English · Versión en español
Privacy policy
Last updated: 15 October 2026
Who is responsible
IAMT Music 2021 SCP, NIF J05494513, c/ Suïssa 8, 2-1, 08023 Barcelona, Spain. Contact: info@nastiamua.com.
What we keep and why
Wedding inquiries and quotes
- Data:
- Name, email, phone, wedding date, place and venue, services, planner and photographer if you give them, your message and how you heard about us.
- Legal basis:
- Steps you ask for before a contract (GDPR art. 6.1.b).
- How long:
- If no booking follows, anonymised after 24 months, together with the record of what you accepted.
Bookings, payments and invoices
- Data:
- The booking details, payment confirmations and invoices. Card details are handled by Stripe; we never see the full card number.
- Legal basis:
- Performing the contract (art. 6.1.b) and our tax and accounting obligations (art. 6.1.c).
- How long:
- 6 years, as Spanish commercial and tax law requires.
Record of what you accepted
- Data:
- Which terms and consents you accepted, the document version, date and time, IP address and browser.
- Legal basis:
- Proving the contract and your consents (art. 6.1.c and 6.1.f).
- How long:
- For bookings, 6 years after the wedding; without a booking, until the inquiry is anonymised.
Photos of your look
- Data:
- Photos of your bridal look in the portfolio and on social media, only if you tick that separate, optional box.
- Legal basis:
- Your consent (art. 6.1.a).
- How long:
- Until you withdraw consent; then nothing new is published.
News and offers
- Data:
- Your email, only if you opt in.
- Legal basis:
- Your consent (art. 6.1.a).
- How long:
- Until you unsubscribe.
Website statistics
- Data:
- The page viewed, the site you came from, country and device type. No cookies. Visits are counted with an anonymous code made from the IP address and browser together with a key that changes and is deleted every day; the IP itself is not stored, and after the day nobody can link a visit to you.
- Legal basis:
- Our legitimate interest in knowing how the site is used (art. 6.1.f).
- How long:
- 25 months.
Who else handles it
We don’t sell or share your data for advertising. These providers process it on our behalf:
- Vercel Inc. (website hosting, USA)
- Neon (database, servers in Frankfurt, EU)
- Google Ireland Ltd (email and calendar, Google Workspace)
- Cloudflare (delivery of the portfolio images, no personal data)
- Stripe Payments Europe Ltd (online payments, Ireland)
Transfers to the USA rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Our tax advisor and the authorities receive data only when the law requires it.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format, and you can withdraw any consent at any time without affecting what was done before. Write to info@nastiamua.com with the subject “Data protection”. If you are not satisfied, you can complain to the Spanish Data Protection Agency (aepd.es). We make no automated decisions or profiles about you.
Cookies
The public website sets no cookies, so there is no cookie banner. Only the private admin area uses a strictly necessary sign-in cookie. If this ever changes, we will ask for your consent first.