifiers (name, email address, IP address) and internet activity information (server logs). They come directly from you or from your browser, and are used for the purposes described in section 2.
We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. Because there is no sale or sharing, there is no "Do Not Sell or Share My Personal Information" mechanism to offer — that is the outcome of not doing it, not an omission.
We do not collect sensitive personal information, and we do not knowingly collect data from minors under 16. California residents have the right to know, delete and correct their personal information, and to be free from discrimination for exercising those rights. To exercise them, write to hello@contanimation.com.
7. Security
The Site is served entirely over HTTPS with a strict transport security policy, a content security policy and headers against clickjacking and MIME sniffing. Contact form records are stored with row-level security enabled, writable only by the server. Credentials live in environment variables, never in the source code.
8. Minors
The Site is not aimed at people under 16. If you believe a minor has sent us personal data, write to hello@contanimation.com and we will delete it.
9. Changes to this policy
We may update this policy to reflect changes in the Site or in applicable law. The version in force is the one published here, with the last review date shown at the top. Substantial changes will be flagged clearly on this page.