Data controller
- Controller
- Memento Music S.L.
- Trading name
- Memento Creative Group
- NIF (tax ID)
- B75699629
- Registered office
- C/ de l'Almirall Cadarso 26, 46005 València
- contact@memento.eco
- Phone
- +34 692 19 79 18
For any question about your data, write to us at contact@memento.eco.
What data we process
We only process the data you give us in the forms or by email, the data Stripe sends us when you pay a deposit and the technical data needed to serve the site:
- Desk requests and updates list: name, email, the plan you are interested in, whether you want to reserve with a deposit or only receive updates, page language, the form you used and the date sent.
- Contact form: name, email, company (optional), topic, message, language and date sent.
- Email: your address and the content of the messages you send us.
- Reservation deposit: payment is made on Stripe’s page. We do not see or store your full card details; Stripe sends us the transaction details, such as name, email, amount, date and payment status.
- Technical data: when you visit the site, our hosting provider processes data such as your IP address, browser type and the pages requested, which are needed to show the pages and protect the service. The site uses no cookies, analytics or advertising (see the cookie policy).
Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Handling your desk request, confirming the reservation and managing the deposit, including its refund if you decide not to join. | Steps taken at your request before entering into a contract (art. 6(1)(b) GDPR). |
| Sending you project and opening updates when you choose to receive them. | Your consent (art. 6(1)(a) GDPR), which you can withdraw at any time. |
| Answering your messages and questions. | Pre-contractual steps when you ask about membership (art. 6(1)(b) GDPR) and our legitimate interest in answering other enquiries (art. 6(1)(f) GDPR). |
| Meeting accounting and tax obligations linked to payments. | Compliance with a legal obligation (art. 6(1)(c) GDPR). |
| Keeping the site available and secure. | Our legitimate interest in protecting the service (art. 6(1)(f) GDPR). |
The required fields in each form are needed to handle your request: without them we cannot process it. We do not make automated decisions or build profiles from your data.
Who we share it with
We do not sell your data or share it with third parties, except where the law requires it. To run the service we use these providers, who process data on our behalf as processors:
- Vercel Inc. (United States): hosting of the site and of the functions that receive the forms.
- Notion Labs, Inc. (United States): storage and management of desk requests and contact messages.
- Stripe: collecting and refunding the deposit. For some processing, such as fraud prevention and its own financial obligations, Stripe acts as an independent controller under its privacy policy.
International transfers
Vercel, Notion and Stripe are US companies or part of US-headquartered groups, so your data may be processed outside the European Economic Area. Where this happens, the transfer relies, depending on the provider, on its certification under the EU-U.S. Data Privacy Framework, which is covered by a European Commission adequacy decision, or on the standard contractual clauses approved by the European Commission.
How long we keep it
- Desk requests: while we handle the reservation and, if you become a member, for as long as the relationship lasts; after that, restricted for the periods in which legal claims may arise.
- Project updates: until you unsubscribe or withdraw your consent.
- Contact messages: as long as needed to reply and follow up on your enquiry.
- Payments: for the periods required by commercial and tax law (generally six years under the Spanish Commercial Code).
- Technical data: for a limited period, depending on the hosting provider’s settings.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw your consent without affecting the lawfulness of earlier processing. Write to contact@memento.eco stating the right you want to exercise; if needed, we will ask you to confirm your identity. We will reply within one month at the latest.
To stop receiving project updates, just ask us by email.
Complaints
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es, or with the supervisory authority of the EU country where you live. We would appreciate the chance to sort it out first, so please write to us.
Security
We apply technical and organisational measures appropriate to the risk to protect your data, and the site is served over an encrypted connection (HTTPS).
Changes to this policy
We may update this policy when our processing or the law changes. The date of the last update is shown at the top of this page.