top of page

​​

 This policy expresses how personal information will be treated and protected for all people who interact with MAINSTONE, through this website. Please read all sections of the Legal Notice, cookie policy, and this privacy policy before using this website.

In accordance with the provisions of EU Regulation 2016/679, of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018, of December 5, on Protection of Personal Data and guarantee of digital rights, MAINSTONE informs you that, by accepting this Privacy Policy, you give your express, informed, free and unequivocal consent for the Data you provide, and on which the security, technical and organizational measures provided for in current regulations are applied, to be processed by MAINSTONE as data controller.

Who is responsible for processing your personal data?

  • Controller Identity: Patrick John Mainstone Gonzalez

  • Commercial Name: MAINSTONE

  • Address: Barrio Camplengo, Santillana del Mar, Cantabria,39360, Spain

  • Email: mainstonepatrick@gmail.com

  • Activity: Cinematographic film production

  • Controller or representative contact details, and data protection officer if applicable: mainstonepatrick@gmail.com

What personal data do we collect?

Depending on the services you use, we may request:

  • Identification data: name and surname

  • Contact data: postal address, email, mobile phone number

  • Contractual data: contractual operation data, ID/Tax ID, products and services purchased, financial operations, payment data, etc.

  • Navigation data: IP address, device type and identification, browser type, domain through which you access the Website, navigation data, Website activity, etc.

What legal bases do we use to process this data?

We process your personal data with the following legal bases:

  • The execution of a contract with MAINSTONE, for service contracting, publishing advertisements and managing requested services

  • User consent in relation to contact, content subscription and sending commercial communications, via email, cookies or messaging systems

  • The legitimate interest of the data controller to protect users of the MAINSTONE website from abuse and fraud in the use of our services

Why and what do we process your data for?

On this website, there are different forms, in each of them, the information collected will be used as follows:​

  • Contact form: There is also a contact form for queries, suggestions or professional contact. In this case, the email address will be used to respond to them and send the information that the user requires through the web

  • Sales form: We also process data to manage the purchase of products, including order management, payment and all operations related to contracting the chosen service or product. This includes sending follow-up emails, responses, invoices, receipts, etc.

Personal data retention period

  • Customer data: The retention period of personal data will vary depending on the service the Customer contracts. In any case, it will be the minimum necessary and may be maintained for up to:

    • 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registrations, deregistrations, contributions, salary payments...)

    • 5 years: Art. 1964 of the Civil Code (personal actions without special term)

    • 6 years: Art. 30 of the Commercial Code (accounting books, invoices...)

    • 10 years: Art. 25 of the Law on Prevention of Money Laundering and Terrorist Financing

  • Potential customer data: Data will be retained throughout the validity of the established commercial relationship and, once concluded, two years, unless the user requests its deletion earlier

What are your rights regarding the use of your data and how can you exercise them?

Any person has the right to obtain confirmation about whether MAINSTONE is processing personal data concerning them or not.

Interested parties have the right to:

  • Request access to personal data relating to the data subject

  • Request its rectification or deletion

  • Request its cancellation

  • Request limitation of its processing

  • Object to processing

  • Request data portability

If you have given your consent for any specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

In case you feel your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you can file a complaint with the competent Data Protection Control Authority through their website: https://www.aepd.es/es

To exercise these rights, you can write to mainstonepatrick@gmail.com

There is a form for exercising your rights, you can request it by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.

These forms must be electronically signed or accompanied by a photocopy of your ID.

If someone represents you, they must attach a copy of their ID, or it must be signed with their electronic signature.

Forms can be presented in person, sent by mail or email to the controller's address shown at the beginning of this text.

Security notification and breach declaration

At MAINSTONE we assume security measures appropriate to the level of risk to protect personal information against loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in processing and the nature of personal information; however, if MAINSTONE determines that your service data has been misappropriated (including by a MAINSTONE employee), has been exposed by a security breach or improperly acquired by a third party, MAINSTONE will immediately inform you of such security breach, misappropriation or improper acquisition.

To which recipients are your data communicated?

Segmentation and profiling

Many tools used on this website to manage data are contracted by third parties. To provide services strictly necessary for the development of the activity, MAINSTONE shares data with the following providers under their corresponding privacy conditions:

  • External service providers (for example, payment processing services, order processing, analytics, marketing campaign management, website management, and email distribution and other similar service providers) so they can perform business functions on behalf of MAINSTONE

  • The web development and maintenance company, or the hosting company may have occasional access to this website. They have signed a service provision contract that obliges them to maintain the same level of privacy that applies to processing carried out on this website

Any international data transfer derived from the use of tools or service providers will adhere to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies regarding privacy, secrecy and data security.

Specifically, this website uses the following tools:

​​

The registration of personal data provided at the time of subscription, contact, interaction with the web and any other data provided during navigation, including information supplied by cookies in relation to browsing habits, will be used in order to be segmented or categorized with the purpose of applying them to activity related to (general administration management, information, advertising space marketing, analysis of proposals requested by users/customers, statistical study of services and content used, tastes and preferences, and surveys or forms).

The elaboration of profiles, through the analysis of your automated individual decisions, consists of the use of your Personal Data to evaluate certain personal aspects, such as (the analysis and prediction of your economic situation, personal preferences, interests, behavior, location, movements and attitudes). The logic applied to obtain these profiles is the use of statistical procedures and the consequences of this processing of your data through profiling is the sending of personalized communications of your interest with content related to [define type of content].

The legal basis for processing your data for the indicated purposes and the elaboration of automated individual decisions creating profiles is the consent given by checking the previously indicated box.

The data we use in profiling and show to advertisers is not data that allows users to be identified; only the type of audience we have is shown in a graph, their age, country, gender, etc.

Data secrecy and security

mainstone.rocks commits to the use and treatment of user personal data, respecting their confidentiality, according to their purpose; as well as to comply with its obligation to keep them and adapt all measures to avoid alteration, loss, treatment or unauthorized access, in accordance with what is established in current data protection regulations. (This website includes an SSL certificate. It is a security protocol that makes your data travel in a complete and secure manner; that is, the transmission of data between a server and the web user, and in feedback is totally encrypted.)

mainstone.rocks cannot guarantee the absolute impregnability of the Internet network, nor, therefore, the violation of data through fraudulent access to them by third parties.

Regarding processing confidentiality, MAINSTONE will ensure that any person authorized by MAINSTONE to process customer data (including its personnel, collaborators and providers), will be under the appropriate confidentiality obligation (whether a contractual or legal duty).

When a security incident occurs, upon becoming aware, MAINSTONE must notify the Client without undue delay and must provide timely information related to the Security Incident as it becomes known, or when the client reasonably requests it.

Data accuracy and truthfulness

As a user, you are solely responsible for the truthfulness and correctness of the data you submit to mainstone.rocks, exonerating MAINSTONE from any responsibility in this regard. Users guarantee and respond, in any case, for the accuracy, validity and authenticity of the personal data provided, and commit to keeping them properly updated. The user agrees to provide complete and correct information in the contact or subscription form.

Revocability

The consent given, both for the processing and for the transfer of data of interested parties, is revocable at any time by communicating it to MAINSTONE under the terms established in this Policy for the exercise of ARCO rights. This revocation will in no case have retroactive character.

Changes to the privacy policy

MAINSTONE reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, it will announce on this page the changes introduced with reasonable advance notice of their implementation.

bottom of page