1. Data controller
Controller: José Miguel López Coronado
Address: C/ Arquitecto Santiago Calatrava, 5 – 46035 Valencia (Spain)
Email: contacto@mentabase.com
2. Personal data processed
Depending on the use of the website and the platform, we may process the following categories of personal data:
- Contact data: name and email address (e.g., via forms or communications).
- Account data: credentials and data associated with platform access, where registration or access is enabled.
- Communications data: content of messages sent via forms or email.
- Technical and security data: minimum information needed to operate and protect the service (e.g., IP address, date and time of access, security events), recorded in logs.
The user is responsible for the lawfulness of the data they enter into the platform and for having an appropriate legal basis for its processing.
3. Purposes of processing
We process personal data for the following purposes:
- Handling requests for information, contact, support or demonstrations.
- Managing access to and use of the platform, where applicable (onboarding, authentication, incident management and support).
- Operational communications related to the service (e.g., responding to inquiries or handling requests).
- Security and availability: fraud prevention, incident detection, technical audit and maintenance.
- Aggregated web analytics to improve the website and its content (see “Web analytics (Matomo)” section).
4. Legal basis
The legal bases for processing personal data are:
- Consent of the data subject, when submitting a form or requesting information.
- Pre-contractual measures and/or performance of a contract, when processing is necessary to manage access or provide the service.
- Legitimate interest of the controller, to ensure security of the website and service, prevent misuse, and improve performance and user experience through aggregated analytics.
- Compliance with legal obligations, where applicable.
5. Retention periods
Data will be retained for as long as necessary to fulfil the purposes described and, where applicable, for the periods required by applicable law.
- Inquiries and forms: for the time required to address the request and carry out reasonable follow-ups.
- Account data: for the duration of the contractual relationship or platform access, and thereafter for applicable statutory periods.
- Technical and security logs: strictly as long as necessary to ensure security, technical traceability and incident resolution.
- Web analytics (Matomo): according to the tool’s retention settings, applying data minimisation criteria.
6. Recipients and processors
We do not disclose personal data to third parties, except where required by law or where necessary to provide the service through providers acting as data processors (e.g., infrastructure or hosting providers).
Where applicable, such providers will process data under our instructions and with GDPR-compliant safeguards.
7. International transfers
No international transfers of data outside the European Economic Area are anticipated. If, in the future, international transfers become necessary, appropriate safeguards under the GDPR will be implemented (e.g., Standard Contractual Clauses).
8. Web analytics (Matomo)
This website uses Matomo, a self-hosted web analytics tool, to obtain aggregated statistics about site usage (e.g., pages visited, load times, device type).
- Matomo is configured to not use cookies.
- IP anonymisation and data minimisation practices are applied.
- No individual tracking is performed and no personal profiles are created for advertising purposes.
For more information, please also see the Cookie Policy.
9. Data subject rights
Data subjects may exercise the following rights regarding their personal data:
- Right of access.
- Right to rectification.
- Right to erasure (“right to be forgotten”).
- Right to object.
- Right to restriction of processing.
- Right to data portability.
- Right to withdraw consent at any time, where processing is based on consent.
To exercise these rights, please email contacto@mentabase.com, indicating the right you wish to exercise and providing the information needed to verify your identity.
10. Security and confidentiality
The controller applies reasonable technical and organisational measures to ensure a level of security appropriate to the risk, protecting data against unauthorised access, loss, alteration or disclosure.
11. Complaints to the supervisory authority
If you consider that the processing of your personal data does not comply with applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).
12. Changes to this policy
The controller may update this Privacy Policy to reflect legal, technical or functional changes. Where changes are significant, users will be informed through reasonable means.
13. Contact
For any questions about this Privacy Policy, please contact contacto@mentabase.com.