Privacy policy and processing of information of the Catalan Film and Audiovisual School of Catalonia


In accordance with the provisions of article 11 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD) and article 13 of the General Data Protection Regulation 2016/679 (GDPR), we hereby inform you of the following:

1.1.- Identification of data controllers:

The data controller is the entity that decides the collection of data and the use that will be made of the information it manages. In this case it is: the Fundació Privada Escola Superior de Cinema i Audiovisuals de Catalunya (hereinafter, ESCAC), with registered office at Plaça de la Harinera n.º 9, 08222 Terrassa (Barcelona), with NIF G60464229, registered in the Register of Foundations. Contact e-mail: Telephone: +34 937 361 555 You can contact the data protection officer at the email address The officer is the person who ensures that the rules governing the processing of information by the controller are applied correctly.

1.2.- Purpose of data processing, storage periods and legal basis.

1.2.1.- General Purpose

The data controller will use the data you provide us with by any means for as long as you maintain a relationship with them and will be incorporated, as you provide them to us, into a database owned by the data controller. We will use the data for: - providing you with the services you request from us - sending you information about our activities by e-mail, whatsapp or post mail. The legal basis for this processing will be the contractual or other relationship you have with the controller and the consent you give by accepting this notice. The data generated will be kept for as long as you maintain the relationship with the data controller and, subsequently, for the period of limitation of legal actions which, in some cases, may be up to 10 years.

1.2.2.- Image processing.

The data controller documents the events of a public nature that it organises with photographs and videos in order to disseminate them on its website or other spaces for public dissemination of information such as: the website itself, social networks where the data controller has created a profile and its own publications or press releases. Our social networks are: Instagram, X, Facebook, Tiktok and LinkedIn. You can obtain more information on this section by consulting the controller's website or by contacting the DPD. The processing of these images is legitimised with the consent of those affected or in application of article 8 of the LO 1/1982 on the protection of the right to honour, privacy and self-image. The images captured will be kept for historical purposes until the authorisation you have given us is revoked.

1.3.- Categories of recipients.

In order to comply with the aforementioned purposes, the following will have access to your data: - Personnel duly authorised by the data controller. - The suppliers necessary to comply with your request. - The public administration within the scope of its competences. You may obtain further information by consulting the DPD.

1.4.- International transfer of data.

The data controller uses the following platforms that may involve data transfers outside the Schengen area:
  1. Google (G-Suite). For more information:
  2. Microsoft. For more information:
  3.  Mailchimp: For more information:
  4. Social networks advertised on our website
All information about the rights of the users who have allowed the digitized treatment can be found in the legal notices of the websites containing the software and applications. As the access is free, we consider the whole content of the notices to be reproduced. Given the extent of the contents of the published policies, you may request a copy by contacting the data controller at the addresses given in point 1.1 of this document.

1.5.- Rights as a data subject

You have the right to access, rectify, delete, oppose the processing of your data, to limit the processing, to request data portability, not to be subject to automated individual decisions and to revoke the consent you have given. To exercise these rights, you may write to the addresses of the data controller indicated in this policy, or send an e-mail to with the text "DATA PROTECTION" in the subject line and attaching a photocopy of your ID card, NIE or passport to this e-mail.

1.6.- Right of complaint.

The competent body for the correct application of the regulations on the processing of information is the Spanish Data Protection Authority, with address at Calle Jorge Juan n. 6, Madrid.

1.7.- Obligations of the data subject.

The data subject must provide truthful and updated information in all data collection processes, and is solely responsible for any breach of this obligation. The data collection forms are marked with the data that must be provided, depending on the request made by the data subject. Failure to provide this data may make it impossible to participate in the activity or to provide the service requested.

1.8.- Creation of profiles

In order to achieve the objectives of the data controller and, above all, to provide a more personalised, accurate and efficient service to the user, it is sometimes necessary to draw up profiles of the recipients of the services. In no case is profiling done in an exclusively automated manner.  


It is understood that the user accepts the established conditions if he/she presses the 'ACCEPT' button found on all the data collection forms, or if he/she sends a message by e-mail to the contact addresses given on the website. The personal data are stored in the general administration database of the data controller, which, in any case, guarantees the technical and organisational measures to preserve the integrity and security of the information it processes.  


The general database is equipped with the mandatory security document and has all the technical means at its disposal to prevent the loss, misuse, alteration, unauthorised access or theft of the data you provide us with. The processing of personal data is in accordance with the provisions of Organic Law 3/2018 on data protection and guarantee of digital rights and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.  


To make it easier for you to research resources that we believe are of interest to you, you may find links to other sites on this website. This privacy policy only applies to this website. The data controller does not guarantee compliance with this policy on other websites, nor is it responsible for access via links from this site.