Privacy Policy

Last updated: 13 July 2026

At Extremadura Film Service, your privacy is important. This Privacy Policy explains how personal data is collected, used and protected when you visit www.extremadurafilmservice.com or contact us regarding our services.

This policy has been prepared in accordance with the General Data Protection Regulation, Spanish data-protection legislation and the applicable rules governing online services.

1. Data Controller

The person responsible for processing your personal data is:

Edyta Niewinska Niewinska
Trading as: Extremadura Film Service
Tax identification number: 11133079K
Professional address: Mira al Rio 11, esc2, 1A, 10003 Caceres
Email: edniewinska @ gmail.com
Website: www.extremadurafilmservice.com

2. Personal Data We Collect

We may collect personal data when you:

  • contact us by email;

  • complete a contact or enquiry form;

  • request information about locations, crew, casting or production services;

  • ask for a quotation;

  • enter into a professional or contractual relationship with us.

The information collected may include:

  • your name;

  • company or production-company name;

  • email address;

  • telephone number;

  • professional role;

  • information about your production or project;

  • any other information you voluntarily provide.

Please do not send confidential scripts, sensitive personal information or personal data relating to third parties unless it is necessary and you are authorised to share it.

3. How We Use Your Data

Your personal data may be used to:

  • respond to enquiries;

  • assess production requirements;

  • prepare quotations or service proposals;

  • coordinate locations, crew, actors, extras, transport, accommodation and other production services;

  • communicate with you regarding a current or potential production;

  • manage contracts, invoices and administrative obligations;

  • comply with legal, tax and accounting requirements;

  • establish, exercise or defend legal claims where necessary.

Your information will not be used for unrelated purposes.

4. Legal Basis for Processing

Depending on the circumstances, your data is processed on one or more of the following legal grounds:

  • your consent when you contact us voluntarily;

  • taking steps at your request before entering into a contract;

  • performance of a contract;

  • compliance with legal obligations;

  • our legitimate interest in managing professional enquiries, maintaining business communications and protecting our legal interests.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.

The GDPR requires users to be informed of matters including the controller’s identity, the purposes and legal basis of processing, retention periods, recipients and their rights.

5. Data Retention

Personal data submitted through an enquiry will be retained only for as long as necessary to respond and manage the potential professional relationship.

Where services are contracted, relevant information may be retained for the duration of the relationship and afterwards for the periods required under applicable tax, accounting and legal rules.

Information may also be retained for as long as necessary to deal with possible legal claims.

6. Sharing Your Data

Your personal data will not be sold or rented.

It may be shared only when necessary with:

  • professional advisers, accountants or legal advisers;

  • website hosting, email, cloud-storage or technical-service providers;

  • local production partners or suppliers involved in preparing or delivering requested services;

  • public authorities where disclosure is legally required.

When information about a production must be shared with a local supplier, crew member, accommodation provider, transport company, municipality or location representative, only the information reasonably necessary for that purpose will be provided.

Service providers processing data on our behalf must apply appropriate confidentiality and data-protection safeguards.

7. International Data Transfers

Some technical providers, including website hosting, cloud, email, analytics or embedded-content providers, may process information outside the European Economic Area.

Where an international transfer takes place, appropriate safeguards will be used as required by applicable data-protection law, such as an adequacy decision or approved contractual clauses.

The exact providers used by this website should be identified once the hosting platform, contact-form system, analytics tools and embedded services have been confirmed.

8. Your Rights

You may exercise the following rights regarding your personal data:

  • access your data;

  • correct inaccurate or incomplete data;

  • request deletion of your data;

  • request restriction of processing;

  • object to certain processing;

  • request data portability where applicable;

  • withdraw consent at any time;

  • lodge a complaint with a data-protection authority.

To exercise your rights, contact:

[professional email address]

Please write “Data Protection Request” in the subject line and identify the right you wish to exercise. We may request reasonable proof of identity where necessary to protect your information.

You may also lodge a complaint with the Spanish Data Protection Agency — Agencia Española de Protección de Datos, AEPD. The AEPD recommends presenting privacy information in a clear and accessible form, potentially using a layered approach.

9. Contact Forms

Where the website includes a contact form, the form should contain a short privacy notice and a link to this Privacy Policy.

A suitable notice is:

Data controller: Edyta Niewińska, trading as Extremadura Film Service.
Purpose: To respond to your enquiry and assess your production requirements.
Legal basis: Your consent and, where applicable, steps taken before entering into a contract.
Rights: You may access, correct or delete your data and exercise your other data-protection rights by contacting [email address].
Further information is available in our Privacy Policy.

The form should also include an unticked checkbox:

I have read and accept the Privacy Policy.

10. Cookies and Technical Data

The website may process limited technical information such as:

  • IP address;

  • browser and device type;

  • date and time of access;

  • pages visited;

  • basic security and server-log information.

Strictly necessary cookies may be used to ensure the website operates securely and correctly.

Analytics, advertising, social-media or other non-essential cookies must not be installed before the user has been properly informed and, where required, has given consent. A separate Cookie Policy and cookie-consent banner may therefore be necessary, depending on the tools installed on the website. The AEPD provides specific guidance concerning consent and the use of cookies.

11. Third-Party Links and Embedded Content

This website may contain links to third-party websites or embedded content, such as maps, videos, social-media posts or external booking and contact tools.

Those third parties operate under their own privacy and cookie policies. Extremadura Film Service is not responsible for how independent third-party websites process personal data.

12. Data Security

Reasonable technical and organisational measures are used to protect personal data against:

  • unauthorised access;

  • accidental loss;

  • alteration;

  • disclosure;

  • destruction.

However, no online communication or storage system can guarantee absolute security.

13. Children’s Data

The website and its services are intended for film, television, advertising, photography and audiovisual professionals.

We do not knowingly collect personal data directly from children through the website. Where a production involves minors, their data must be handled through their parents, legal guardians, authorised representatives or the relevant production company, in accordance with applicable law.

14. Changes to This Policy

This Privacy Policy may be updated when:

  • the services offered change;

  • new website tools are introduced;

  • legal requirements change;

  • new technical providers are used.

The latest version will always be published on this page together with its revision date.