Commercial Image Use Authorization Spain (Autorización de Uso de Imagen Comercial)

A Commercial Image Use Authorization Spain (Autorización de Uso de Imagen Comercial or Cesión de Derechos de Imagen) is a written consent document through which a natural person (the subject — sujeto titular de la imagen) grants a business, photographer, or media producer (the beneficiary — cesionario) the right to reproduce, publish, distribute, and use that person's photographic image, video footage, or other likeness for commercial purposes, including advertising campaigns, marketing materials, social media, and digital media. The authorization is governed principally by Ley Orgánica 1/1982, de 5 de mayo, de protección civil del derecho al honor, a la intimidad personal y familiar y a la propia imagen (LO 1/1982), which recognizes the right to one's own image (derecho a la propia imagen) as a fundamental right under Article 18.1 of the Constitución Española 1978.

Article 2.2 of LO 1/1982 establishes that the owner of the right to one's own image may grant express consent (consentimiento expreso) to third parties to use their image — limiting or waiving, for the agreed scope and purpose, the protections otherwise afforded by the law. Without such express consent, any commercial use of a person's image constitutes an unlawful intrusion (intromisión ilegítima) under Article 7.6 LO 1/1982, entitling the subject to seek injunctive relief and damages (indemnización) before the Juzgado de Primera Instancia under Article 9 LO 1/1982. The Tribunal Supremo has consistently held that the right to one's own image is inalienable in its core — the authorizing party may grant use rights but cannot permanently renounce the fundamental right itself under Article 1 LO 1/1982.

The Reglamento (UE) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPDGDD) add a data protection dimension to commercial image use in Spain: a person's photographic image is personal data under GDPR Article 4(1) and, in certain contexts — such as images enabling biometric identification — constitutes a special category of data under GDPR Article 9. The Agencia Española de Protección de Datos (AEPD) has issued Guidelines on the Processing of Images (Guía sobre tratamiento de imágenes) confirming that commercial use of images requires a valid legal basis under GDPR Article 6 — consent under Article 6.1(a) GDPR being the most appropriate basis for commercial image use authorizations. The AEPD has sanctioned companies for using employees' and customers' images in marketing without GDPR-compliant consent, imposing fines under Article 83 GDPR.

Spain's Ley de Propiedad Intelectual (RDL 1/1996 — LPI) separately protects the copyright (derechos de autor) in photographs as artistic or documentary works under Articles 10 and 128 LPI — copyright in the photograph belongs to the photographer (fotógrafo), while the subject's image rights belong to the subject under LO 1/1982. A Commercial Image Use Authorization addresses the subject's consent under LO 1/1982 and GDPR — it does not transfer the photographer's copyright in the image, which requires a separate copyright assignment or licence under Articles 43–50 LPI.

The Dirección General de Seguridad Jurídica y Fe Pública (DGSJFP) has confirmed through binding resolutions that Commercial Image Use Authorizations are valid as private documents (documentos privados) signed by the subject — notarisation is not required for enforceability under LO 1/1982, though notarial authentication provides additional legal certainty for high-value commercial campaigns.

A Commercial Image Use Authorization Spain is needed whenever a company, advertising agency, photographer, or media producer wishes to use photographs, video footage, or other recordings of an identifiable individual in commercial, promotional, or marketing contexts.

The authorization is needed for advertising campaigns (campañas publicitarias) — television commercials, digital advertising, outdoor billboards (vallas publicitarias), print advertising, and social media content — where models, actors, athletes, or ordinary members of the public appear in materials promoting products or services. Advertising agencies (agencias de publicidad) and brands operating in Spain are required under LO 1/1982 to hold signed image use authorizations from all identifiable individuals appearing in their commercial materials.

A Commercial Image Authorization is needed for corporate communications — company websites, annual reports, internal newsletters, and promotional brochures — that include photographs of employees, clients, or other individuals. The AEPD has sanctioned Spanish companies for publishing employee photographs on corporate websites without GDPR-compliant consent, and many companies now include image use consent within their new employee onboarding documentation alongside employment contracts.

The authorization is needed for influencer marketing agreements (acuerdos con influencers) under which an individual (influencer) authorizes a brand (marca) to use their social media content — including photographs and videos — as part of a commercial partnership, subject to the applicable Código de Conducta Publicidad de la Asociación para la Autorregulación de la Comunicación Comercial (Autocontrol) and CNMC advertising transparency requirements.

