PRIVACY POLICY

Last updated: January 20, 2026

This Privacy Policy regulates the processing of personal data of users who access and use the OTT platform plus.cazavision.com (hereinafter, the "Platform"), in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and other applicable data protection regulations.

1. Data Controller

The entity responsible for processing the personal data collected through the Platform is:

Ociovisión Televisión S.L.
- VAT ID (NIF): B-85737468
- Registered office: C/ Valportillo Primera nº 11, 2º, 28108 Alcobendas, Madrid, Spain
- Contact email: gdpr@cazavision.com

2. Scope of Service

The Platform offers an OTT subscription service for audiovisual content, accessible through:

- Web browsers (Web TV)
- Mobile applications (iOS and Android)
- Smart TV applications:
- Android TV
- Samsung Smart TV
- LG Smart TV

3. Personal Data We Process

Depending on the use of the Platform, the following categories of data may be processed:

- Identifying data: name, surname, email address.
- Account data: access and authentication credentials.
- Subscription and payment data: subscription status, payment method, transaction identifiers (full credit card details are not stored).
- Consumption data: viewing history and content usage.
- Technical data: IP address, device identifiers, operating system, browser, Smart TV or terminal model.
- Communication data: inquiries to user support service.
- Commercial communication preferences.

4. Purposes of Processing and Legal Basis

Purpose: 4.1 Provision of the OTT service (access management, subscription, content consumption, and user support)
Legal basis: Performance of a contract (Art. 6.1.b GDPR)

Purpose: 4.2 Payment and billing management (payments, accounting, and tax obligations)
Legal basis: Performance of a contract and compliance with legal obligations (Art. 6.1.b and 6.1.c GDPR)
Observations: Payments are processed through Stripe, PayPal, Apple App Store, and Google Play Store. Ociovisión does not access or store full credit card details.

Purpose: 4.3 Commercial communications and *newsletter* (sending information about content, news, promotions, or services)
Legal basis: User consent (Art. 6.1.a GDPR)
Observations: The user may withdraw their consent at any time.

Purpose: 4.4 Security and fraud prevention (ensuring security and preventing misuse)
Legal basis: Legitimate interest (Art. 6.1.f GDPR)

Purpose: 4.5 Analysis and service improvement (statistical and technical analysis of Platform usage)
Legal basis: Legitimate interest or consent, as applicable

5. Data Recipients

Personal data may be communicated to:

- Technological infrastructure and hosting providers.
- OTT and Smart TV platform providers.
- Payment and billing platforms (Stripe, PayPal, Apple, Google).
- Analytics, support, and communications providers.
- Public administrations when there is a legal obligation.

All providers act as data processors, under contracts that guarantee compliance with the GDPR.

6. International Data Transfers

Some technology providers may be located outside the European Economic Area. International transfers are carried out with appropriate safeguards, such as:

- Standard contractual clauses approved by the European Commission.
- Adequacy decisions, where applicable.

7. Data Retention Period

Personal data will be retained:

- As long as the user maintains an active account or a valid subscription.
- As long as they do not withdraw their consent for commercial communications.
- During the periods required by tax, accounting, or legal regulations.

Once these periods have ended, the data will be securely blocked or deleted.

8. User Rights

The user may exercise at any time the rights of:

- Access
- Rectification
- Erasure
- Objection
- Restriction of processing
- Portability
- Not to be subject to automated individual decision-making

To exercise them, you can contact us via email at gdpr@cazavision.com.

Likewise, the user has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the competent supervisory authority in Portugal.

9. Data Security

Ociovisión adopts the necessary technical and organizational measures to guarantee the security, confidentiality, integrity, and availability of personal data.

10. Minors' Data

The Platform is aimed exclusively at individuals over 18 years of age. Personal data of minors is not knowingly processed.

11. Cookies

The Platform uses its own and third-party cookies. The user can consult detailed information about their use, configuration, and management in the Cookie Policy available on the Platform.

12. Modification of the Privacy Policy

Ociovisión reserves the right to modify this Privacy Policy to adapt it to legislative, technical, or service operational changes. In the event of significant modifications, users will be duly informed.