Privacy policy
Data controller
The company controller of your data is:
NORTH DIGITAL STUDIO, S.L.
TIN: B66795311
Address: Paseo de Gracia, 120, 3, 08008 Barcelona
E-mail address: hello@thenorthstudio.com
Web: thenorthstudio.com
Registered in the Mercantile Registry of Barcelona Volume 45420 Folio 54 Section 8 Page B487179 1st Inscription.
At NORTH DIGITAL STUDIO, S.L., we recognize the importance of protecting your personal information and we are committed to treat it responsibly and in accordance with data protection laws.
This privacy policy explains how we process the personal data of the people who browse our website or contact us through its forms, and of the professional contacts we deal with in the course of our work, including the people who take part in meetings with North.
Personal information
Personal information is the data that identifies you or makes you identifiable. Through the web, in the fields established for this purpose, we collect the personal data the user communicates to us: name, surname, e-mail, telephone, address, town, etc., as well as any other information that you voluntarily provide us through any of the social networks in which the user is registered. In this case, the privacy will depend on the configuration established by the user as well as the terms and conditions of the social network itself.
The user’s visit to the website does not imply that he/she has to provide any information about his/her personal data. However, in case of provision, the data will be treated in a lawful manner in accordance to the principles and rights set out in the RGPD 2016/679 of 27 April 2016 and the Ley Orgánica de Protección de Datos y Garantía de los Derechos Digitales (LOPDGDD) 3/2018 of 5 December.
If you use the contact form included on the website we will collect the following contact data for the following purposes and under the following legal bases:
- Identification and contact details: full name (name and surname) and email
- Purpose of the processing: manage your request and respond to your question or message
- Legal base: consent of the data subject
- Provider: the form is managed through HubSpot, which acts as our data processor
You may revoke the consent given, without affecting the lawfulness of the processing carried out up to that time.
We may also collect personal information through the cookies present on the website, provided that you give your consent. You can find more information on this by consulting our Cookies Policy.
Clients, suppliers and business contacts
We process the contact details of the people who work for our clients, suppliers and partners in order to manage our business relationship with them.
- Data processed: name, surname, company, job title, email, telephone and the communications we exchange
- Purpose of the processing: preparing proposals, carrying out projects and managing the commercial, administrative and accounting relationship
- Legal base: the performance of the contract with the company you work for, and our legitimate interest in maintaining the business relationship with its contact persons (article 6.1.b and 6.1.f GDPR)
- Retention: while the business relationship lasts and, afterwards, during the periods required by tax and commercial law
Newsletter and commercial communications
If you subscribe to our newsletter, or if you are one of our professional contacts, we may send you news, articles and invitations related to North and our services.
- Data processed: name, surname, company, job title and email, as well as how you interact with our emails and our website (for example, opening an email, clicking a link or visiting a page)
- Purpose of the processing: sending our newsletter and commercial communications about our own services. We group contacts and measure their interest in order to send them content relevant to them. This does not involve automated decisions that produce legal effects on you
- Legal base: your consent when you subscribe (article 6.1.a GDPR and article 21 LSSICE). For professional contacts with whom we already have a relationship, our legitimate interest in sending them information about services similar to those they have shown interest in (article 6.1.f GDPR and article 21.2 LSSICE)
- Provider: we manage these communications with HubSpot, which acts as our data processor
- Retention: until you unsubscribe or object. You can unsubscribe at any time with the link included in every email or by writing to hello@thenorthstudio.com
Events
When you register for an event organised by North, or take part in it as a speaker, we process your data to manage your participation.
- Data processed: name, surname, company, job title, email and telephone. For speakers, also their biography, photograph and the content of their session
- Purpose of the processing: managing registrations, attendance and communications about the event and, for speakers, organising and promoting their participation
- Legal base: your consent when you register, or the agreement to take part in the event in the case of speakers (article 6.1.a and 6.1.b GDPR)
- Images: we may take photos and videos during our events and publish them on our website and social media to share what happened. We will tell you when you register and at the event. The legal base is your consent, which you can withdraw at any time by telling our team or by writing to hello@thenorthstudio.com
- Retention: during the organisation of the event and its follow-up. Published content is kept for as long as it remains published, unless you ask us to remove it
Recruitment
If you apply for a job or internship at North, or send us your CV, we process your data to manage the selection process.
- Data processed: identification and contact details, CV, education, professional experience, and the notes and results of interviews and tests
- Purpose of the processing: assessing your application and managing the selection process
- Legal base: taking steps at your request before entering into a contract (article 6.1.b GDPR). If you are not selected and you agree, we will keep your CV to consider you for future vacancies (article 6.1.a GDPR)
- Retention: for the duration of the selection process. If you agree to us keeping your CV, for a maximum of one year
Please do not include in your CV data revealing your health, ideology, religion or other special categories of data.
Meetings, recordings and use of AI tools
In our meetings with clients, partners and other professional contacts, we may record the audio of the meeting in order to obtain a transcript and a summary of what was agreed. We only do so when the client has authorised it in advance, and we always tell the participants at the start of the meeting. If any participant objects, the meeting is not recorded.
- Data processed: voice, name and the content of what is said during the meeting
- Purpose of the processing: documenting the meeting accurately and managing the project
- Legal base: legitimate interest of North and of its client in keeping an accurate record of the work (article 6.1.f GDPR). You may object at any time, before or during the meeting, by telling us or by writing to hello@thenorthstudio.com
- Retention: the audio is deleted once the transcript has been reviewed, and in any case within 30 days. The transcript is kept for as long as the project lasts and is deleted when it ends, unless the client asks otherwise
We do not record meetings about personnel matters, meetings in which special categories of data are discussed, or meetings the client asks us not to record. Research interviews with users are only recorded with the consent of each participant.
