Last update
2026
Story Studio (hereinafter, "the Studio") respects your privacy and is committed to protecting the personal data you share with us through heystorystudio.com.
Controller | Ary Jonathan Silberstein Klein · info@heystorystudio.com |
|---|---|
Purpose | To respond to your inquiries, prepare proposals, and provide the services you contract with us. |
Legal basis | Your consent, the contractual relationship, and our legal obligations. |
Recipients | Only the technology providers that service us. We do not sell or transfer your data for commercial purposes. |
Transfers | Some providers operate outside the EU, always with the guarantees required by the GDPR. |
Retention | [12] months for inquiries without contracting; [6] years for client data, due to tax obligations. |
Your rights | To access, rectify, erase, restrict, port, and object, by writing to info@heystorystudio.com. |
Complaint | Before the AEPD (Spain) or the AAIP (Argentina) if we do not properly address your request. |
1. Data Controller
In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), the controller of your data processing is:
Owner: Ary Jonathan Silberstein Klein · NIF/CIF: N.I.F.: 60883294V
Address (Spain): Castiello de Jaca 14, 28050 Las Tablas, Madrid
Address (Argentina): Holmberg 1635, Autonomous City of Buenos Aires
Email: info@heystorystudio.com
2. What data we collect
We collect what you voluntarily provide us: name, email, and the details of the project you include in the contact form or when scheduling a call, in addition to what you write to us by email.
We also automatically collect browsing data (IP address, browser, device, pages visited, and source of the visit) through cookies. The details are in the Cookies Policy.
We do not process special categories of data such as health, ideology, ethnic origin, sexual orientation, or biometric data. We ask you not to include them in your messages.
3. What we use your data for and on what legal basis
Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
To respond to your inquiries and prepare proposals and budgets | Consent and pre-contractual measures (Art. 6.1.a and 6.1.b) |
To coordinate meetings and video calls | Consent and pre-contractual measures (Art. 6.1.a and 6.1.b) |
To provide the contracted creative and production services | Execution of the contract (Art. 6.1.b) |
To measure site use to improve its content and performance | Consent from the cookie banner (Art. 6.1.a) |
To comply with tax, accounting, and billing obligations | Legal obligation (Art. 6.1.c) |
To protect the site against fraudulent or abusive use | Legitimate interest (Art. 6.1.f) |
We do not make automated decisions with legal effects or create profiles that significantly affect you.
4. How long we keep them
Inquiries that do not lead to a contract: [12] months from the last contact.
Clients: during the contractual relationship and [6] years more, due to commercial and tax obligations.
Browsing data: the periods specified in the Cookies Policy.
Afterward, we securely erase or anonymize them.
5. Who we share them with
We do not sell, rent, or transfer your data for commercial purposes. They are accessed, as data processors and under a signed contract in accordance with Article 28 of the GDPR, by the providers that service us:
Hosting and web platform: Framer
Email and office suite: Google Workspace
Meeting scheduling: Calendly
Web analytics: Google Analytics
Motionme®, our production platform, when necessary to perform the service.
They may also be communicated to courts, law enforcement, and public administrations when a legal obligation exists.
6. International transfers
Some providers operate outside the European Economic Area, mainly in the United States, and part of our team works from Argentina and other Latin American countries.
These transfers are covered by adequacy decisions of the European Commission —Argentina has had one since 2003— or, failing that, by Standard Contractual Clauses, with additional security measures when risk analysis so requires.
To be confirmed with your lawyer: the applicable mechanism for US providers must be verified according to the adequacy framework in force on the publication date, as it has changed several times.
7. Your Rights
You can exercise at any time your rights of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right not to be subject to automated decisions and to withdraw your consent whenever you want, without affecting the lawfulness of processing based on consent before its withdrawal.
Write to us at info@heystorystudio.com indicating which right you wish to exercise and attaching a copy of a document proving your identity. We respond within a maximum of one month, extendable by two more in complex cases.
If you consider that we have not correctly addressed your request, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es) or, in Argentina, with the Agency for Access to Public Information (www.argentina.gob.ar/aaip).
8. Security and Cookies
This site uses first-party and third-party cookies; details are in the Cookies Policy, accessible from the footer.
We protect your data with HTTPS encryption, access controls, regular backups, and confidentiality agreements with our team and collaborators. No system is infallible: if you detect a vulnerability, write to us.
The site is not directed at children under 14 years of age, and we do not knowingly collect their data.
9. Policy Updates
We may update this policy due to regulatory, technical, or organizational changes. We will always publish the current version with its date, and we will highlight material changes in a visible way. For any questions: info@heystorystudio.com.
