Privacy policy
Legal Notice
1. Data Controller
The controller responsible for the processing of personal data on this website is:
PIXEL SHAKE
Operated by Luca Tina
Polígono 2 – Parcela 205
07310 Campanet, Illes Balears
Spain
Email: luca@pixel-shake.com
Website: pixel-shake.com
PIXEL SHAKE is the business name under which Luca Tina provides independent creative and design services as a self-employed professional established in Spain.
2. General Information
We take the protection of your personal data seriously.
This Privacy Policy explains what personal data we process when you visit this website, contact us, subscribe to our newsletter or use the communication options provided through the website.
Personal data means any information relating to an identified or identifiable natural person.
We process personal data only where this is necessary to provide a secure and functional website, respond to enquiries, prepare or perform contracts, send communications requested by you, comply with legal obligations or protect legitimate business interests.
The processing of personal data is carried out in accordance with the General Data Protection Regulation, applicable Spanish data protection legislation and other applicable legal requirements.
3. Website Hosting and Server Log Files
This website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you access this website, technical information is automatically transmitted by your browser or device and may be recorded in server log files.
This information may include:
IP address
Date and time of access
Requested page or file
Referring website
Browser type and browser version
Operating system
Device information
HTTP status code
Amount of data transferred
The processing of this information is necessary to display the website, ensure its technical stability and security, prevent misuse and investigate technical or security-related incidents.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, stable and reliable website.
STRATO processes personal data on our behalf in accordance with Article 28 GDPR. According to STRATO, visitor IP addresses recorded for the detection and prevention of attacks may be retained for up to seven days.
4. Contact and Project Enquiries
When you contact us by email, contact form, telephone, WhatsApp or another communication channel, we process the information you provide in order to respond to your enquiry.
Depending on the nature of your request, the information processed may include:
Your name
Your email address
Your telephone number
Your company name
The content of your message
Information about your project
Information about the services you are interested in
Files or documents submitted by you
Technical information associated with a form submission
Where your enquiry relates to the preparation, negotiation or performance of a contract, the legal basis is Article 6(1)(b) GDPR.
For general enquiries and business communication, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to respond to enquiries and communicate with prospective clients, existing clients and business partners.
Providing this information is voluntary. However, without the information required to understand and respond to your request, we may not be able to process your enquiry.
Enquiry data is retained for as long as necessary to respond to and conclude the relevant communication. Information may be retained for a longer period where this is required for a contractual relationship, compliance with legal retention obligations or the establishment, exercise or defence of legal claims.
5. Communication via WhatsApp
This website may provide an option to contact PIXEL SHAKE through WhatsApp. The use of WhatsApp is voluntary.
When you contact us through WhatsApp, we process the information transmitted during the communication. This may include your telephone number, profile name, profile image, message content, attachments and communication metadata.
Where the communication relates to a requested service, the preparation of a contract or an existing contractual relationship, the legal basis is Article 6(1)(b) GDPR.
In other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a convenient communication channel and respond to enquiries.
For users in the European Region, WhatsApp is provided by WhatsApp Ireland Limited. WhatsApp processes certain information independently in accordance with its own Privacy Policy.
Information may be processed by WhatsApp, other Meta companies and their service providers. This may include processing in countries outside the European Economic Area.
You are not required to use WhatsApp and may contact PIXEL SHAKE by email instead.
6. Newsletter and Mailchimp
Where you subscribe to the PIXEL SHAKE newsletter, we process your email address and any additional information you voluntarily provide for the purpose of sending you news, updates, creative insights and information about our services.
The legal basis for sending the newsletter is your consent under Article 6(1)(a) GDPR.
Where applicable, newsletter subscriptions are confirmed using a double opt-in procedure. After registration, you receive an email asking you to confirm your subscription.
The registration and confirmation process may be recorded in order to demonstrate that valid consent was provided. This record may include the email address, date and time of registration, date and time of confirmation and technical registration information.
We use Mailchimp to manage subscriptions and send newsletters.
Mailchimp is operated by The Rocket Science Group LLC, doing business as Mailchimp, an Intuit company based in the United States.
Mailchimp may process information including:
Email address
Name, where provided
Subscription status
Date and time of registration
Technical delivery information
Newsletter delivery status
Information concerning unsubscribing
Where newsletter performance measurement is activated, information concerning newsletter openings and links clicked may also be processed. Consent-requiring measurement features are used only where an appropriate legal basis exists.
Mailchimp may process personal data in the United States. According to Mailchimp, international data transfers are protected through recognised transfer mechanisms, including the EU–US Data Privacy Framework and, where applicable, the European Commission’s Standard Contractual Clauses.
You may withdraw your newsletter consent at any time by using the unsubscribe link included in each newsletter or by contacting luca@pixel-shake.com.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
After unsubscribing, your email address may be retained in a suppression list where this is necessary to ensure that no further newsletters are sent and to document your withdrawal or objection.
