En privacy policy
Ultima actualizacion: septiembre 19, 2026
Last updated: 19 September 2026
This policy explains what personal data we process when you visit kaotikastudio.es or contact us, why we process it and what rights you have.
Data controller
| Controller | Javier Díaz de Luna |
|---|---|
| Tax ID | 30222707V |
| Address | C/ Profesor Manuel Olivencia Ruiz, 9, bloque 5, 1.º A, Seville, Spain |
| info@javierdiazdeluna.es |
What we process and why
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Free test form | Name, brand, email, website or Instagram, product type | To answer your request and prepare and send the test images | Consent and pre-contractual measures (Art. 6(1)(a) and 6(1)(b) GDPR) | One year from the last contact, unless you become a client |
| Emails and messages | Whatever you include in your message | To answer your enquiry | Consent (Art. 6(1)(a)) | One year from the last contact |
| Product photographs you send | Product images and any metadata | To generate the images you asked for | Performance of the engagement (Art. 6(1)(b)) | Deleted after 90 days if no service is contracted |
| Clients | Identification and billing data | To deliver the service and meet tax obligations | Contract and legal obligation (Art. 6(1)(b) and 6(1)(c)) | Six years, under Spanish commercial and tax law |
Use of artificial intelligence
We use third-party AI tools to generate the images. The photographs you send are processed in those tools for the sole purpose of producing your work. We do not hand over your images or your data for third-party model training, and we choose providers that allow that use to be switched off.
We do not make automated decisions with legal effects concerning you, and we do not carry out profiling.
Recipients
Your data is hosted with Raiola Networks S.L. (Spain) and handled through our email provider. Our AI image providers and our accountants may also access it where necessary, always under a data processing agreement.
Some AI providers are located outside the European Economic Area. Those transfers rely on the European Commission’s standard contractual clauses or on adequacy decisions.
We never sell or share your data with third parties for commercial purposes.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to info@javierdiazdeluna.es stating which right you wish to exercise.
If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Security
The site runs over an encrypted connection (HTTPS) and we apply reasonable technical and organisational measures to protect your information.
Minors
This site is aimed at professionals and companies. We do not knowingly collect data from children under 14.
Changes to this policy
We may update this policy if our services or the applicable rules change. The date of the last update appears at the top of the page.
← Volver a la portada