In our work we use artificial intelligence tools approved internally, which act as our data processors. These tools are not used to take decisions about you based solely on automated processing.
Personal data release and international transfers
Your data will not be communicated or disclosed to third parties unless there is a legal obligation or those providers necessary for the provision of the service linked to the controller acting as processors, such as hosting, CRM and email, analytics, productivity and artificial intelligence tool providers. In these cases, the processing of data by these providers shall be regulated through the corresponding data processor agreements ensuring the confidentiality of the data and the highest security standards in the processing of personal data.
Some of our service providers (for example HubSpot, Google or OpenAI) are located or process data outside the European Economic Area, mainly in the United States. In these cases, transfers are carried out on the basis of an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework for certified companies, or of the standard contractual clauses approved by the European Commission (article 46 GDPR). You can request more information by writing to hello@thenorthstudio.com.
Retention period of your personal data
In general, we will only keep your personal data for the time necessary to fulfil the purpose for which it was collected and in accordance with the legal basis for its processing and specifically:
We will keep the personal data provided through our ‘Contact us’ form for as long as it is necessary to respond to your request for information.
Meeting recordings and transcripts are kept for the periods described in the section on meetings, recordings and use of AI tools.
Once the purpose of the processing has been fulfilled, the data may be kept duly blocked during the applicable legal limitation periods for the exercise of legal actions, In accordance with the provisions of the art. 32 LOPDGDD.
Data Subject Rights
You have the right to access your personal data, to know which data are being processed and the processing operations carried out on them.
You also have the right to request the rectification of your data, if you consider them to be inaccurate.
You may also request the deletion of your data, in situations where they are no longer relevant or necessary for the purposes for which they were collected.
You may object to the processing of your data, if given your personal circumstances it is plausible and appropriate. You may also object at any time to receiving commercial communications and to the grouping of contacts linked to them. In such a case, we will stop processing the data except for legitimate reasons, such as complying with legal obligations or the defence of possible claims.
In certain circumstances, data subjects may request the restriction of processing, so that the controller will only reserve and use them in the cases authorised by law.
You may request the portability of your data. The right to portability consists of the right to receive the data that we are processing in electronic format also in an electronic, organised, legible and mechanised format either for direct transmission of the same to other data controllers or so that you can receive them yourself, to store them in the devices that you consider appropriate, without the need to transmit them to other data controllers.
You may exercise your rights, at any time and free of charge, by sending an e-mail to the following address hello@thenorthstudio.com
You have the right to file a complaint related to the processing of your personal data with the Spanish Data Protection Agency (www.aepd.es) when you consider that we have committed a breach of the applicable data protection regulations with regard to the processing of your personal information.
Data update
It is important that in order for us to keep the personal data updated, the user informs us whenever there has been any change, otherwise, we are not responsible for the veracity of the data.
The user guarantees that the personal data provided are truthful, guaranteeing that all the information provided corresponds to the real situation, that it is updated and accurate, being obliged to communicate any changes.
Third party data
If the user provides data of third parties for any purpose to NORTH DIGITAL STUDIO, S.L., he/she guarantees that he/she has obtained these data in a lawful manner, that he/she has previously informed the affected parties, obtaining their consent to communicate the data and that the information provided is accurate and truthful.
Mandatory nature of the information requested
All our forms have an asterisk (*) in the required fields. If the user does not provide these fields, or does not check the box to accept the privacy policy, the information will not be sent.
Minors personal data processing
Whoever provides the data through the forms on this website and accepts its treatment declares to be over 14 years old, prohibiting access and use of the portal to minors under that age.
Social media
The purpose of tools such as Facebook, Twitter, Instagram, etc. or other social networks is to give visibility and diffusion to the actions carried out by our organization. These tools store personal data on the servers of the respective services and are governed by their own privacy policy. We recommend reviewing and reading the terms of use and privacy policy of the social network at the time of registration, taking into account the different possibilities of configuration in relation to the degree of privacy of the user profile on the social network.
Likewise, the Company reserves the right to remove from its social networks any information published by third parties that violates the law, incites to do so or contains messages that violate the dignity of persons or institutions. As well as the right to block or denounce the profile author of these messages.
The user is also advised that all information and content they publish on the official pages of controller on the social networks may be viewed by other users of the official page and the social network platform. Consequently, all information and content published by the user on this social network will be shared with other users due to the nature of the service. The information will be processed in accordance with the privacy policy of the social network.
The controller bears no responsibility for the processing and subsequent use of personal data that may be carried out by the social network controller or other third-party service providers who may access such data due to the provision of their services or the exercise of their activity, or by third parties establishing hyperlinks to the social network.
Cookie processing
A cookie is a small file that is downloaded and stored on the user’s computer when the user accesses a web page and consent the download of the cookies. Cookies allow the web, among other things, store and retrieve information about browsing habits of the user or your computer and, depending on the information they contain and the way you use your computer, can be used to recognize the user.
The user has the option to prevent the generation of cookies by selecting the corresponding option in his browser program.
You can find out more by reading our Cookie Policy.
Finally, the user has the right to request the cancellation of their data by contacting NORTH DIGITAL STUDIO, S.L. Likewise, parents or guardians may in any case contact NORTH DIGITAL STUDIO, S.L. to block the access of minors in their care who have registered falsifying their identity.
Last updated: October 2026.
