Skip to content
Centro • Mon-Fri 10:00-19:00, Sat 10:00-14:00
952 64 70 91 • By appointment

Data Processing Agreement (DPA)

The binding version is the Spanish version: DPA

Updated 14 October 2026

Simplified Summary:

  • This document governs how Stionhub S.L. handles personal data contained within the archives entrusted to us by our professional clients.
  • We act strictly as a "Data Processor" following the instructions of the client (the Data Controller).
  • We utilize secure technical providers, specifically Arsys Internet S.L.U. and FormSubmit, for infrastructure and communication.
  • We guarantee the secure deletion of digital copies after the period specified in our business rules.

1. Definitions and Parties

This Data Processing Agreement (hereinafter, "DPA") is entered into between the Client (acting as the Data Controller) and Stionhub S.L., located at Calle Larios, 14, 29005 Málaga, represented by its director Cristina Blanco Fernández, with a share capital of 6,000 € (acting as the Data Processor).

This agreement is governed by the European General Data Protection Regulation (GDPR) 2016/679 and the Spanish Organic Law 3/2018 (LOPDGDD).

2. Purpose and Duration

The purpose of this DPA is to ensure that the processing of personal data carried out by Stionhub S.L. during the digitization of analog media is performed in accordance with current legislation. This agreement enters into force upon the contracting of services and remains valid as long as the Client maintains a commercial relationship with Stionhub S.L., as detailed in our terms of service.

3. Categories of Data and Subjects

Processing is limited to the data contained in the physical media provided by the client (videos, audios, photographs). The affected subjects are the individuals appearing in or mentioned within said files. Categories of data may include images, voices, and any personal information contained in the original material.

4. Processor Obligations

Stionhub S.L. undertakes to:

  • Process data solely according to the documented instructions of the Controller.
  • Ensure that all authorized personnel are subject to strict confidentiality obligations.
  • Not use the data for its own purposes nor transfer it to unauthorized third parties.
  • Assist the Controller in fulfilling data subject requests (access, rectification, erasure).

5. Sub-processors

The Client authorizes Stionhub S.L. to engage the following sub-processors necessary for the provision of the service:

  • Arsys Internet S.L.U. (C/ Madre de Dios 21, 26004 Logroño), for file hosting and server management.
  • FormSubmit (US-based services), for the management of contact forms and initial requests.

Stionhub S.L. ensures that sub-processors comply with security standards equivalent to those agreed upon in this DPA.

6. Security and Notification

We implement appropriate technical and organizational measures to prevent the loss, alteration, or unauthorized access to files. In the event of a data security breach, Stionhub S.L. will notify the Controller without undue delay, providing the necessary information to comply with the notification requirements of the Spanish Data Protection Agency (AEPD).

7. Data Return and Erasure

Once the service is completed and digital files are delivered, Stionhub S.L. will maintain a backup copy only for the storage period defined in our business rules (60 calendar days). After this period, all digital copies will be securely deleted from our servers and media, unless the Client expressly requests their conservation in writing.

8. Audit and Applicable Law

Stionhub S.L. will provide the Controller with the necessary information to demonstrate compliance with its obligations. Any dispute arising from this agreement shall be submitted to the jurisdiction of the courts of the city of Málaga.

For any inquiries, you may contact us at [email protected] or call 952 64 70 91.