Legal
Privacy Policy
This is a courtesy translation. The binding version is the Spanish one, Política de Privacidad. In case of any discrepancy, the Spanish text prevails, because that is the language of the audience this site addresses and the one Spanish law requires.
This policy explains who processes your personal data when you submit an application or contact us through this website, for what purpose, for how long, and what you can demand at any time. It is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
The controller's registered address is missing. An incompletely identified controller is one of the infringements the Spanish Data Protection Agency penalises most often, and the cheapest one to avoid.
| Controller | ORVELLAMODELS SL |
|---|---|
| Tax ID (NIF) | B65831836 |
| Address | [Street, number, postcode and town] |
| orvella.models@gmail.com | |
| Trading name | ORVELLA Model Management |
2. What data we process
- Identity and contact data: first name and surname, email address, phone number (optional), city, Instagram handle.
- Professional profile data: age, height and the categories of work you select.
- Image: the photographs you link to. Your image is personal data and we use it only to assess your application.
- Free-text content: whatever you write in the message field.
- Technical data: only if you accept analytics cookies (see the Cookie Policy).
We neither ask for nor need special categories of data (health, ethnic origin, beliefs). Please do not include any in the message field or in your photographs.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Receiving, assessing and replying to your application; putting you forward to castings and brands where there is a fit. | Your consent (Art. 6(1)(a) GDPR), given by ticking the box on the form. |
| Sending you casting alerts and news by email. | Your specific, separate consent (Art. 6(1)(a) GDPR and Art. 21 of Spanish Law 34/2002). It is optional and can be withdrawn. |
| Aggregate measurement of website use. | Your consent given in the cookie banner. |
| Handling your rights and complying with legal obligations. | Legal obligation (Art. 6(1)(c) GDPR). |
Providing the data marked as required is necessary for us to assess the application. If you do not provide it, we cannot process your application.
4. Applicants under 18
If you are under 18, your parent or legal guardian must be aware of and authorise your application. In addition, any subsequent work requires prior authorisation from the labour authority under Article 6(4) of the Spanish Workers' Statute. We will not arrange any engagement involving a minor without that written authorisation. If we identify data belonging to a person under 14 without their guardian's consent, we will delete it.
5. How long we keep it
- Applications not selected: one year from receipt, unless you ask us to erase them sooner.
- Applications that lead to representation: for the duration of the relationship and, afterwards, for the applicable statutory limitation periods.
- Consent to commercial communications: until you unsubscribe.
6. Who receives it
We do not sell your data and we do not disclose it to third parties for advertising purposes. The following access it as processors, under an Article 28 GDPR agreement:
- Form delivery provider (Web3Forms), which carries the message to our inbox.
- Web hosting and email providers.
- Analytics provider, only if you have accepted analytics cookies.
To complete before publishing: name your actual hosting, email and analytics providers here, and confirm that you have a signed data processing agreement with each of them.
In addition, when your profile fits a casting, we may disclose your data and your images to the relevant brand or casting director. That disclosure is the very purpose of your application and is covered by your consent; we will tell you who it is sent to.
7. International transfers
Some providers may store data outside the European Economic Area. Where that happens, the transfer relies on a European Commission adequacy decision or on Standard Contractual Clauses, with any additional safeguards required. You may ask us for a copy of those safeguards.
8. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent without affecting the lawfulness of processing carried out beforehand.
Write to orvella.models@gmail.com stating the right you are exercising and enclosing a copy of a document proving your identity. We will reply within one month at the latest.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), www.aepd.es, C/ Jorge Juan 6, 28001 Madrid, Spain. If you are resident in another EU country, you may also complain to your own national supervisory authority.
9. Security
We apply technical and organisational measures to protect your data: encryption in transit (HTTPS), access control over the inbox where applications are received, and periodic review of our providers. Should a security breach occur that poses a risk to your rights, we will inform you and notify the Spanish Data Protection Agency within 72 hours.
10. Changes
We may update this policy if our processing activities or the applicable law change. The version in force is always the one published on this page.
Last updated: 2026.