Legal
Privacy Policy Last updated: August 14, 2026
1. Who is responsible for your data
The data controller for personal data collected through this website is Naolito Animation Studios (“Naolito”, “we”), with registered address at Sor Teresa Prat 15, 29003 Malaga, Spain. You can contact us regarding data protection at contact@naolito.com.
2. What data we collect and why
Contact form. When you send us a message we process the data you provide (name, email address, subject, and message content) to answer your inquiry and follow up on potential projects. The legal basis is your consent (Art. 6.1.a GDPR), given when ticking the acceptance box, and our legitimate interest in responding to business inquiries (Art. 6.1.f GDPR).
Technical data. Our hosting and content delivery providers process technical information (such as IP address, browser type, and requested pages) as strictly necessary to serve the website securely and prevent abuse (Art. 6.1.f GDPR). We do not use this data to identify visitors and we do not run advertising or tracking analytics on this site.
3. Who receives your data
The following service providers process data on our behalf as data processors:
We do not sell personal data, and we do not share it with anyone else except when legally required.
- Formspree, Inc. (United States) — processes the messages sent through the contact form. Transfers are covered by the EU Standard Contractual Clauses.
- Cloudflare, Inc. (United States, with EU infrastructure) — hosts the website and delivers its content, including images and video. Transfers are covered by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
- Google LLC (YouTube) — some videos on this site are embedded from YouTube using its privacy-enhanced mode, which does not set tracking cookies unless you play the video. Playing an embedded video is subject to Google’s privacy policy.
4. How long we keep your data
Messages received through the contact form are kept for as long as needed to handle your inquiry and any resulting business relationship, and afterwards for the periods required to meet legal obligations. Technical logs are kept by our providers for short periods for security purposes.
5. Your rights
Under the GDPR you have the right to access, rectify, and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting prior processing. To exercise any of these rights, write to contact@naolito.com indicating the right you wish to exercise. We may ask you to verify your identity.
If you believe your rights have not been respected, you can lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es).
6. Cookies
This website does not set its own tracking or advertising cookies. Strictly necessary technical cookies may be set by our hosting provider for security purposes. Embedded YouTube videos use YouTube’s privacy-enhanced mode and only involve Google cookies if you choose to play a video.
7. Changes to this policy
We may update this policy to reflect changes in the website or in legal requirements. The date at the top indicates the latest revision.