Legal Name: Aldo Castillo Sotil (Bishu Studio) Tax ID: 61895989T Address: Travesía de la Playa, 1, Madrid, 28730, Spain Contact Email: info@bishu.studio Phone: +34 637 948 552 In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD), Bishu Studio informs users about the processing of their personal data.
Bishu Studio collects and processes personal data provided by users through website channels for the following purposes: • Inquiry and Quote Management (Chat and Forms): We process your email address, project specifications, budget estimates, and chat transcripts to respond to technical or business inquiries, deliver proposals, and manage pre-contractual requests. • AI Virtual Assistant: Conversations with our virtual assistant ('Bishu') are processed using artificial intelligence to provide automated, interactive responses to your requests and qualify project opportunities. • Website Analytics and Performance: Subject to your prior consent, we process anonymized browsing data and usage metrics via analytical cookies to evaluate site performance and improve our services.
The processing of your personal data is based on the following legal grounds: • Performance of pre-contractual measures and legitimate interest (Art. 6(1)(b) and Art. 6(1)(f) GDPR): To attend to your commercial requests, answer inquiries about services, and formulate requested proposals. • Data Subject Consent (Art. 6(1)(a) GDPR): For the activation of analytical cookies and any commercial communications if explicitly authorized. • Compliance with Legal Obligations (Art. 6(1)(c) GDPR): To comply with applicable tax, commercial, and telecommunications statutory obligations.
To ensure adequate digital infrastructure and service delivery, Bishu Studio engages technology service providers acting as data processors with access strictly limited to their operational scope: • Vercel Inc. (USA): Web hosting, cloud infrastructure, and edge content delivery. • OpenAI LLC (USA): Large language model provider for conversational processing within the virtual chat assistant. • Mailgun Technologies, Inc. / Sinch (USA/EU): Transactional email infrastructure for lead notifications. • Google LLC (USA): Web analytics provider (Google Analytics 4), enabled exclusively upon user consent. International Data Transfers: Cross-border transfers outside the European Economic Area (EEA), particularly to the United States, are conducted under adequate GDPR safeguards, such as adherence to the EU-U.S. Data Privacy Framework (DPF) or European Commission Standard Contractual Clauses (SCCs).
Your personal data will be retained for the following durations: • Contact and commercial inquiry data: Retained for the time necessary to handle the inquiry and for a maximum of 2 years from the last interaction, unless a contract is executed or the user requests earlier erasure. • Analytical cookie data: Retained according to the periods specified in the Cookie Policy (up to 14 months in Google Analytics) or until consent withdrawal.
Users may exercise their rights of access, rectification, erasure (right to be forgotten), restriction of processing, data portability, opposition, and the right not to be subject to automated individual decision-making at any time. To exercise these rights, submit a written request to info@bishu.studio with the subject line 'Data Protection' and proof of identity. If you believe your data protection rights have been infringed, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or C/ Jorge Juan, 6, 28001 Madrid, Spain.
Purpose & Legal Basis: We process personal data submitted via our freelancer and agency partner registration forms to evaluate candidate qualifications, manage our talent network, and contact professionals regarding project staffing opportunities with Bishu Studio clients. The legal basis for processing initial applications is explicit consent (Art. 6(1)(a) GDPR). Once a partner is actively engaged on a client project, processing is governed by the performance of the contractual service engagement (Art. 6(1)(b) GDPR). Categories of Processed Data: Identification and contact details (name, email, phone, country, city, timezone), professional links (LinkedIn, GitHub, portfolio), technical qualifications (primary role, secondary roles, skills and proficiency ratings, years of experience, communication languages), availability, estimated rates (EUR/USD), billing entity details, technical screening notes, and professional summaries. Retention Period: Partner profile records are retained for a maximum of 24 months from the last profile update, availability re-confirmation, or direct interaction. When a partner is actively participating in client engagements, retention deletion timers are suspended throughout active collaboration and restart with a 24-month duration upon conclusion of the last engagement, after which records are permanently deleted. Data Processors & Safeguards: Partner submissions are processed using trusted infrastructure providers: Vercel Inc. (edge hosting and forms), Upstash Inc. (secure queuing and CRM outbox in EU/US regions under Standard Contractual Clauses), and Mailgun Technologies Inc. (transactional notification emails). Your Rights & Consent Withdrawal: You may revoke your consent at any time or request access, rectification, portability, or complete erasure by emailing info@bishu.studio with the subject line 'Partner data request'. Erasure requests permanently delete all partner data from our talent pool.