top of page
logo
Home
Signum Logo - Sello.png
Home
Signum Logo - Sello.png
enquire
Signum Logo - Sello.png
PIECES
enquire
About
Home

Privacy Policy

CASA MEMORATA

Last updated: 11 October 2026

​

1. DATA CONTROLLER
The controller responsible for the processing of personal data collected through this website is:
 

Hereinafter, the data controller will be referred to as “Casa Memorata” or the “Controller”.
 

2. PURPOSE AND SCOPE
Casa Memorata is a design house specialising in the creation of bespoke pieces for hotels and businesses within the hospitality sector.

Through this website, we may process personal data relating to individuals who contact us, request information or quotations, maintain a business relationship with Casa Memorata, or act as representatives or contact persons for companies and hotel establishments.

Personal data will be processed solely for the purposes described in this Privacy Policy and in accordance with applicable data protection legislation.
 

3. PURPOSES AND LEGAL BASES FOR PROCESSING

Personal data may be processed for the following purposes:
 

3.1. Responding to enquiries and requests for information

We will process the information provided through contact forms, email or other communication channels to respond to enquiries, provide information about our products and services, and deal with requests received.

The legal basis for processing will be the taking of pre-contractual steps at the request of the individual, where applicable, or our legitimate interest in managing and responding to professional enquiries in other circumstances.
 

3.2. Managing business and contractual relationships

Where a business relationship is established, we will process the data necessary to prepare quotations, manage orders, enter into contracts, coordinate the provision of services and handle communications relating to our business activities.

The legal basis for processing will be the taking of pre-contractual steps, the performance of a contract and, where applicable, compliance with legal obligations.
 

3.3. Managing professional contacts

We may process the professional contact details of representatives, employees or contact persons at hotels, companies and suppliers in order to establish and maintain professional relationships connected with our business activities.

Where applicable, the legal basis will be our legitimate interest in developing and managing business-to-business relationships, provided that the processing is necessary and does not override the rights and freedoms of the individuals concerned.
 

3.4. Sending marketing communications

We will send marketing communications by electronic means only where a valid legal basis exists and the requirements of applicable legislation are met.

As a general rule, promotional emails and equivalent electronic communications must have been requested or expressly authorised by the recipient. An exception may apply where there is a prior contractual relationship, the recipient’s contact details were lawfully obtained, and the communications concern our own similar products or services.

Where required, we will obtain the recipient’s prior consent. We will also provide a simple and free way to object to or opt out of marketing communications, as required by applicable law.

Recipients may request that marketing communications cease at any time.
 

4. CATEGORIES OF PERSONAL DATA

Depending on the relationship with the individual concerned, we may process the following categories of personal data:

  • Identification data: first name and surname.

  • Contact details: email address, telephone number and professional address, where applicable.

  • Professional data: company, job title or position.

  • Enquiry-related data: message content, requests for information, quotations and business communications.

  • Contractual and administrative data: information required to manage orders, contracts, invoicing and legal obligations, where a business relationship exists.

  • Technical browsing data: information that may be collected through cookies or other technologies, as described in our Cookie Policy.

We do not deliberately request personal data that is unnecessary for the purposes described in this policy.


5. SOURCE OF PERSONAL DATA

As a general rule, personal data is obtained directly from the individuals concerned when they complete a form, send an email, contact us or participate in a business relationship.

If personal data is obtained from other sources in any particular case, we will provide the information required by applicable law, where relevant.
 

6. DATA RETENTION PERIODS

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected.

In particular:

  • Enquiries and business requests: for as long as necessary to deal with the request and, where no business relationship is established, for the period reasonably required to manage any relevant follow-up. As a general rule, such data will be reviewed and deleted after 12 months from the last relevant communication, unless there is a legitimate reason to retain it for longer.

  • Contractual and business relationships: for the duration of the relationship and thereafter for the statutory periods applicable to contractual, tax, accounting or potential liability obligations.

  • Marketing communications based on consent: until consent is withdrawn or an unsubscribe request is received, without prejudice to the limited retention of information necessary to demonstrate compliance with legal obligations.

