Privacy Policy

This Privacy Policy is provided by us, Roca Studio (also referred to as "we," "our," or "us"), to explain our practices regarding the collection, use, and disclosure of information gathered from you through our various platforms. This encompasses: (i) the Roca Studio website and its subdomains; (ii) any associated websites where Roca Studio's Terms of Service are posted; (iii) our online hosted Client Projects services; and (iv) Roca Studio’s Client Portal, which includes our task management dashboard, tools, and documentation. Collectively, these are known as 'Roca Studio' or our 'Service'.

Data Types Collected

Roca Studio collects various types of Personal Data, either directly or through third parties, including email addresses; Trackers; Usage Data; Universally unique identifiers (UUID); Data communicated during service use; first names; company names; last names; billing addresses; payment information.

Full details on each type of Personal Data collected are provided in specific sections of this privacy policy or through explanatory texts displayed before Data collection.

Personal Data may be given by the User voluntarily, or, in the case of Usage Data, collected automatically when using Roca Studio.

Unless stated otherwise, all Data requested by Roca Studio is compulsory, and not providing this Data may hinder Roca Studio from providing its services. If some Data is optional, Users can choose not to provide this Data without impacting the Service's availability or functionality.

Users unsure about which Personal Data is mandatory can contact the Owner.

Cookies and other tracking tools may be used by Roca Studio or third-party service providers to deliver the required Service, in addition to other purposes outlined in this document and the Cookie Policy, if available.

Users are responsible for any third-party Personal Data shared through Roca Studio and must have consent from the third party to provide the Data to the Owner.

Data Processing Methods and Locations

Processing Techniques

The Owner adopts suitable security measures to prevent unauthorized access, disclosure, alteration, or destruction of the Data.

Data processing is conducted using computers and IT-enabled tools, adhering to organizational procedures closely related to the indicated purposes. In addition to the Owner, some cases involve access to Data by certain types of personnel (e.g., administration, sales, marketing, legal, system administration) or external parties (like third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed as Data Processors by the Owner. A current list of these parties can be requested from the Owner at any time.

Legal Grounds for Processing

The Owner processes Personal Data relating to Users if:

Users have consented for specific purposes, and it should be noted that under certain legislations, the Owner may process Personal Data until the User opts out, without the need for consent or reliance on any other legal bases, though this is not applicable under European data protection law. Data provision by Users is essential for the performance of a contract or for fulfilling pre-contractual obligations; processing is also necessary for legal compliance by the Owner, for tasks carried out in the public interest or under official authority, and for the legitimate interests pursued by the Owner or a third party. The Owner is available to clarify the specific legal basis for processing, and to inform whether providing Personal Data is a statutory or contractual requirement, or a necessity to enter into a contract.

Location

Data is processed at the Owner's offices and other locations where processing parties are situated.

Depending on the User's location, data transfers may involve moving the User's Data to a different country. More information on Data processing locations and legal basis for transfers outside the European Union or to international organizations can be found in the relevant sections of this document.

If such a transfer occurs, Users can learn more by checking the specified sections or contacting the Owner.

Retention Period

Personal Data is processed and stored as long as required for its collection purpose.

Hence:

Data collected for the purpose of fulfilling a contract between the Owner and the User is retained until the contract is fully executed. Additionally, Data collected for the Owner's legitimate interests is maintained as long as necessary to fulfill those interests. Users can access specific information about these interests either within this document or by reaching out to the Owner directly. Furthermore, the Owner may retain Data for an extended period if the User has given consent to such processing, provided that this consent is not subsequently withdrawn, or if retention is mandated by legal obligations or orders from authorities.

Once the retention period expires, Personal Data is deleted, ending the rights of access, erasure, rectification, and data portability.

Processing Purposes

User Data is collected to enable the Owner to provide its Service, comply with legal obligations, respond to enforcement requests, protect its rights and interests (or those of Users or third parties), detect malicious or fraudulent activity, and for purposes like: Platform services and hosting, User database management, Payment handling, Analytics, Contact management and messaging, Tag Management, Traffic optimization and distribution, and Remarketing and behavioral targeting.

For detailed information on the Personal Data used for each purpose, Users may refer to the section “Processing Details”.

Processing Details

Personal Data is processed for purposes including:

Analytics, Payment Handling, Contact Management and Messaging, Platform Services and Hosting, Remarketing and Behavioral Targeting, Tag Management, Traffic Optimization and Distribution, and User Database Management. Additionally, Users have the option to opt out of Interest-Based Advertising. Beyond the opt-out features offered by the services mentioned in this document, Users can find more information on how to opt out of interest-based advertising in the Cookie Policy section.

User Rights

Users have rights regarding their Data processed by the Owner, including:

Users have several rights regarding their data, including withdrawing consent at any time, objecting to data processing under certain legal bases, accessing their data, verifying and requesting rectification of their data, restricting data processing, having their data deleted or removed, and receiving their data in a format suitable for transfer to another controller. Additionally, users have the right to lodge complaints with the appropriate data protection authority.

Right to Object to Processing

Users may object to processing if it's for public interest, official authority, or the Owner's legitimate interests, by providing relevant grounds. Users can always object to direct marketing processing without justification.

Exercising User Rights

Requests to exercise User rights can be directed to the Owner through provided contact details. These requests are free and addressed as soon as possible, within one month.

Cookie Policy

Roca Studio uses Trackers. For more details, consult the Cookie Policy.

Additional Data Collection and Processing Information

Legal Action

User Personal Data may be used for legal purposes by the Owner in court or pre-legal action stages due to improper use of Roca Studio or related Services.

Users should know that the Owner might have to disclose Personal Data upon public authorities' request.

Additional User Personal Data Information

Roca Studio can provide extra information about specific Services or Data collection and processing upon request.

System Logs and Maintenance

For operational and maintenance purposes, Roca Studio and third-party services may collect files recording interactions with Roca Studio (System logs) or use other Personal Data (like IP Addresses).

Information Beyond This Policy

More details about Personal Data collection or processing can be requested from the Owner.

Handling "Do Not Track" Requests

Roca Studio does not support “Do Not Track” requests.

To learn if third-party services honor “Do Not Track” requests, read their privacy policies.

Privacy Policy Changes

The Owner may change this privacy policy, notifying Users on this page and possibly within Roca Studio or through User contact information. Regular page checks are advised.

Changes affecting consent-based processing activities will prompt new User consent collection.