Data protection
Privacy Policy
This policy explains what personal data Milestone Media S.L. collects through www.milestonesocial.com, why we collect it, and what rights you have. It is written to meet Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).
Who is responsible for your data
Milestone Media S.L. — CIF B75418301
Bulevar Príncipe Alfonso de Hohenlohe 2, 29602 Marbella, Málaga, Spain
Email: contact@milestonesocial.com
What we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name, email, message content and anything else you send us when enquiring | To answer your enquiry and prepare a quote | Steps taken at your request prior to entering a contract (Art. 6.1.b) | Up to 2 years after our last contact |
| Client and billing details | To deliver the work, invoice, and meet accounting and tax obligations | Performance of a contract (Art. 6.1.b) and legal obligation (Art. 6.1.c) | 6 years, per Spanish commercial and tax law |
| Email address, if you subscribe | To send you occasional updates about our work | Your consent (Art. 6.1.a) | Until you unsubscribe |
| Device, browser and usage data from analytics cookies | To understand how the site is used and improve it | Your consent (Art. 6.1.a) | See our Cookie Policy |
Strictly necessary cookies are used on the basis of our legitimate interest in running a secure, functioning website (Art. 6.1.f).
Filming, photography and client work
Our work involves recording people and property. Where we film identifiable individuals on a client's behalf, the client is normally the data controller for that footage and we act as processor under a written agreement. Where we film for our own portfolio, we obtain a release from the people concerned. If you appear in material we hold and want it removed, write to us and we will act on it.
Who we share data with
We do not sell your personal data. We share it only with service providers who help us run the business, each bound by a data processing agreement:
- Squarespace Ireland Ltd — website hosting, forms and analytics
- Google Ireland Ltd — email, cloud storage and, where enabled, analytics
- Our accountant and, where legally required, the Spanish tax authority
- Payment providers, for invoicing and settlement
Some providers may process data outside the European Economic Area. Where that happens, the transfer is covered by an adequacy decision or by the European Commission's Standard Contractual Clauses.
Your rights
You can ask us at any time to give you access to your data, correct it, delete it, restrict how we use it, port it to another provider, or object to our processing it. Where processing rests on consent, you can withdraw that consent at any time without affecting what was done before.
Write to contact@milestonesocial.com. We will respond within one month. If you are not satisfied, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at aepd.es.
Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. No system is perfectly secure, but we take this seriously and review it.
Children
This site is not directed at children under 14 and we do not knowingly collect their data. If a minor appears in footage we hold, we require verifiable consent from a parent or guardian.
Changes
If we change this policy we will update this page and change the date below. Material changes will be flagged on the site.