  • Legal obligations: for the retention periods required by applicable legislation.

When personal data is no longer necessary, it will be deleted or, where legally required, blocked for the applicable retention periods.


7. RECIPIENTS OF PERSONAL DATA AND SERVICE PROVIDERS

Personal data will not be sold to third parties.

In order to carry out our business activities, we may use service providers that need access to certain personal data to perform their services. These may include website hosting and management providers, contact form services, email providers, technology providers and professional advisers.

Depending on the services actually contracted, these providers include Wix, as the website management and hosting platform, and Arsys, as the domain and professional email service provider.

These providers will process personal data in accordance with their respective roles, applicable contractual arrangements and the data protection safeguards required by law.

We may also disclose personal data to public authorities, judicial authorities or other bodies where required to do so by law.


8. INTERNATIONAL DATA TRANSFERS

Some technology providers used to operate this website may process or store personal data outside the European Economic Area (EEA).

Wix states that it may process personal information in different countries. Where international transfers take place, they must comply with the requirements of the General Data Protection Regulation (GDPR), using an adequacy decision or appropriate safeguards, as applicable.

For further information about transfers carried out by a particular provider, individuals may consult the provider’s privacy documentation or contact us using the details provided in Section 1.
 

9. RIGHTS OF DATA SUBJECTS

Individuals whose personal data is processed by Casa Memorata may exercise the following rights, subject to the conditions established by applicable law:

  • Right of access: to obtain confirmation as to whether we process their personal data and to access that data.

  • Right to rectification: to request the correction of inaccurate or incomplete data.

  • Right to erasure: to request the deletion of their personal data where legally applicable.

  • Right to object: to object to certain processing activities on grounds relating to their particular situation or, where applicable, to the processing of their data for direct marketing purposes.

  • Right to restriction of processing: to request that the use of their personal data be restricted in the circumstances provided for by law.

  • Right to data portability: to receive their personal data in a structured format and transmit it to another controller where the legal requirements are met.

  • Right to withdraw consent: to withdraw any consent previously given at any time, where processing is based on consent. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.


To exercise these rights, individuals may send a request to hello@casamemorata.com, specifying the right they wish to exercise and providing the information necessary to process the request.

Additional documentation to verify identity will only be requested where there are reasonable doubts about the individual’s identity and such verification is necessary.

Exercising these rights is free of charge, except in the exceptional circumstances provided for by law.

If individuals believe that their personal data is not being processed in accordance with applicable legislation, they may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) through its website: https://www.aepd.es/.
 

10. MANDATORY NATURE OF THE DATA

Contact forms will indicate, where applicable, which data is necessary to handle a request.

Refusing to provide essential information may prevent us from responding adequately to an enquiry, preparing a quotation or providing the requested service.

Individuals should not provide data that is unnecessary for these purposes.
 

11. DATA SECURITY

Casa Memorata will implement appropriate technical and organisational measures to protect personal data against loss, alteration, disclosure or unauthorised access, taking into account the nature of the data processed and the risks involved.

We will also seek to restrict access to personal data to those individuals and service providers who need it to perform their duties.
 

12. AUTOMATED DECISION-MAKING

As a general rule, Casa Memorata does not make decisions based solely on automated processing, including profiling, that produce legal effects concerning individuals or similarly significantly affect them.

If this practice changes, we will provide the information required by applicable law before carrying out the relevant processing.
 

13. LINKS TO THIRD-PARTY WEBSITES

This website may contain links to third-party websites or services.

Casa Memorata is not responsible for the privacy policies or data processing practices of external websites. We recommend reviewing their respective privacy policies before providing any personal information.
 

14. CHANGES TO THIS PRIVACY POLICY

Casa Memorata may update this Privacy Policy to reflect changes in legislation, the services we use or our personal data processing practices.

The current version will be available on this website and will state the date on which it was last updated.

For any questions relating to this Privacy Policy, please contact us at hello@casamemorata.com.

bottom of page