Coworking
EN
Book the studioBook

Legal

Privacy policy

Which personal data we process when you visit this website, write to us or book a room, what we use it for and how to exercise your rights, under the General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 (LOPDGDD).

Last updated:

This English version is a translation provided for convenience. If it differs from the Spanish version, the Spanish version prevails.

Data controller

Controller
Memento Music S.L. (Memento Creative Group)
Tax number (NIF)
B75699629
Address
C/ de l'Almirall Cadarso 26, 46005 València

You can write to contact@memento.eco about anything to do with your data.

What data we process

  • Contact form and email. Your name, your email, your company (if you add it), the topic you choose, your message, the language of the page you write from and the date it was sent.
  • Podcast room bookings. The details you enter on the Podyx booking page to book a session, such as your name, your contact details, the room, the date and the time.
  • Coworking reservations on coworking.memento.eco. Your name, your email, the plan you are interested in, your language and the date. The reservation deposit is paid through Stripe: we do not receive your full card number. The details are in the coworking privacy policy.
  • Browsing. When you visit the website, our hosting provider logs technical data such as your IP address, browser type, the page requested and the time, which is needed to serve the website and protect it from abuse.

We do not ask for special categories of data, such as health information or beliefs. Please do not include them in your messages.

Why we use your data, and on what legal basis

  • To reply to your messages and, if you ask, prepare a recommendation or a quote. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and, for other enquiries, our legitimate interest in answering people who write to us (Art. 6(1)(f) GDPR).
  • To manage bookings made on Podyx: confirming the session, preparing the room and contacting you about it. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • To manage coworking reservations: holding your place and handling the deposit. Legal basis: performance of a contract or steps taken at your request before entering into one (Art. 6(1)(b) GDPR). If you only ask us to keep you informed, the basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • To meet legal obligations, such as invoicing and accounting for the services you book. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
  • To serve the website and keep it secure. Legal basis: our legitimate interest in running a website that works and is protected (Art. 6(1)(f) GDPR).

Your name, email and message are needed for us to reply; without them we cannot handle your enquiry. We do not make automated decisions or build profiles from your data, and we do not use it to send you marketing without your consent.

Who else processes your data

We do not sell your data or share it with third parties for their own purposes. To provide our services, we rely on providers that process it on our behalf, as processors:

  • Vercel Inc. (United States): hosting for this website and the contact form. Vercel privacy policy.
  • Notion Labs, Inc. (United States): the database where we keep contact form messages and coworking reservations.
  • Podyx: the booking platform for the podcast rooms (memento.podyx.com).
  • Stripe: payment of the reservation deposit on the coworking website. This website does not process payments. Stripe privacy policy.
  • Our email provider, to receive and answer your emails.

The home page shows map images from Google Maps. To display them, your browser requests them directly from Google, which receives your IP address and the technical data of the request and handles them under its own privacy policy. We show these maps on the basis of our legitimate interest in showing where the studios are (Art. 6(1)(f) GDPR).

We may also disclose data to public authorities where the law requires us to.

International transfers

Vercel and Notion are established in the United States, so your data may be processed outside the European Economic Area. Where that happens, the transfer relies on the EU-US Data Privacy Framework if the provider is certified under it or, failing that, on the standard contractual clauses approved by the European Commission and included in the provider’s data processing agreement.

You can ask us for more information about these safeguards at contact@memento.eco.

How long we keep your data

  • Contact messages: for as long as we need to handle and follow up on your enquiry. If it does not lead to a booking or a project, we delete them once they are no longer needed for that purpose.
  • Bookings and projects: for the duration of the relationship and then for the periods required by law (for example, six years for accounting records under Article 30 of the Spanish Commercial Code).
  • Coworking updates: until you withdraw your consent.
  • Hosting logs: for the limited period set by the provider.

After these periods, we delete the data or, where the law requires it, keep it blocked solely to deal with possible liabilities.

Your rights

You can exercise the following rights at any time, free of charge:

  • Access: find out whether we process your data and get a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: ask us to delete your data.
  • Objection: object to processing based on our legitimate interest.
  • Restriction: ask us to keep your data without using it while a request is resolved.
  • Portability: receive the data you gave us in a structured format, or have us send it to another controller.

To exercise them, email contact@memento.eco and tell us which right you want to exercise. If we have reasonable doubts about your identity, we may ask for more information to confirm it. We will reply within one month, which may be extended by two further months for complex requests; if so, we will let you know.

Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or with the supervisory authority of the EU country where you live. We would be grateful if you told us first, so we can try to put it right.

Security

This website is always served over an encrypted connection (HTTPS). The form sends your message to our database over that encrypted connection and stores nothing in your browser.

Changes to this policy

If we change how we handle your data, we will update this page and its date. See also our legal notice and cookie policy.

Last updated: