1. Data Controller Identification
This Privacy Policy governs the processing of personal data collected through the Sortsyfeedcabin platform (sortsyfeedcabin.christmas). The legal entity responsible for your data is Sortsyfeedcabin Cinema Archive S.L., registered under Company No. B-84920194, with official headquarters established at Calle de Alcalá 42, 28014 Madrid, Spain. Contact email: [email protected].
2. Principles of Data Processing
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD), our processing of personal data is grounded upon legality, transparency, fairness, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.
3. Categories of Information Collected
We collect and process the following information when you interact with our Spanish cinema statistical archive:
- Direct Contact Data: Name, professional title, corporate affiliation, email address, and subject message submitted through our institutional contact interfaces.
- Technical & Telemetry Data: Internet Protocol (IP) address, operating system, browser engine, screen resolution, referrers, and duration of page sessions across record tables.
- Preference & Consent Records: Timestamps and choices registered via our localized Cookie and Tracking Consent Management system.
4. Lawful Grounds for Processing
Your information is processed under the following lawful bases established in Article 6 of the GDPR:
- Consent (Art. 6.1.a): Freely given consent for analytics tracking and direct inquiry responses.
- Legitimate Interests (Art. 6.1.f): Monitoring network security, preventing unauthorized scraping of proprietary film records, and optimizing database performance.
- Legal Obligation (Art. 6.1.c): Compliance with fiscal, taxation, and statutory record-keeping mandates in Spain.
5. Data Retention Periods
Inquiry records submitted through contact mechanisms are preserved for a maximum of twenty-four (24) months from the resolution of the query. Technical telemetry and aggregated box office query metrics are anonymized within ninety (90) days. Consent records are maintained for thirty-six (36) months to demonstrate compliance with supervisory audits.
6. Exercise of Data Subject Rights
Under GDPR and CCPA provisions, European and international users possess specific statutory rights:
- Right of Access: Requesting written confirmation of all personal data held regarding your identity.
- Right to Rectification: Requiring swift correction of inaccurate or incomplete historical records.
- Right to Erasure ("Right to be Forgotten"): Demanding data destruction where statutory grounds no longer apply.
- Right to Restriction & Objection: Limiting automated processing or opposing legitimate-interest activities.
- Right to Data Portability: Receiving structured, machine-readable exports of your personal submissions.
To exercise these rights, please transmit a signed request with identification verification to our Data Protection Officer at [email protected] or postal address: Calle de Alcalá 42, 28014 Madrid, Spain. You maintain the right to lodge a formal complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es.