Data controller
- Owner: Xavier Roma
- Trading name: XR Fotografía
- Spanish tax ID: 46462249H
- Business address: Carrer Vallerona, 58 · 08950 Esplugues de Llobregat (Barcelona), Spain
- Email: contacto@xrfotografia.com
- Telephone: +34 633 304 169
Data we may receive
This website does not use its own contact form. If you contact us by email or WhatsApp, we may receive your name, contact details, enquiry and any information you choose to share about a session, event or project.
If you book a service, we also process the information needed to organise it, deliver the work, manage payments and meet accounting and tax obligations. We do not request special categories of personal data; please do not send them unless essential.
Purposes and legal bases
Answering enquiries and preparing quotes: steps requested before entering into a contract. Managing sessions, delivery and follow-up: performance of the contract. Invoicing and administrative obligations: compliance with legal duties.
Publishing identifiable photographs in the portfolio or communications: specific consent or another legal basis documented for the project, as appropriate. Protecting the website and preventing misuse: our legitimate interest in keeping the service secure.
Retention
We keep information for as long as needed to handle the enquiry or provide the service, then for any periods required by applicable tax, accounting or liability rules. Data processed solely on consent will be deleted when that consent is withdrawn, unless another legal basis requires its retention.
Recipients and external services
We do not sell personal data. The website is hosted by Hostinger, which may process necessary technical data as our hosting provider and processor, under the contract and data-processing addendum applicable to the XR Fotografía account. Other providers needed for email, messaging, administration or photo galleries may also access data subject to their data-protection obligations.
If you choose WhatsApp, Instagram or an external gallery, that platform also processes your information under its own policy. Some providers may process data outside the European Economic Area using the safeguards required by law. We also disclose data when required by a competent authority.
Your rights
You may request access, correction, erasure, restriction or portability of your data, object to processing, and withdraw consent without affecting the lawfulness of earlier processing. Email contacto@xrfotografia.com stating the right you wish to exercise. We may request reasonable information to verify your identity.
If you believe your data has been handled incorrectly, you may complain to the Spanish Data Protection Agency (aepd.es).
Photographs, children and third-party data
Before publishing or commercially using an image in which a person can be identified, the appropriate authorisation will be agreed. For children, this must be given by their legal representative. Anyone providing another person’s data or photographs declares that they are entitled to do so and have informed that person where necessary.
Security and updates
We apply reasonable measures to prevent loss, alteration or unauthorised access to information. This policy will be updated if our contact channels, providers or processing activities change.
Optional analytics
Only with your consent does Google Analytics 4 process technical and browsing information to understand website use. You can withdraw consent in Cookie preferences. We do not send names, email addresses or messages to Analytics, and the billing area is excluded.