Privacy Policy

The controller is to be completed, an individual with tax ID (NIF) to be completed, trading as Roke Studio from Girona. Address for legal purposes: to be completed.

For any privacy question, email us at contact@roke.studio. We have not appointed a data protection officer.

• “Tell us about your project” form: project type, goal, approximate budget, timeline, the description you write, name, company and email and, if you provide them, your website and phone number. We also keep the language you submit the request in.
• Emails you send to contact@roke.studio: your address and the content of the message.
• Technical data from your visit: when the website loads, our hosting provider and the service that delivers our images receive your IP address and browser details. The website also uses your IP address, temporarily, to limit form submissions and prevent abuse.
• Cookies: only one technical cookie, unless you accept analytics once it is active. See our Cookie Policy.

The form is meant for talking about your project: please don’t include sensitive data or other people’s data that isn’t needed.

• Replying to your request or question.
• Preparing a proposal or quote if you ask us to.
• Protecting the website and the form against abuse.
• Measuring how the website is used with analytics, only if you accept it and once it is active.

We do not use your data to send you newsletters, advertising or later marketing communications. We do not make automated decisions or build profiles.

• Requests and quotes: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Email enquiries not related to a project: our legitimate interest in replying to you (Art. 6(1)(f) GDPR).
• Website and form security: our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
• Analytics: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We do not sell your data or share it with third parties for their own purposes. To run the website and our email, the following technology providers are involved:

• Vercel: website hosting and running the form. It logs technical request data.
• Resend: sending the emails generated by the form (the notification we receive and the confirmation you get).
• Google (Google Workspace): our email, where we receive and keep requests and messages.
• Cloudinary: delivering the website’s images and videos. It receives technical data from your browser when they load.
• Google Analytics: only once it is active and if you accept it.

We may also disclose data to the authorities when required by law.

Some of these providers are based in the United States or may process data outside the European Economic Area. We are confirming, for each of them, where the data is processed and which safeguards apply. We will complete this section with that information.

We keep requests and emails for as long as needed to reply to you and, if we work together, for the duration of the business relationship. After that, only for the periods required by law.

We are setting the specific period for requests that do not become a project and for the hosting provider’s technical logs. We will state them in this section.

You can ask us to access, correct or delete your data, object to or restrict its processing, or request data portability. Where processing is based on your consent, you can withdraw it at any time.

Email us at contact@roke.studio saying which right you want to exercise. If we have reasonable doubts about your identity, we may ask you for additional information. We will reply within one month, which may be extended in the cases provided for in the GDPR.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).

If we change how we process data, we will update this page and its review date.