At Inquiet Studio we handle your personal data with care and only as far as necessary, in accordance with the EU General Data Protection Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD).
1. Data controller
- Controller: CHUPI, MORFI Y AMOR, S.L. (Inquiet Studio)
- Tax ID (NIF): B21852017
- Address: Ptge. Pau 7, P02 2, 08002 Barcelona, España
- Contact email: inquietbcn@gmail.com
2. What data we process
- When you contact us (contact form, email, phone or Instagram): your name, email or phone number and the event details you share (type of event, date, place, approximate number of guests and anything you add to your message).
- When you book a service: contact and billing details (name or company name, tax ID, address), event details and, where applicable, payment details.
- Allergies, intolerances and special diets: to prepare the menu safely we may need information about your or your guests' allergies or intolerances. This is health data, so we only process it with the explicit consent of the people concerned and solely to prepare that event. If you give it to us on behalf of your guests, you must have their permission. Whenever possible, send it without names (for example, "table 4: 1 coeliac").
- When you sign up for a workshop: name, contact details and number of places.
The form collects nothing you don't type yourself, and we do not use analytics or advertising cookies (see the cookie policy).
3. What we use it for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and preparing a quote | Pre-contractual steps taken at your request (art. 6.1.b GDPR) |
| Organising and providing the booked service (menu, logistics, coordination with the venue and other suppliers) | Performance of a contract (art. 6.1.b GDPR) |
| Adapting the menu to allergies, intolerances or diets | Explicit consent (art. 9.2.a GDPR) |
| Invoicing, accounting and tax obligations | Legal obligation (art. 6.1.c GDPR) |
| Managing workshop sign-ups | Performance of a contract (art. 6.1.b GDPR) |
| Showing photographs of events on the website and social media | Legitimate interest in showing our work (art. 6.1.f GDPR) for images of set-ups and dishes without identifiable people; consent where recognisable people appear |
We do not make automated decisions or build profiles with your data.
4. How long we keep it
- Enquiries and quotes that are not booked: up to 1 year from the last contact, in case you pick up the conversation again.
- Clients: for as long as the relationship lasts and afterwards for the legal retention periods (6 years for accounting and commercial records under the Spanish Commercial Code, 4 years for tax records).
- Allergies and intolerances: only until the event takes place; then they are deleted.
5. Who we share it with
We do not sell or pass on your data to third parties, except where required by law (for example, to the Spanish Tax Agency). To operate, we rely on providers who may access data on our behalf as data processors, under contract and with appropriate safeguards:
- Website hosting: Vercel Inc.
- Contact form delivery: Web3Forms, which forwards your message to us by email.
- Email and document storage: Google (Gmail / Google Workspace).
- Accountants: only when necessary to issue and manage invoices.
Some of these providers may be located outside the European Economic Area (for example, in the United States). In that case, transfers are made with the safeguards provided by the GDPR: an adequacy decision of the European Commission (EU-US Data Privacy Framework) or standard contractual clauses.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw your consent without affecting the lawfulness of prior processing. Write to us at inquietbcn@gmail.com stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you to prove it.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es). We would appreciate it if you wrote to us first so we can try to resolve it.
7. Minors
Our services are intended for adults. If you are under 14, please do not send us any data without the consent of your parents or guardians.
8. Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or misuse: the website uses an encrypted connection (HTTPS) and access to information is limited to the team members who need it.
9. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The date of the last update is shown on this page.
This is a translation for information purposes. In case of discrepancy, the Spanish version prevails.