At Breadandbutter we take your privacy seriously. This policy explains what personal data we process, why, on what legal basis, and what rights you have, in line with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and sending you information and a quote. | Your consent when submitting the form and pre-contractual measures taken at your request (art. 6.1.a and 6.1.b GDPR). |
| Providing the service you hire: contract, questionnaires, meetings, delivery of photos and videos, invoicing and payment. | Performance of a contract (art. 6.1.b GDPR). |
| Complying with tax and accounting obligations. | Legal obligation (art. 6.1.c GDPR). |
| Knowing whether you have received and opened our dossier or links, so we can help you in time. | Legitimate interest (art. 6.1.f GDPR). You can object by writing to us. |
| Preventing spam and protecting the website. | Legitimate interest (art. 6.1.f GDPR). |
| Website usage statistics. | Your consent through the cookie banner (art. 6.1.a GDPR). |
| Showing photos or videos of your wedding on our website, social media or portfolio. | Only with your express authorisation, which you may give or not in the contract and withdraw at any time (art. 6.1.a GDPR). |
We do not use your data for automated decisions or profiling. We do not send you advertising without your consent and we do not sell your data.
To work we use providers acting as data processors, with the contractual safeguards required by the GDPR:
Some of these providers may process data outside the European Economic Area (for example in the United States). They do so under the safeguards provided by the GDPR: standard contractual clauses and/or the EU-US Data Privacy Framework.
You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time, and withdraw any consent you gave us (without affecting what was done before), by writing to hola@breadbutterfilmmaker.com. To protect your data we may ask you to prove your identity. We will reply within one month.
If you believe we have not handled your data properly, you may complain to the Spanish Data Protection Agency (AEPD) (www.aepd.es).
We apply reasonable technical and organisational measures: encrypted connections, restricted and authenticated access to our systems, unique and unguessable links for dossiers, questionnaires, galleries and file transfers, and access limited to what is strictly necessary.
Our services and this website are not aimed at children under 14 and we do not knowingly collect their data. Where minors appear in photos or videos of an event, it is always within the service hired by their relatives.
We may update this policy to reflect legal or service changes. The current version is always the one published on this page, with its update date.