7. Cookies and Similar Technologies
This website uses cookies and similar technologies.
Cookies are small data files that may be stored on your device when you visit a website.
Strictly necessary technologies may be used where they are required for the security, technical operation, navigation, consent management or essential functionality of the website.
Where personal data is processed through strictly necessary technologies, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure and functional website.
Optional cookies and similar technologies are activated only after you have provided your consent.
The legal bases for optional technologies are Article 22.2 of the Spanish Law on Information Society Services and Electronic Commerce and Article 6(1)(a) GDPR.
You can accept or reject optional technologies, select individual categories and change or withdraw your consent at any time through the Cookie Settings page.
The withdrawal of consent applies to future processing and does not affect the lawfulness of processing carried out before the withdrawal.
Detailed information about the cookies and similar technologies used on this website, including their provider, purpose, category and storage duration, is available through the Cookie Settings.
8. External Content and Third-Party Services
This website may include content or functions provided by third parties, such as videos, maps, fonts, social-media content, newsletter forms or other external media.
When external content is activated, the relevant provider may receive technical information including your IP address, browser information, device information and the page you visited.
Depending on the provider, information may also be stored on your device or transferred to countries outside the European Union or the European Economic Area.
Where consent is required, the relevant external content or service is activated only after you have made the corresponding selection through the cookie settings.
The legal basis in such cases is Article 6(1)(a) GDPR and Article 22.2 of the Spanish Law on Information Society Services and Electronic Commerce.
9. External Links and Social Media
This website may contain links to external websites, social-media platforms and communication services.
When you follow an external link, you leave this website. The operator of the destination website is independently responsible for the processing of personal data carried out through its website or service.
Please review the privacy information provided by the respective operator before using an external service.
10. Recipients of Personal Data
Personal data is disclosed only where this is necessary for the purposes described in this Privacy Policy, where disclosure is required by law or where you have provided your consent.
Recipients may include:
Hosting and technical service providers
Email and communication providers
Newsletter service providers
Website maintenance and IT support providers
Tax and accounting advisers
Legal advisers
Public authorities where disclosure is legally required
Where a service provider processes personal data on our behalf, the provider is contractually bound in accordance with Article 28 GDPR where required.
We do not disclose personal data to third parties for purposes unrelated to those described in this Privacy Policy unless you have provided your consent or disclosure is required by law.
11. International Data Transfers
Some external service providers may process personal data outside the European Union or the European Economic Area.
Where personal data is transferred to a country outside the European Union or the European Economic Area, the transfer takes place only where the requirements of Articles 44 to 49 GDPR are met.
Depending on the provider and destination country, safeguards may include:
An adequacy decision issued by the European Commission
Participation in the EU–US Data Privacy Framework
European Commission Standard Contractual Clauses
Another legally recognised transfer mechanism
Further information regarding international transfers connected with a particular service may be obtained from the privacy information of the respective provider.
12. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected.
The applicable retention period depends on:
The purpose of the processing
The nature of the information
The duration of a business or contractual relationship
Whether consent has been withdrawn
Applicable statutory retention obligations
The need to establish, exercise or defend legal claims
Once the relevant purpose no longer applies and no legal obligation or legitimate reason requires further retention, the personal data will be deleted or anonymised.
Business and contractual documents may be retained for the periods required by applicable tax, commercial and accounting legislation.
13. Your Data Protection Rights
Subject to the applicable legal requirements, you have the right to:
Request access to your personal data
Request correction of inaccurate or incomplete personal data
Request deletion of your personal data
Request restriction of processing
Receive personal data you provided in a structured, commonly used and machine-readable format
Request the transmission of eligible data to another controller
Object to processing based on legitimate interests
Withdraw consent at any time with effect for the future
Lodge a complaint with a competent data protection supervisory authority
Where processing is based on consent, withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact:
We may request information necessary to confirm your identity before responding to a request concerning personal data.
14. Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
Following an objection, we will no longer process the relevant personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct-marketing purposes, you may object to the processing at any time.
Following such an objection, your personal data will no longer be processed for direct marketing.
15. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The competent supervisory authority in Spain is:
Agencia Española de Protección de Datos
Edificio Cuzco IV
Paseo de la Castellana, 141, planta 9
28046 Madrid
Spain
You may also contact the supervisory authority responsible for your habitual place of residence, place of work or the place of the alleged infringement.
16. Automated Decision-Making
Personal data collected through this website is not used for automated decision-making that produces legal effects or similarly significantly affects you.
17. Data Security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
This website uses encrypted transmission through HTTPS where supported.
However, no method of transmission over the internet or electronic storage can guarantee absolute security.
Our technical and organisational security measures are reviewed and adjusted where appropriate.
18. Changes to This Privacy Policy
We may update this Privacy Policy where changes to the website, the services used, our processing activities or applicable legal requirements make this necessary.
The version published on this website is the current version.
Last updated: 21 July 2026