Privacy policy

Last updated: 28 September 2026

This is an English translation for convenience. The Spanish version (Política de privacidad) prevails in case of discrepancy.

This policy explains how the personal data of people who visit marinomaza.com or get in touch by email is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

1. Data controller

  • Controller: Andrés Mariño Maza (self-employed professional, MarinoMaza Studio)
  • Tax ID (NIF): 51120597S
  • Address: Calle Ramonet 7, 28033 Madrid, Spain
  • Contact and data protection email: andres@marinomaza.com

2. Data we process

  • Data you send us by email or through the enquiry form: name, email address, phone number if you include it, and the content of your message (for example an enquiry or a quote request). This site does not offer user accounts or online sales.
  • Browsing data for analytics, only if you accept it in the cookie notice: Google Analytics cookie identifiers, pages visited, visit duration, device and browser type, and approximate location.
  • Technical data: when you visit the site, the hosting server automatically logs data such as your IP address, date and time and the pages requested, for security and operation. The site’s typefaces are served from our own server, with no connection to Google Fonts.

3. Purposes and legal bases

  • Answering your enquiries and quote requests and, where applicable, handling a commission: legal basis, steps taken at your request prior to entering into a contract and performance of the contract (art. 6.1.b GDPR), and our legitimate interest in answering the enquiries we receive (art. 6.1.f GDPR).
  • Web analytics (usage statistics to improve the site) with Google Analytics 4: legal basis, your consent (art. 6.1.a GDPR), which you can withdraw at any time via the “Cookie settings” link in the footer.
  • Security and technical operation of the site (server logs, loading typefaces): legal basis, our legitimate interest in keeping the site secure and working (art. 6.1.f GDPR).
  • Compliance with legal obligations (for example tax and accounting if a commission is invoiced): art. 6.1.c GDPR.

No automated decisions or profiling with legal effects are carried out, and data is never sold.

Enquiry form

When you use the enquiry form, we collect your name, email address, the piece you are interested in and your message, and, if you choose to give them, your phone or WhatsApp number and city or country. We use these details only to reply to your enquiry and, if you go ahead, to prepare a quote. The legal basis is your consent, given with the checkbox on the form (art. 6.1.a GDPR); you can withdraw it at any time by writing to andres@marinomaza.com. The enquiry is stored in this website’s database (through the Flamingo plugin) and sent by email to our studio inbox, and you receive an automatic confirmation email. If spam filtering with Akismet (Automattic) is enabled, the form data is checked by that service. We keep enquiries for as long as needed to handle them and for no more than two years afterwards, unless they lead to a commission, in which case the retention periods for customers apply. You can exercise your rights of access, rectification, erasure, objection, restriction and portability as described in section 6.

4. Retention

  • Emails and enquiries: as long as needed to handle them and, if no business relationship follows, for a maximum of 2 years. If a commission goes ahead, data is kept for the duration of the relationship and then for the periods required by law (for example 6 years for accounting records under the Spanish Commercial Code and 4 years for tax purposes).
  • Analytics data: kept in Google Analytics for a maximum of 14 months. Analytics cookies expire after 2 years at most (see the Cookie policy).
  • Technical server logs: for the period set by the hosting provider for security purposes.

5. Recipients and processors

We do not share your data with third parties unless required by law. Some providers access data as processors to deliver the service:

  • Hostinger International Ltd. (Cyprus, EU): website hosting.
  • Titan Email: email service provider for the marinomaza.com domain, which stores the messages you send us.
  • Google Ireland Limited (Ireland, EU): Google Analytics 4, only with your consent. Google may transfer data to Google LLC in the United States. These international transfers are covered by the EU-US Data Privacy Framework, under which Google LLC is certified, and by the European Commission’s standard contractual clauses.
  • If you choose to play a video or enable external content, YouTube (Google) and Pinterest will receive browsing data under their own privacy policies.

Where a provider processes data outside the European Economic Area, this is done with appropriate safeguards under the GDPR (European Commission adequacy decisions, such as the EU-US Data Privacy Framework, or standard contractual clauses).

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent given at any time (without affecting the lawfulness of prior processing), by writing to andres@marinomaza.com and stating the right you wish to exercise. If needed to verify your identity, we may ask for additional information.

If you believe the processing does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos (C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).

7. Children

This site is not aimed at children under 14 and does not knowingly collect their data.

8. Security

We apply reasonable technical and organisational measures to protect your data, such as an encrypted (HTTPS) connection to the website.

9. Changes to this policy

This policy may be updated to reflect legal changes or changes in how the site works. The date of the last update is shown at the top.

Pin it on Pinterest