Date of last update: 01/02/2026

1- DATA CONTROLLER

Data Controller: Noemí Bueno Peña

Trade name: NOEM Arquitectura

Tax Identification Number (NIF): 02905106E

COAM registration number: 14589

Registered address: Madrid, Spain

Contact email: legal@noem.es

Website: https://www.noem.es

For the purposes of this privacy policy, ‘user’ shall mean any natural person who browses the Website or uses the forms or contact channels available on it.

2 – PERSONAL DATA PROCESSED

Depending on the user’s use of the Website, the following categories of data may be processed:

Identifying data: first name and surname(s).
Contact details: email address, telephone number (if provided), city or other details included in the forms.
Browsing data: IP address, device identifiers, access logs, as well as information obtained through cookies and similar technologies, as set out in the Cookies Policy.

Special categories of personal data (ethnic origin, political opinions, religion, health, etc.) are not intentionally collected.

3- PURPOSES AND LEGAL BASES FOR PROCESSING

Personal data will be processed for the following purposes and on the following legal bases:

a) Handling enquiries and communications

Purpose: to respond to and manage enquiries, requests or communications that users submit via the contact forms or through the channels indicated on the Website.

Legal basis: the performance of pre-contractual or contractual measures (Article 6(1)(b) of the GDPR) and the data controller’s legitimate interest in responding to requests and maintaining the relationship with its professional contacts (Article 6(1)(f) of the GDPR).

b) Management of professional relationships and projects

Purpose: to maintain professional relationships with programmers, festivals, co-producers, collaborators and other industry stakeholders who make contact via the Website or through the published contact details.

Legal basis: performance of a contract or taking steps prior to entering into a contract (Article 6(1)(b) of the GDPR) and, where applicable, legitimate interest in managing such professional relationships (Article 6(1)(f) of the GDPR).

c) Analysis of website usage and improvement

Purpose: to obtain aggregated statistics on website traffic and usage in order to improve its content, usability and security.

Legal basis: consent (Article 6(1)(a) of the GDPR) where non-essential analytics cookies are used, and, where applicable, legitimate interest in improving the service based on appropriately anonymised or aggregated data (Article 6(1)(f) of the GDPR).

4- RETENTION PERIODS

In general, personal data will be retained:

Enquiries and communications: for as long as necessary to process them and, subsequently, for a maximum period of 1–2 years to address any potential liabilities.
Data relating to contractual or professional relationships: for the duration of the relationship and, following its termination, for the applicable statutory limitation periods.

Browsing data and cookies: in accordance with the time limits set out in the Cookies Policy and, in any event, until the user withdraws their consent or configures their browser to delete them.

Once the relevant time limits have elapsed, the data will be blocked and, where appropriate, duly erased or anonymised.

5 – RECIPIENTS AND DATA PROCESSORS

As a general rule, personal data will not be disclosed to third parties, except where required by law or where necessary for the provision of a service related to the activities of Producciones en Crudo.

Certain suppliers providing services to the data controller (for example, web hosting services, email tools, analytics services, technical support) may have access to the data, acting as data processors. Data processing agreements required by the GDPR have been entered into with all of them.

Should any tool or supplier be located outside the European Economic Area, appropriate safeguards will be put in place to ensure an equivalent level of protection (e.g. the European Commission’s standard contractual clauses, adequacy decisions, etc.).

6- RIGHTS OF DATA SUBJECTS

Users may, at any time, exercise the rights recognised by data protection legislation:

Right of access: to obtain confirmation as to whether their personal data is being processed and, if so, to access it.

Right to rectification: to request the correction of inaccurate or incomplete data.
Right to erasure: to request the deletion of their data when it is no longer necessary for the purposes for which it was collected or when there is another legitimate reason.
Right to object: to object to the processing of their data when this is based on a legitimate interest.

Right to restriction of processing: to request that the processing of your data be restricted in certain circumstances.
Right to data portability: to receive your data in a structured, commonly used and machine-readable format, and to transmit it to another data controller where legally applicable.

Right not to be subject to automated individual decision-making, including profiling, in the cases provided for by the regulations.

To exercise these rights, the data subject may send a written request, specifying the right they wish to exercise, together with a copy of a document proving their identity, to:

Email: legal@noem.es

Postal address: Noemí Bueno Peña, Madrid, Spain

Furthermore, the data subject has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that their right to data protection has been infringed.

7- DATA SECURITY

NOEM Arquitectura implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the nature, scope, context and purposes of the processing, and the risks to the rights and freedoms of individuals.

However, absolute security in information systems cannot be guaranteed, and the Data Controller cannot be held liable for the actions of third parties who circumvent these measures by unlawful means.

8- CHANGES TO THE PRIVACY POLICY

This Privacy Policy may be updated where necessary to bring it into line with new legislation, case law or changes in the processing of personal data. In the event of significant changes, users will be informed via the Website or by other appropriate means.