El Sótano Grupo Invest
EL SÓTANO

Privacy Policy

How we handle your personal data

This Privacy Policy describes how CREATIVEREEL VIDEO AGENCY S.L. processes the personal data of users of this website and of clients of El Sótano Mallorca, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD).

Last updated07/06/2026

1. Identity of the Data Controller

The Data Controller is CREATIVEREEL VIDEO AGENCY S.L., Spanish tax ID B44606812, registered office at Calle Na Puig 191, 07669 Felanitx, Illes Balears, España. For data protection enquiries, contact us at el-sotano@creativereel.de.

2. Data we process, purposes and legal basis

We only process the data strictly required for each purpose, always on a legal basis under Article 6 GDPR.

Website contact form

Identification and contact data (name, email, phone, company) and the content of your message. Purpose: handling your enquiry and replying. Legal basis: consent (Art. 6(1)(a) GDPR) and legitimate interest in corresponding with you (Art. 6(1)(f)).

Email communication

When you write directly to info@sotano-grupo.com or el-sotano@creativereel.de we process the data you provide in order to reply. Legal basis: consent and pre-contractual measures (Art. 6(1)(a) and 6(1)(b) GDPR).

Phone calls and WhatsApp

We process your contact details and the conversation solely to handle your request. Legal basis: consent (Art. 6(1)(a) GDPR). Calls are not recorded.

Reservations and booking requests

For barber appointments, Sim Racing sessions, Fashion enquiries, wrapping requests at All We Can Print and CreativeReel productions we process the data required to deliver the service. Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).

In-store and barber customer data

We process identification and tax data of clients to issue invoices and meet accounting and tax obligations. Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR).

Website analytics

If you have accepted the «Analytics» category, we may measure aggregated website usage with statistical tools. Without your consent, no such tool is loaded. Legal basis: consent (Art. 6(1)(a) GDPR).

Cookies and similar technologies

Please see our Cookies Policy. Non-essential cookies are only activated after your consent.

Social networks

When you interact with our profiles, data is subject to the policy of the relevant platform. We only process the data you choose to share with us.

Embedded media (video, maps, embeds)

Embedded content (YouTube, Vimeo, Google Maps, Instagram, LinkedIn, etc.) is not loaded without your express consent in the «External media» category.

Marketing communications and newsletter

If you voluntarily subscribe, we process your email to send you news. You can unsubscribe in every message. Legal basis: consent (Art. 6(1)(a) GDPR).

3. Hospitality, barber and experiences section

As a hospitality and lifestyle group, we provide in-person services. To do so we may process the following data for the purposes shown:

  • Online reservations and barber appointment management
  • Customer profiles to keep service history and preferences
  • Contact forms and booking requests
  • Gift voucher requests and proofs of purchase
  • Customer communication to confirm, change or cancel bookings
  • Marketing campaigns and newsletter (only with explicit consent)
  • Registrations for hospitality events and VIP experiences
  • Promotions related to fashion, sneakers and drops
  • Event photo and video: images of identifiable individuals are only published with consent

4. Social media compliance

When you voluntarily interact with our profiles, some of your personal data may be processed by the relevant platform under its own policies:

  • Instagram — Operated by Meta Platforms Ireland Ltd.
  • Facebook — Operated by Meta Platforms Ireland Ltd.
  • TikTok — Operated by TikTok Technology Limited.
  • LinkedIn — Operated by LinkedIn Ireland Unlimited Company.
  • YouTube — Operated by Google Ireland Limited.

5. Retention periods

Enquiries and forms without contract
12 months from the last interaction
Clients with a service delivered
Duration of the relationship + 6 years for accounting obligations
Invoicing and tax data
6 years (Spanish Commercial Code) — up to 10 years (AML rules)
Newsletter subscribers
Until consent is withdrawn
Cookie consent records
12 months

6. Data subject rights

You may exercise the following rights at any time by emailing el-sotano@creativereel.de with a copy of an identity document:

  • Right of access — Know which personal data we process about you.
  • Right of rectification — Have inaccurate or incomplete data corrected.
  • Right of erasure — Have your data deleted when no longer necessary.
  • Right of restriction — Restrict processing in certain situations.
  • Right of portability — Receive your data in a structured, commonly-used format.
  • Right to object — Object to processing based on legitimate interest.
  • Right to withdraw consent — Withdraw your consent at any time, without retroactive effect.

If you consider that processing does not comply with GDPR, you may file a complaint with the Agencia Española de Protección de Datos (AEPD) — www.aepd.es.

7. International data transfers

Some of our technology providers (hosting, analytics, social networks, video) may process data outside the European Economic Area. Where this occurs we ensure adequate safeguards under Art. 46 GDPR (European Commission Standard Contractual Clauses or adequacy decisions).

8. Security measures

We apply appropriate technical and organisational measures to protect personal data against destruction, loss, alteration or unauthorised access, in accordance with Art. 32 GDPR. These include end-to-end TLS encryption, access controls, backups and internal training.

9. Changes to this policy

This Privacy Policy may be updated to reflect legal or service changes. The version currently in force is the one published on this website.