Privacy policy
Last updated 17 September 2026
- Legal entity name
- PROD SERVICE FMLY, S.L.
- Tax number (CIF)
- B44733814
- Registered address
- Calle Valentuñana 12, 5ºC, 29601 Marbella (Málaga), Spain
- Registro Mercantil
- Registro Mercantil de Málaga, Tomo 6297, Libro 5205, Folio 149, Sección 8ª, Hoja MA-172605, Inscripción 1ª
- ketes@fmlyprod.com · marcos@fmlyprod.com
- Telephone
- +34 691 735 993
1. What this covers
This policy covers fmlyprod.com — the public site and the client portal — and the email you exchange with us through it. It uses "personal data" in the sense of the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD). How we handle personal data inside a production — crew, cast, location owners, agencies — is governed by the contracts and notices of each production, not by this page.
Questions and requests go to ketes@fmlyprod.com.
2. What we process, and why
| Who | Data | Why, and on what basis |
|---|---|---|
| Every visitor | Web server logs: your IP address, the page requested, time, browser type | Keeping the site up and stopping abuse — legitimate interest, Art. 6(1)(f) GDPR. Nothing else is collected from a visitor: no cookies, no analytics, no tracking pixels. |
| Client portal users | A username and a hashed password that we create for the people on your team; whether a password change is pending; a session marker in your browser | Giving your team access to the material of your production — performance of the contract with your company, Art. 6(1)(b) |
| Client portal users | Your feedback: which locations or frames you liked, the notes you wrote, when — recorded under your username, per project; a copy kept in your browser so nothing is lost offline | Producing what you asked for — Art. 6(1)(b). Your feedback is shared only with your own team and ours on that production. |
| People who email us | What you send us and our replies | Answering you and running the production — Art. 6(1)(b) and (f) |
| People in the material | Photographs and film of locations and, sometimes, of people: scouting images with passers-by, casting stills, crew on set | We are a production company; capturing this is our work. We hold the consents and releases the law requires (including Organic Law 1/1982 on the right to one's own image) and show the material only to the client team of that production. We do not put anyone's image on the public site or in our showreels without permission. |
We do not sell personal data, we do not advertise, and we do not profile anyone.
3. Who else sees it
- IONOS SE, Germany, hosts the site, the portal and its backups. All data at rest stays in the European Union.
- YouTube (Google) and Vimeo play the films on the Work page — but only after you press play and accept the notice in the player. Until then your browser never contacts them: the thumbnails you see are served by our own server. When you do play a film, they receive your IP address and may set their own cookies, under their own privacy policies. Both companies are certified under the EU-US Data Privacy Framework for the data that reaches the United States.
- Our email and office tools hold the messages you send us.
- Authorities, where a valid legal order compels us.
Nobody else. The fonts and scripts the site uses are served from fmlyprod.com itself.
4. How long we keep it
| Data | Kept for |
|---|---|
| Web server logs | 14 days |
| Client portal accounts | While your production is active, then removed with the project or at your request |
| Feedback in the portal (likes, notes) | Until the project is closed and delivered, and up to 24 months afterwards in case a question about the selection comes back; earlier at your request |
| Email correspondence | For the life of the production relationship and as long as the law on commercial and tax records requires |
| Backups | Rolling copies held by our hosting provider in Germany, expiring on their schedule |
5. Your rights
You can ask for access to the data we hold about you, its correction or deletion, a restriction of its processing, a copy in a machine-readable format, and you can object to processing based on legitimate interests. Write to ketes@fmlyprod.com; we answer within one month and may ask you to confirm your identity first. Exercising these rights is free.
You can also complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, aepd.es, or to the authority of the EU country where you live.
6. Security
Everything is served over HTTPS. Portal passwords are stored only as salted hashes and are verified on the server; a first sign-in with a password we set forces you to choose your own. The material in the portal is not reachable without a valid session, sign-in attempts are rate-limited, and access logs are kept for 14 days only. If a breach of personal data ever occurs, we notify the authority within 72 hours where the law requires it and the people affected without undue delay.
7. Children
The site and the portal are for professionals and are not directed at children. Where a production involves minors, their data and image are handled under that production's consents, never through this website.
8. Changes
When this policy changes we update the date at the top. If a change materially affects portal users, we tell them by email.
See also the cookie policy and the legal notice.