Privacy Policy

1. Data Controller

The data controller for your personal data is:

For any inquiry related to the processing of your personal data, you can contact us via the email address indicated above.

2. Data we collect

Depending on your interaction with our website and our services, we may collect the following categories of personal data:

2.1. Data provided directly by the user

• Identification data: first name, last name, company or brand name.
• Contact data: email address, phone number.
• Professional data: job title, industry, website, social media profiles.
• Communication content: messages sent through contact forms, email or other channels.

2.2. Data collected automatically

• Browsing data: IP address, browser type, operating system, pages visited, time spent, referral source.
• Cookies and similar technologies: information collected through analytical and functional cookies. For more details, please refer to our Cookie Policy.

2.3. Data provided by third parties

• Information from social media platforms when you interact with our profiles or campaigns.
• Data provided by our clients in the context of providing UGC content creation and influencer marketing services.

3. Purpose of processing

We process your personal data for the following purposes:

• Inquiry and contact management: responding to your information requests sent through contact forms, email or calls.
• Service provision: managing the contractual relationship arising from the engagement of our UGC content creation and influencer marketing services.
• Sending commercial communications: sending information about our services, news and offers, provided you have given your express consent or a prior business relationship exists.
• Website improvement: analyzing the use and performance of our website through analytics tools to improve user experience.
• Legal compliance: fulfilling applicable legal and regulatory obligations.
• Collaboration management: managing relationships with content creators and influencers who collaborate with TKOC.

4. Legal basis for processing

The processing of your personal data is based on the following legal grounds, in accordance with Article 6 of the GDPR:

• Consent (Art. 6.1.a GDPR): when you voluntarily provide your data through contact forms or subscribe to commercial communications. You may withdraw your consent at any time.
• Performance of a contract (Art. 6.1.b GDPR): when processing is necessary for the provision of the contracted services or to take pre-contractual measures at your request.
• Legitimate interest (Art. 6.1.f GDPR): for the improvement of our services, website security and statistical analysis of browsing, provided that your fundamental rights and freedoms do not prevail.
• Compliance with a legal obligation (Art. 6.1.c GDPR): when processing is necessary to comply with a legal obligation applicable to Dama Platforms.

5. Recipients of data

Your personal data may be communicated to the following recipients:

• Technology service providers: companies that provide us with web hosting, email, web analytics and management tools (acting as data processors in accordance with Art. 28 of the GDPR).
• Social media platforms: in the context of influencer marketing campaigns and content management.
• Professional advisors: legal, accounting and tax advisors when necessary for compliance with legal obligations.
• Public authorities: when required by a legal obligation.

We will not sell, rent or share your personal data with third parties for their own marketing purposes without your express consent.

6. International data transfers

Some of the service providers we use may be located outside the European Economic Area (EEA). In such cases, we ensure that international data transfers are carried out with adequate safeguards in accordance with the GDPR, including:

• Adequacy decisions of the European Commission (Art. 45 GDPR).
• Standard contractual clauses approved by the European Commission (Art. 46.2.c GDPR).
• Other transfer mechanisms recognized by applicable regulations.

You may request additional information about the safeguards applied to international data transfers by contacting us at clientes@thekingofcontent.agency.

7. Data retention period

We will retain your personal data for the time necessary to fulfill the purpose for which it was collected and, subsequently, for the legally established periods:

• Contact data and inquiries: for the duration of the business relationship and, once terminated, for the applicable legal limitation period (generally, 5 years in accordance with Art. 1964 of the Spanish Civil Code).
• Contractual data: for the duration of the contract and, subsequently, for a minimum period of 6 years in accordance with commercial legislation (Art. 30 of the Spanish Commercial Code) and 4 years in accordance with tax legislation.
• Browsing and analytics data: retained for a maximum of 26 months, in accordance with the recommendations of the Spanish Data Protection Agency (AEPD).
• Commercial communications: until you withdraw your consent.

Once the indicated periods have elapsed, we will proceed to delete or anonymize the data.

8. User rights

In accordance with the GDPR and the LOPDGDD, you have the right to:

• Right of access (Art. 15 GDPR): obtain confirmation of whether we are processing your personal data and, if so, access to the data and information related to the processing.
• Right to rectification (Art. 16 GDPR): request the correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17 GDPR): request the deletion of your personal data when, among other reasons, they are no longer necessary for the purpose for which they were collected.
• Right to object (Art. 21 GDPR): object to the processing of your personal data, including profiling, in certain circumstances.
• Right to data portability (Art. 20 GDPR): receive your personal data in a structured, commonly used and machine-readable format, and transmit them to another data controller.
• Right to restriction of processing (Art. 18 GDPR): request the restriction of the processing of your data in certain circumstances.
• Right not to be subject to automated decisions (Art. 22 GDPR): not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you.
• Right to withdraw consent: when processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

9. How to exercise your rights

To exercise any of the rights mentioned above, you may contact us through the following means:

Your request must include:

• Full name of the data subject.
• Copy of your national ID card, residency card or equivalent identification document.
• Clear description of the right you wish to exercise.
• Email address for notifications.

We will respond to your request within a maximum period of one month from receipt, in accordance with Article 12.3 of the GDPR. This period may be extended by a further two months in the case of complex or numerous requests, subject to prior notification.

We also inform you that you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you believe that the processing of your personal data violates applicable regulations:

10. Cookie Policy

Our website uses cookies and similar technologies to improve your browsing experience, analyze traffic and personalize content.

For detailed information about the cookies we use, their purpose, duration and how to manage them, please refer to our Cookie Policy.

11. Data security

At Dama Platforms, we have adopted appropriate technical and organizational measures to ensure the security of your personal data and prevent its alteration, loss, unauthorized processing or access, in accordance with Article 32 of the GDPR. Among other measures:

• Encrypted communications using HTTPS/SSL protocol.
• Restricted access controls for personal data.
• Use of service providers that comply with recognized security standards.
• Periodic review of implemented security measures.
• Staff training and awareness on data protection matters.

However, no data transmission or storage system is completely secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at clientes@thekingofcontent.agency.

12. Amendments to this Privacy Policy

Dama Platforms reserves the right to modify this Privacy Policy at any time to adapt it to legislative or case-law developments or changes in our data processing practices.

Any modification will be published on this page with the corresponding update of the "Last updated" date indicated at the beginning of this document. We recommend that you periodically review this policy to stay informed about how we protect your data.

In the event of significant changes affecting the processing of your personal data, we will notify you expressly through the appropriate means (email or notice on the website).