Privacy Policy
Performance Media · San Mateo Capital, S.L. · Last updated: May 2026
01 Data controller
- Company name: San Mateo Capital, S.L.
- Tax ID (CIF): B67381368
- Address: C/ Roger de Lluria 137, 08037 Barcelona, Spain
- Email: hola@performancemedia.io
- DPO / Data Protection Officer: gdpr@performancemedia.io
02 Data we collect
Depending on how the user interacts with the Website, we may process the following categories of personal data:
- Contact data: name, email address and, where applicable, phone number, when the user completes contact forms or requests information.
- Browsing data: IP address, browser type, pages visited, session duration and similar data collected through cookies and similar technologies (see the Cookie Policy).
- Data provided when contracting services: data needed to manage the commercial relationship.
03 Purposes and legal basis for processing
| Purpose | Legal basis |
|---|---|
| Handling enquiries and information requests received through the contact form | Legitimate interest / performance of pre-contractual measures (Art. 6.1.b GDPR) |
| Sending commercial communications and newsletters (if the user consents) | Consent of the data subject (Art. 6.1.a GDPR) |
| Managing the contractual relationship with clients and suppliers | Performance of a contract (Art. 6.1.b GDPR) |
| Compliance with legal obligations | Compliance with a legal obligation (Art. 6.1.c GDPR) |
| Browsing analysis and improvement of the Website | Legitimate interest (Art. 6.1.f GDPR) / consent for analytics cookies |
04 Recipients of the data
San Mateo Capital, S.L. will not disclose personal data to third parties except in the following cases:
- Legal obligation: when required by competent authorities.
- Data processors: technology service providers (hosting, CRM, email marketing tools) acting under a data processing agreement and offering sufficient guarantees.
- International transfers: if data is transferred outside the European Economic Area, the appropriate safeguards provided for in the GDPR will be adopted (standard contractual clauses, adequacy decisions, etc.).
05 Data retention
Data will be kept for as long as necessary to fulfil the purpose for which it was collected and, in any case, for the applicable statutory limitation periods. After that period, the data will be deleted or anonymized.
06 Data subject rights
The user may exercise the following rights before San Mateo Capital, S.L. at any time:
- Access: find out what personal data is being processed.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of the data when it is no longer necessary.
- Restriction: request restriction of processing in certain circumstances.
- Portability: receive the data in a structured, commonly used format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
Email: gdpr@performancemedia.io
Postal address: C/ Roger de Lluria 137, 08037 Barcelona, Spain
The request must be accompanied by a copy of your identity document. The controller will respond within a maximum of one month (extendable to three months in complex cases).
The user also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es — if they consider that the processing of their data does not comply with the GDPR.
07 Minors
Our services are not directed at children under 14. San Mateo Capital, S.L. does not knowingly collect personal data from minors. If it is detected that data has been collected from a minor without parental consent, it will be deleted immediately.
08 Security
San Mateo Capital, S.L. applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or accidental damage, in accordance with Article 32 of the GDPR.
09 Changes
This Privacy Policy may be modified to adapt to legislative changes or new processing practices. Users are advised to review it periodically.
Last updated: May 2026