Last updated: September 2026

Controller: Ostiz Sistemas Audiovisuales 2017 S.L. VAT Number: B71344642 Address: Polígono Industrial Noáin-Esquíroz, Calle H, 7, 31191 Esquíroz (Galar), Navarra, Spain Phone: 948 249 928

Email: [email protected] Web: https://ostizaudiovisuales.com/

Depending on your relationship with us and your use of the website, we may process the following personal data:

First and last name. Company. Company VAT/tax number, when provided. Email address. Phone number. Information related to the project or service requested. Information voluntarily included by the user in contact forms. Data necessary to manage quotes, offers and, where applicable, the contracting of services. Technical data necessary to ensure the security and operation of the website.

We do not request specially protected data through contact forms.

Users should avoid including in forms any personal information that is not necessary for the management of their request.

Personal data may be obtained:

When the user completes one of the contact or quote request forms. When they contact us by email or phone. When they request information about our services. When they initiate a commercial or contractual relationship with Ostiz Sistemas Audiovisuales 2017 S.L. Through technical data generated during browsing of the website, where applicable. 4. PURPOSES OF PROCESSING

Personal data will be processed for the following purposes:

A. Managing information requests

Handling queries, requests and communications made by users through the website or other contact methods.

B. Preparing and managing quotes

Using the data provided to analyse project needs and prepare, send and manage quotes and offers for audiovisual services.

C. Managing contracting

When the user contracts services, processing the data necessary to manage the contractual relationship, including the organisation, provision, monitoring and invoicing of contracted services.

D. Maintaining the commercial relationship

Managing the professional or commercial relationship with clients and potential clients.

E. Complying with legal obligations

Complying with legal, tax, accounting, administrative or other applicable obligations.

F. Security and operation of the website

Preventing fraudulent use, ensuring system security and maintaining the correct operation of the website.

The legal bases that may legitimise the above processing are:

Consent of the data subject, where necessary and requested. Application of pre-contractual measures, when the user requests a quote or information necessary to prepare a potential contract. Performance of a contract, when there is a contractual relationship with the user or the company on whose behalf they act. Compliance with legal obligations, when processing is necessary to fulfil a legal obligation. Legitimate interest, where applicable and always respecting the rights and freedoms of data subjects. 6. CONTACT FORMS

The forms available on the website allow users to request information and quotes related to the services of Ostiz Sistemas Audiovisuales 2017 S.L.

The data provided will be used exclusively to manage the request made, prepare the corresponding quote and, where applicable, manage the commercial or contractual relationship.

The forms may be integrated using third-party technology services, such as Google Forms. In these cases, the technical processing of certain data may involve the participation of such providers as processors or technology providers, in accordance with the applicable conditions and guarantees.

Personal data may be communicated or made accessible to:

Public administrations, bodies and authorities where there is a legal obligation. Financial entities and providers necessary to manage collections and payments. Advisors, management firms and professionals providing services to Ostiz Sistemas Audiovisuales 2017 S.L. when necessary for the management of the business. Technology providers necessary for the operation of the website, forms, email, storage or other IT services. Providers responsible for the provision of contracted services when necessary to perform the contract.

Personal data of users will not be sold to third parties.

The operation of certain parts of the website may rely on external technology providers.

Currently, contact forms may use Google Forms, a service provided by Google.

These providers may process certain technical data necessary to provide their services. Processing will be carried out in accordance with their respective terms and privacy policies and the applicable contracts or guarantees between the parties.

Google provides specific information about the operation of its cookies and similar technologies in its corresponding policy.

Some technology providers used to provide certain services may be located outside the European Economic Area or use internationally located infrastructure.

Where there is an international transfer of personal data, the guarantees required by applicable regulations will be adopted, including, where appropriate, adequacy decisions, standard contractual clauses or other legally recognised mechanisms.

Personal data will be retained for the time necessary to fulfil the purpose for which it was obtained.

When data is related to a contractual relationship, it will be retained for the time necessary to manage that relationship and subsequently for the periods required by applicable legal obligations.

Data corresponding to quote or information requests will be retained for the time necessary to manage the request and, where applicable, for the period necessary to address potential legal liabilities.

Once the corresponding periods have ended, data will be deleted or, where applicable, blocked in accordance with applicable legislation.

The user may exercise, where applicable, the following rights:

Right of access to their personal data. Right to rectification of inaccurate data. Right to erasure. Right to request restriction of processing. Right to object to processing. Right to data portability where legally applicable. Right to withdraw consent where processing is based on consent.

To exercise these rights, please send a request to:

[email protected]

The request must indicate the right you wish to exercise and provide sufficient information to verify the identity of the applicant.

The exercise of these rights is free of charge, unless one of the exceptions provided for by the regulations applies.

The data subject also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their personal data infringes applicable regulations.

Ostiz Sistemas Audiovisuales 2017 S.L. adopts appropriate technical and organisational measures to protect personal data against loss, destruction, alteration, unauthorised access or unlawful processing, taking into account the nature of the data and the risks associated with the processing.

However, no system connected to the Internet can guarantee absolute security.

If the user provides personal data of other individuals through forms or contact methods, they must have previously obtained the authorisation or have the necessary legal basis to communicate such data.

The user shall be responsible for the information they provide and for the consequences of providing third-party data without sufficient authorisation.

The services offered by Ostiz Sistemas Audiovisuales 2017 S.L. are not specifically aimed at minors.

When it is necessary to provide personal data of a minor, this must be done in accordance with the requirements established by data protection regulations.

Ostiz Sistemas Audiovisuales 2017 S.L. may modify this Privacy Policy when necessary to adapt it to legislative, jurisprudential, technological or business-related changes.