Privacy policy

1. Data controller

Aullando Studio. Contact: lab@aullando.studio. Site: https://aullando.studio.

2. Data we collect

Data you provide via the contact form (name, email, optional company/website, message) and, if you subscribe to the Aullando Journal, your email address. We may also store the submission timestamp and basic browser metadata (user-agent) for abuse prevention.

3. Purpose & legal basis

Contact form: reply to your enquiry. Legal basis: your explicit consent (GDPR checkbox) and pre-contractual measures requested by you.

Newsletter: deliver our editorial digest. Legal basis: consent via double opt-in. You can unsubscribe at any time from the link at the bottom of any email.

4. Retention

Enquiries are kept for the duration of the relationship and afterwards for the legally applicable period (up to 5 years). Newsletter data is kept until you unsubscribe.

5. Recipients

Data is stored on our cloud infrastructure (Supabase Inc., under EU Standard Contractual Clauses). Email delivery may use providers such as Resend. No data is shared with third parties except where legally required.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to lab@aullando.studio. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

7. Security

We apply appropriate technical and organisational measures: TLS in transit, access control, audit logs and backups.

8. Changes

We may update this policy. The latest revision date will always appear at the top.