A Commercial Image Authorization is required for sports photography and sports event coverage (cobertura de eventos deportivos) where images of identifiable athletes or spectators are used in commercial contexts — for example, in sports equipment advertising, club membership campaigns, or event promotion materials. The Real Federación Española de Fútbol (RFEF) and Liga Nacional de Fútbol Profesional (LaLiga) have standard image rights licensing frameworks for player images under LO 1/1982.

The authorization is also needed for stock photography platforms (plataformas de fotografía de archivo) — such as Getty Images Spain, Adobe Stock, and Shutterstock's Spanish operations — where uploaded images of identifiable individuals require a model release form (autorización del modelo) complying with both LO 1/1982 and GDPR before the images can be licensed for commercial use to third-party buyers in Spain and across the EU.

A valid Commercial Image Use Authorization Spain under LO 1/1982 Article 2 and GDPR (Reglamento UE 2016/679) must contain the following essential elements to be legally effective and AEPD-compliant.

Identification of the Subject: Full name, DNI or NIE, and address of the person granting image use rights (the titular del derecho a la propia imagen). For minors under 18, the authorization must be signed by the parent or legal guardian exercising patria potestad under Código Civil Article 154, and must separately document the minor's own consent if the minor is 12 years or older under Article 3 LO 1/1982. The AEPD requires that authorizations from minors include express parental consent under both LO 1/1982 and GDPR Article 8.

Identification of the Beneficiary: Full name, NIF, and address of the company, photographer, or producer authorized to use the image (the cesionario). Where the authorization is granted to a photography agency or media production company, the specific commercial purpose and any third-party sub-licensing rights should be identified.

Description of Images and Content: A precise description of the images, video recordings, or other audiovisual material subject to the authorization — the date and location of the photo or video session, the type of content (portrait, action photography, video interview), and any restrictions on the images to which the authorization applies. The authorization should identify specific shoots or productions to which it relates rather than granting an open-ended authorization over all future images.

Purpose and Scope of Use: A clear statement of the authorized commercial purposes — advertising campaigns, social media marketing, corporate website use, print materials, digital platforms, stock photography licensing, or other specified uses. The Tribunal Supremo has held that image use authorizations must be interpreted restrictively (interpretación restrictiva) under LO 1/1982 — use beyond the agreed scope constitutes an unlawful intrusion (intromisión ilegítima) under Article 7.6 LO 1/1982.

Geographic Scope: The geographic territory in which the images may be used — national (Spain only), European Union, or worldwide. This is significant for data protection purposes under GDPR Articles 44–49, which impose additional safeguards for transfers of personal data (including images) to third countries outside the European Economic Area.

Duration: The period during which the authorization is valid — a fixed term (término fijo) with start and end dates, or open-ended (por tiempo indefinido). The subject retains the right to revoke consent for future use at any time under LO 1/1982 Article 2 and GDPR Article 7(3), with reasonable notice to the beneficiary — but cannot retroactively invalidate uses already made during the validity period.

Consideration: A statement of whether the authorization is granted for remuneration (remuneración or contraprestación económica — modelling fee, participation fee, or other payment) or is granted gratuitously (a título gratuito). Gratuitous authorizations are more vulnerable to revocation arguments — a reconsideration payment (compensación económica) strengthens the contractual nature of the authorization under Articles 1254–1258 of the Código Civil.

GDPR Data Processing Information: A GDPR-compliant data processing notice under Articles 13–14 GDPR and Article 11 LOPDGDD, informing the subject of: the identity and contact details of the data controller (responsable del tratamiento); the legal basis for processing (consent — Article 6.1(a) GDPR); the purpose (commercial image use); the duration of data retention; any international transfers; and the subject's rights to access, rectification, erasure (derecho al olvido — Article 17 GDPR), restriction, and objection, managed through the Agencia Española de Protección de Datos (AEPD — aepd.es).

Right of Revocation: A statement confirming the subject's right to revoke the authorization at any time under LO 1/1982 and GDPR Article 7(3), and the procedure for revocation (written notice to the beneficiary). Forms-legal.com provides this Commercial Image Use Authorization Spain template as a legally sound starting point — always review with an abogado specializing in derecho al honor e imagen and data protection before major commercial campaigns.