MetOry Privacy Notice
1. Controller
1.1 SMARTEDTECH SL, B66970831, Carrer Agricultura, 16, 1º, 9ª, 08320 El Masnou, Barcelona, Spain, is the controller of personal data processed on metory.net (the Operator). Data protection contact: privacy@metory.net. Postal: the address above.
1.2 Platform data. The Operator is the controller of personal data processed to operate the platform: account, identity verification, acceptance records, payments, security, support, communications and analytics.
1.3 Provider supply data. Where a provider supplies services to a customer through the platform, the provider is an independent controller of the data it needs for that supply (booking, order, clinical, educational or professional records), and the Operator is a controller of the platform-level record of the transaction. Each party complies with its own obligations; neither acts for the other. On metory.net no third-party provider currently supplies services through the platform; this paragraph applies only if a provider relationship is enabled (MANIFEST: PRO-* NOT_APPLICABLE).
1.4 Processor services. Where the Operator processes personal data on behalf of a business customer under the customer's instructions (for example an enterprise tenant's employee data), the Data Processing Agreement (DAT-01) applies and governs; it is signed as part of the order.
1.5 Sharing between SET platforms. Personal data is not shared with any other platform operated by the Operator or its group unless you enable the specific destination in your settings. Enabling one destination does not enable others, and you may disable it at any time.
1.6 International transfers. Personal data is stored in the European Economic Area. Where a processor outside that area is used, the transfer is covered by Standard Contractual Clauses, listed in the subprocessor annex (DAT-02).
2. What we process, why, and on what basis
| Data class | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Enquiry and contact details (enquiry, demo, pilot and enterprise forms) | Answer the enquiry and prepare a proposal you asked for | Art. 6(1)(b) pre-contractual steps; Art. 6(1)(f) for corporate contacts | 12 months after the last interaction, then deleted (C16.2) |
| Identity, account and role (name, email, organisation, role, tenant) | Create and secure the account, verify representative capacity, restrict tenant access | Art. 6(1)(b) | Life of the account; deleted or anonymised within 90 days after closure (C16.1) |
| Orders, subscriptions, invoices | Deliver the plan, process payment and refunds, keep tax and accounting records | Art. 6(1)(b); Art. 6(1)(c) | Tax and accounting records 6 years |
| Site, location and planning inputs you enter (venue, marina, field, municipality locations; thresholds; event dates) | Produce the weather evidence and preparation views you request | Art. 6(1)(b) | Life of the account; export or delete on request |
| Acceptance and consent records (document ID, version, hash, time, method) | Prove which terms you accepted and which choices you made | Art. 6(1)(c); Art. 6(1)(f) | 5 years after the end of the relationship (C16.1) |
| Security and technical logs (hashed IP, user agent, request logs) | Prevent abuse, secure the service, investigate incidents | Art. 6(1)(f) | 12 months |
| Support communications | Answer your request, handle complaints and withdrawal | Art. 6(1)(b); Art. 6(1)(c) | 12 months after the ticket closes (C16.2) |
| Research cohort data (only if you join a study) | The purpose stated in the study notice (C34) | Art. 6(1)(a) consent, purpose research_contribution | The period stated in the study notice |
| Optional communications | Product news and offers | Art. 6(1)(a), purpose marketing_email | Until you unsubscribe |
2.1 Mandatory fields are marked on each form. Accepting the terms is not consent to any optional processing; each optional purpose has its own control in your account settings (Spec §4).
2.2 Special-category data is not requested by the service. Do not enter health, biometric or other special-category data in free-text fields or enquiry forms.
2.3 The service does not take decisions producing legal or similarly significant effects on you solely by automated means. Preparation views, bands and thresholds are review triggers; the decision remains with you or your authorised decision-maker (C24.2).
3. Recipients
| Recipient | Function | Location |
|---|---|---|
| Payment service provider identified at checkout (Stripe) | Card payment processing, subscription billing, invoices | As listed in the subprocessor annex (DAT-01 Annex C / DAT-02) |
| Hosting, email delivery and authentication processors | Running the service and sending transactional email | Listed by name and location in the subprocessor annex (DAT-01 Annex C / DAT-02), available at privacy@metory.net |
| Weather and environmental data sources | Supply observations and forecasts; they do not receive your personal data | Named on the source page |
| Public authorities | Where a legal obligation requires disclosure | Spain / EU |
3.1 The Operator does not store full payment card numbers. The Operator does not sell personal data and does not use it for third-party advertising.
4. Your rights
4.1 You may request access, rectification, erasure, restriction, portability and object to processing based on legitimate interest, and withdraw any consent prospectively as easily as you gave it, at privacy@metory.net, through /legal/privacy-rights, or by post to the address in section 1.
4.2 The Operator answers within one month; where a lawful extension is needed, it tells you the reason and the new date within the first month. Identity is verified proportionately to the request.
4.3 You may lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es) or with the supervisory authority of your habitual residence.
5. Retention and deletion
5.1 Account data is kept for the life of the account and deleted or anonymised within 90 days after closure, except where a longer period is required by law (tax and accounting records: 6 years; acceptance and consent records: 5 years after the end of the relationship, as evidence of compliance; records subject to a legal hold: until the hold ends).
5.2 Conversation logs, recordings and uploads not linked to an active contract are deleted no later than 12 months after the last interaction, and earlier on your request, unless a legal hold applies.
5.3 Backups are rotated on a cycle not exceeding 35 days; data deleted from production is removed from backups at the end of the cycle.
5.4 Where a provider is an independent controller, its own retention rules apply to its records.
6. Cookies
Only strictly necessary technology is used; there is no cookie banner because no optional technology is loaded. The inventory is in PUB-03.
7. Changes
7.1 The Operator may amend this notice for legitimate reasons: changes in law, in the service, in security or fraud prevention, in the payment provider, or to clarify wording. The Operator notifies you of material changes by email and in-product at least 30 days before they take effect (immediately where required by law or security).
7.2 A later version does not retroactively widen any consent you have given. A new purpose or recipient is notified before it is enabled.
7.3 Every version is archived with its date and content hash at /website/privacy/v/.