Privacy & Cookie Policy
Version 3.0 | Effective Date: 13/08/2026
1. Data Controller
Bodhi Production SL is the data controller responsible for your personal data.
Company: Bodhi Production SL
Tax ID (NIF/CIF): B22760565
Address: Avenida de Moya 6, 35100 Maspalomas, Gran Canaria, Spain
Email: privacy@bodhiproduction.es
2. Data We Collect
When you use our contact form or communicate with us, we may collect the following data:
- Name
- Email address
- Phone number
- Message content and subject
- Technical data (IP address, browser type, device information)
3. Purpose of Processing
We process your personal data for the following purposes:
- Responding to your inquiries and contact requests
- Providing our services (web development, app development, film production, online courses)
- Improving our website and user experience
- Complying with legal obligations
4. Legal Basis
We process your data based on:
- Your consent (Article 6(1)(a) GDPR) when you submit our contact form
- Legitimate interest (Article 6(1)(f) GDPR) for website analytics and improvement
- Contractual necessity (Article 6(1)(b) GDPR) when providing our services
We comply with the General Data Protection Regulation (EU Regulation 2016/679), the ePrivacy Directive 2002/58/EC, and Organic Law 3/2018 (LOPDGDD, Spain).
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Contact form data is retained for a maximum of 24 months.
6. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict processing
- Data portability
- Object to processing
To exercise any of these rights, please contact us at privacy@bodhiproduction.es.
7. Cookies
This site uses only strictly-necessary cookies, and audience measurement is performed with Matomo, self-hosted and cookieless; no consent banner is required. Full details are in our Cookie Policy.
8. International Transfers
Some of our service providers may be located outside the EU/EEA. These transfers are protected by:
- Standard Contractual Clauses approved by the European Commission
- The EU-US Data Privacy Framework, where the provider is certified
- Adequacy decisions from the Commission (where applicable)
You have the right to request more information about these safeguards.
9. Sub-processors
We rely on carefully selected service providers (sub-processors) to operate this website and run our business, each bound by a data-processing agreement. The table below lists our current sub-processors, their purpose, location and the safeguard applied to any transfer outside the EU/EEA.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Hostinger International Ltd | Hosting, storage, backups | Germany (EU) | Within EU/EEA |
| Matomo (self-hosted by Bodhi Production SL) | Cookieless analytics | EU (self-hosted) | No transfer |
| Better Stack, Inc. | Log dashboards for self-hosted logs | EU region | Data stored in EU region |
| Cloudflare, Inc. | Reverse proxy, WAF, CDN, DNS | EU PoPs; global network (USA) | EU SCCs + EU-US DPF |
| Resend, Inc. | Contact-form email delivery | USA | EU SCCs + EU-US DPF |
| Stripe | Payments | Ireland (EU), onward USA | SCCs + EU-US DPF |
| Mailchimp (Intuit) | Newsletter | USA | SCCs + EU-US DPF |
| Microsoft 365 | Business email and documents | EU Data Boundary | SCCs + EU-US DPF |
| Asana, Inc. | Internal project management | USA | SCCs + EU-US DPF |
| YouTube / Vimeo | Video distribution | USA/EU | Platform terms / SCCs |
10. Changes to This Policy
We reserve the right to modify this privacy and cookie policy at any time. Changes take effect upon publication on the site. Your continued use of the site after modifications constitutes your acceptance of the changes.
11. Contact Us
For any questions about this policy or to exercise your rights:
Email: privacy@bodhiproduction.es
Address: Avenida de Moya 6, 35100 Maspalomas, Gran Canaria, Spain
Entity: Bodhi Production SL
