Data controller
The controller of the personal data collected on this website is Payconsulting SL (Tax ID B67977439), as operator of TuMecenas. Its full details are set out in the Legal notice. For any privacy matter you can write to contact@tumecenas.es.
What data we process, why and on what basis
| Source | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Guide download form | Name, email, profile, guide and language | Enable the download and send you communications related to TuMecenas | Consent (art. 6.1.a GDPR) | Until you withdraw consent and, at most, three years from the last contact |
| Website contact forms | Name, email, profile, message and page of origin | Answer your enquiry and, if you ask, review your project or transaction | Consent and pre-contractual steps (art. 6.1.a and 6.1.b GDPR) | While the enquiry is handled and, at most, three years from the last contact |
| Analysis request from the home page | The data you send us by email | Prepare an eligibility analysis and, where appropriate, start a business relationship | Pre-contractual steps (art. 6.1.b GDPR) | For the duration of the relationship and the applicable statutory limitation periods |
| Clients and financing transactions | Identification, tax and contact data included in the agreements | Provide the services, formalise the agreements and meet notification obligations to the Spanish Tax Agency | Performance of a contract and legal obligation (art. 6.1.b and 6.1.c GDPR) | For the duration of the relationship and the applicable tax and commercial limitation periods |
| Private client area | Access log | Security and integrity of the service | Legitimate interest (art. 6.1.f GDPR) | 12 months |
Recipients and providers
We do not share your data with third parties unless required by law. To provide the service we use providers that process data on our behalf:
- Netlify, Inc., for website hosting and storage of form submissions. This may involve international transfers to the United States, covered by the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
- Google Workspace (Google Ireland Ltd.), as email provider to handle communications. This may involve international transfers covered by the safeguards provided for in the GDPR.
Fonts and all other website resources are served from our own hosting, with no connections to third-party servers when you visit the site.
When a financing transaction is formalised, the investor's necessary data is shared with the producer and the Spanish Tax Agency. If a tax adviser introduced you to TuMecenas, we may inform them of the status of your transaction, on the terms agreed with you.
Change of controller
TuMecenas will be incorporated as a company in its own right. When that happens, the new company will become the data controller and your data will be transferred to it to continue providing the same service for the same purposes. We will announce this on this page and you may object at any time.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to contact@tumecenas.es. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Minors
TuMecenas' services are not aimed at minors.
Last updated: October 2026.