Last updated: 19 sept 2026
1. Data controller
- Owner: Noelia Corral Bertran
- Tax ID (NIF): [NIF]
- Business address: [full address], Barcelona, Spain
- Email: corralbertrannoelia@gmail.com
- Phone: +34 652 819 705
- Website: https://noeliacorral.com
2. What data we process and where it comes from
This website does not have registration or contact forms. We only process the personal data you voluntarily provide when contacting us by email, phone, WhatsApp or Instagram direct message. This may include: first and last name, contact details, the company or agency you represent, details of the assignment (dates, location, type of production) and, where applicable, billing information.
The website also displays a portfolio with images of professional work in which identifiable individuals may appear.
Please do not send us data relating to third parties without having informed them beforehand, nor special categories of data that are not necessary for the service.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to enquiries and requests for quotes or availability | Steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b)) |
| Managing the professional relationship with clients, agencies and production companies (organising jobs, communications, payments) | Performance of a contract (Art. 6(1)(b)) |
| Issuing invoices and complying with accounting and tax obligations | Compliance with legal obligations (Art. 6(1)(c)) |
| Displaying in the portfolio professional work in which identifiable individuals appear (models, artists) | Legitimate interest of the owner in showcasing her professional career (Art. 6(1)(f)), within the framework of the permissions granted for each production |
| Maintaining the security and proper functioning of the website | Legitimate interest (Art. 6(1)(f)) |
No automated decisions are made and no profiles are created using your data.
4. Retention periods
Data from enquiries that do not lead to an assignment will be kept for as long as necessary to respond to them and for a maximum of [12] months. Client data will be kept for the duration of the professional relationship and, thereafter, for the legally required periods: 6 years for commercial records (Article 30 of the Spanish Commercial Code) and 4 years for tax purposes (Spanish General Tax Law). Portfolio images will remain published for as long as the owner considers appropriate for her professional promotion, unless the person concerned or the rights holder requests their removal in accordance with Section 8.
5. Recipients
We do not disclose your data to third parties unless required by law (for example, to the Spanish Tax Agency). However, service providers working for the owner may access it, acting as data processors with the safeguards required by Article 28 GDPR:
- Web hosting provider: [provider name, country]
- Email provider: Google Ireland Ltd. (Gmail)
- Accounting or tax advisory firm: [name, if applicable]
6. International transfers
Some providers, such as Google or Meta, may process data outside the European Economic Area, particularly in the United States. These transfers are based on the EU-U.S. Data Privacy Framework or, failing that, on the Standard Contractual Clauses approved by the European Commission.
7. Social media
The owner has an Instagram profile (@noeliacorralbertran). If you interact with it, your data will be processed in accordance with this policy and with the privacy policy of Meta Platforms Ireland Ltd., which acts as joint controller for certain processing activities, such as profile insights.
8. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw any consent given, without affecting the lawfulness of processing carried out prior to its withdrawal. To do so, write to corralbertrannoelia@gmail.com stating the right you wish to exercise and providing proof of identity. We will respond within one month at the latest.
Removal of portfolio images. If you appear in any portfolio image, or hold rights over it, and do not wish it to be displayed, you may request its removal by writing to the same address. The image will be removed within a maximum of [5] business days.
If you believe the processing of your data does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Minors
This website is not intended for children under 14. Images of work involving minors will only be published if authorisation from their parents or legal guardians has been obtained.
10. Cookies
This website only uses technical cookies necessary for its operation. You can find more details in the Cookie Policy.
11. Security
The owner applies appropriate technical and organisational measures to protect data against loss, unauthorised access or alteration, taking into account the nature of the data and the risks of the processing.
12. Changes to this policy
This policy may be updated to reflect changes in legislation or services. The date of the latest version appears at the top of this document.