Last updated: 30 September 2026
In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you how we process your personal data.
1. Data controller
- Controller: VIVO 2024 PROJECTES, SLU (Menta by Flor)
- Tax ID (NIF): B75452813
- Address: Carrer de la Tecnologia, 17, 2nd floor, office A25, 08840 Viladecans (Barcelona), Spain
- Email: xvilavivo24@gmail.com
2. What data we process and why
| Processing | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form and enquiries | Name, company, email, phone, message and any other information you provide | Answering your enquiry and preparing an event or experience proposal | Consent (Art. 6.1.a GDPR) and pre-contractual measures (Art. 6.1.b) |
| Client management and service delivery | Identification and contact details of the client company’s contact persons, and billing data | Organising the events booked, communicating with the client and invoicing | Performance of a contract (Art. 6.1.b) and compliance with legal obligations (Art. 6.1.c) |
| Event participants | Name and, where applicable, dietary or accessibility preferences or needs provided by the company or the participant | Tailoring the experience to each person | Performance of a contract (Art. 6.1.b) and, for health data such as allergies, explicit consent (Art. 9.2.a) |
| Web analytics | Pseudonymised browsing data (cookies) | Understanding how the website is used in order to improve it | Consent (Art. 6.1.a) |
| Form security | Technical device and browsing data (Google reCAPTCHA) | Preventing spam and abuse of the form | Legitimate interest (Art. 6.1.f) |
Fields marked as mandatory in the forms are required to handle your request. If you provide data about third parties, you confirm that you have informed them and obtained their consent.
3. Retention period
Enquiry data is kept for as long as needed to respond and, at most, one year if it does not lead to a business relationship. Client data is kept for the duration of the relationship and then for the applicable legal limitation periods (generally 6 years for accounting and tax obligations). Participant data is deleted once the event has ended, unless it must be kept by law. Analytics data is kept as indicated in the Cookie policy.
4. Recipients
We do not share your data with third parties except where necessary to provide the service (for example, venues, catering or partner professionals involved in an event) or where required by law. Service providers acting as data processors (web hosting, email, accounting, analytics and security tools) may also have access to it, under the corresponding data processing agreements.
5. International transfers
The use of Google Analytics, Google reCAPTCHA and, where applicable, Google’s email service may involve data transfers to Google LLC (United States), which is certified under the EU-US Data Privacy Framework and covered by an adequacy decision of the European Commission.
6. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent given, by emailing xvilavivo24@gmail.com or writing to the address above, enclosing a copy of your ID document.
If you believe your data has not been processed properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to ensure the security and confidentiality of personal data and to prevent its loss, alteration or unauthorised access.
8. Changes to this policy
We may amend this policy to reflect legal or operational changes. We recommend that you review it periodically.