Privacy policy
Draft awaiting confirmation
Controller: Raton multimedia s.l.. Before publication, confirm the controller’s identity, contact address, relationship to ME HYBRID, service providers and retention arrangements.
1. Controller and contact
Controller: Raton multimedia s.l.. Address: [TO BE PROVIDED]. Privacy enquiries and rights requests: info@mehybrid.com [CONFIRM that this inbox will handle these requests].
2. Information collected
The form requests your name, email address, selected topic and message. It does not request a phone number, identity documents or health information. Avoid including sensitive information or unnecessary personal information about other people.
3. Purposes and legal bases
Information is used to receive, manage and answer enquiries about ME HYBRID. Contractual enquiries and steps requested before entering a contract rely on Article 6(1)(b) GDPR. For other general enquiries, the proposed basis is the legitimate interest in responding to communications addressed to the organisers under Article 6(1)(f); the controller must document and confirm the balancing assessment before publication. Anti-abuse controls rely on the legitimate interest in protecting the service. Enquiries are not used for advertising or mailing-list subscriptions.
4. Operation and abuse prevention
Messages are sent to info@mehybrid.com using authenticated SMTP. The form does not keep copies of messages in the WordPress database. Temporary tokens, an automated detection field and attempt counters linked to a cryptographic representation of the IP address help prevent abuse. These temporary records do not contain message text. Tokens expire after 30 minutes and attempt limits after 15 minutes; WordPress may physically delete expired records later through its cleanup tasks. The hosting provider may process IP addresses and technical logs to operate and protect the service.
5. Recipients and providers
Authorised members of the organisation can access enquiries. IONOS provides hosting and email services; the applicable contracting entity, data processing agreement, subprocessors and data locations must be checked before publication. Data may be disclosed to authorities where legally required. Personal information is not sold.
6. International transfers
[TO BE CHECKED WITH IONOS AND THE ACTUAL CONFIGURATION]. The absence of international transfers cannot be asserted until contracted services, locations and subprocessors have been reviewed. If transfers outside the European Economic Area occur, their destinations, basis, safeguards and how to obtain further information must be specified.
7. Retention
Enquiries are kept in the mailbox while needed for handling and follow-up. [TO BE COMPLETED: specify a period or precise criteria after closing an enquiry and apply them to the mailbox, backups and forwarded copies]. Where applicable, only information needed for legal obligations or claims is retained for the relevant periods. Indefinite retention is not the default.
8. Your rights
You may request access, rectification, erasure, restriction, objection and, where applicable, portability by emailing info@mehybrid.com. Additional identification will only be requested when necessary. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may lodge a complaint with the Spanish Data Protection Agency at https://www.aepd.es. Requests will be handled within the GDPR time limits.
9. Further information
Required fields are necessary to handle your enquiry; without them the form cannot be submitted. This form does not perform profiling or automated decisions with legal effects. The acknowledgement checkbox confirms that this information was provided; it does not authorise marketing. This policy concerns website contact, not registration processing by external platforms. If analytics, advertising or other services are introduced, the relevant notices, including cookie information where applicable, must be reviewed.
Optional analytics
If you accept analytics, we use Google Analytics 4 to understand website usage and clicks on the registration link. Google receives technical browser and device information, analytics identifiers, page visits and interactions. We do not send information entered in the contact form. This processing relies on your consent, which you can withdraw at any time through “Cookie settings”, without affecting your access to the website or processing before withdrawal. We do not use this integration for personalised advertising.
Before publication, the controller must specify the contracted Google entity, processing terms, applicable international transfers and safeguards, and the retention period configured in the property. Incorporate these details into the providers, transfers and retention sections of the general privacy policy, alongside the controller identity and rights information.