LEGAL ADVICE
Back to home – Terms and Conditions – Cookies Policy
Last updated: 28 October 2026
1. Website owner
In accordance with applicable Spanish and European legislation governing information society services and personal data protection, users of this website are informed of the following:
Website: evamavis.com
Website owner / Data Controller: Eva Luna Montoya Meriño
Tax identification number (NIF/NIE): Y3052677Q
Registered or professional address: Camino del Remosquil 65, 28729 Navalafuente
Contact email: sanpiek@gmail.com
This website is operated for the purpose of presenting the professional and artistic work of Eva Mavis, including information relating to acting, dance, music, modelling and other professional or creative activities.
Access to and use of this website implies acceptance of the provisions contained in this Legal Advice, without prejudice to any specific conditions that may apply to particular services or content.
2. Applicable legislation
The processing of personal data carried out through this website is governed, in particular, by:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR).
- Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
- Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), where applicable.
- Any other legislation applicable to the services and activities offered through this website.
3. Personal Data Controller
The Data Controller responsible for personal information collected through evamavis.com is:
[FULL LEGAL NAME]
NIF/NIE: [NIF/NIE]
Address: [ADDRESS]
Email: [EMAIL ADDRESS]
Users may contact the Data Controller at any time regarding the processing of their personal data or the exercise of their data protection rights.
4. Personal data that may be collected
Personal data may be collected when a user voluntarily contacts Eva Mavis through the website, contact forms, email or other communication channels made available through the website.
Depending on the communication, such information may include:
- Name and surname.
- Email address.
- Telephone number, where voluntarily provided.
- Professional or company information.
- Information included by the user in the message or enquiry.
- Technical information necessary for the operation, security and administration of the website.
Users should not provide personal information that is unnecessary for the purpose of their enquiry.
5. Purposes of processing
Personal data provided through the website may be processed for the following purposes:
Responding to enquiries and communications.
To receive, manage and respond to requests for information, professional enquiries, collaboration proposals, representation enquiries, bookings or other communications submitted through the website.
Professional and pre-contractual communications.
Where an enquiry concerns a possible professional engagement, collaboration, performance, production, representation or other contractual relationship, the information may be processed in order to take the necessary steps requested by the user prior to entering into an agreement.
Website administration and security.
Certain technical information may be processed where necessary to ensure the security, integrity and proper functioning of the website and to prevent misuse, attacks or fraudulent activity.
Personal data will not be used for purposes incompatible with those described above without first providing the data subject with the relevant information and, where legally required, obtaining their consent.
6. Legal basis for processing
Depending on the circumstances, the legal basis for processing may be:
Consent of the data subject, when the user voluntarily submits a contact form or other communication.
Steps taken at the request of the data subject prior to entering into a contract, when the communication relates to a possible professional engagement, collaboration or service.
Compliance with legal obligations, where the retention or disclosure of certain information is required by applicable legislation.
Legitimate interests, where strictly necessary for the security, defence and proper operation of the website, provided that such interests do not override the rights and freedoms of the data subject.
Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
7. Data retention
Personal data will be retained only for as long as necessary to respond to the enquiry or fulfil the purpose for which the information was collected.
Where the communication leads to a professional, contractual or commercial relationship, relevant information may subsequently be retained for the periods required by applicable accounting, tax, contractual or other legal obligations and during any applicable limitation periods.
Once the applicable retention period has expired, the information will be securely deleted or anonymised where appropriate.
8. Recipients and service providers
Personal data will not be sold to third parties.
Access to personal information may be granted to service providers that are necessary for the operation of the website or communications systems, such as hosting, technical maintenance, email or other technology providers, where they act as data processors or independent controllers in accordance with applicable law.
Personal information may also be disclosed when required by law, court order or a request from a competent public authority.
9. International data transfers
Some technology providers or third-party services accessible or embedded within the website may operate from countries outside the European Economic Area.
Where such services involve the transfer of personal data internationally, such transfers must be carried out in accordance with the GDPR and using the applicable legal safeguards.
Where a service requires the user’s prior consent, it will only be activated in accordance with the choices made through the website’s consent management system.
Further information regarding technologies activated through cookies or similar mechanisms is available in the Cookie Policy.
10. Embedded content and third-party platforms
The website may contain links to or content associated with third-party platforms, including social networks, music platforms and video or audiovisual services.
When users access or activate content provided by an external platform, that third party may process information in accordance with its own privacy terms.
The website does not control the independent processing activities performed by such third-party services.
Where consent is legally required before loading third-party technologies, the website’s consent management mechanism will be used to manage such consent.
11. User rights
Data subjects may exercise the rights recognised under the GDPR and applicable Spanish data protection legislation.
These include the right to:
- Access their personal data.
- Request the rectification of inaccurate or incomplete data.
- Request erasure of their personal data where legally applicable.
- Request restriction of processing.
- Object to processing where applicable.
- Request data portability where the legal requirements are met.
- Withdraw consent at any time where processing is based on consent.
- Not be subject to a decision based solely on automated processing where the conditions established by law apply.
To exercise these rights, the data subject may contact:
[EMAIL ADDRESS]
The request should contain sufficient information to identify the applicant and specify the right they wish to exercise. Additional information may be requested only where reasonably necessary to verify the identity of the applicant.
The exercise of data protection rights is generally free of charge, subject to the exceptions established by applicable law.
12. Right to lodge a complaint
If a user considers that their personal data has been processed in breach of applicable data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.
In Spain, the competent authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
Users are encouraged to contact the Data Controller first so that any issue may be examined and, where appropriate, resolved.
13. Data security
Appropriate technical and organisational measures are applied to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no Internet-based system can guarantee absolute security and users should also take reasonable precautions when transmitting information online.
14. Accuracy of information
Users are responsible for ensuring that the information they provide is accurate, complete and up to date.
The website owner cannot be held responsible for consequences resulting directly from inaccurate or false information voluntarily supplied by a user.
15. Cookies and similar technologies
The website may use cookies or similar technologies necessary for its operation and, subject to the user’s choices, other technologies for analytics, embedded media or third-party services.
Detailed information about the technologies used, their purposes, duration, providers and available consent controls is provided separately in the Cookie Policy.
The Cookie Policy and consent management system are part of the privacy framework of this website.
16. Changes to this Legal Advice and Privacy Policy
This Legal Advice and Privacy Policy may be modified when necessary to reflect changes in legislation, the website, the services provided or the way personal data is processed.
The current version will always be made available on this website, indicating the date of its latest update.