Privacy for our forms and business contacts
Last updated: 31 October 2026
1. If you contact us through a form on mordia.es (demo, information or template)
Controller: Aeternal Creative Group LLC, 501 Silverside Rd, Ste 105-1765, Wilmington, DE 19809, USA · hola@mordia.es.
What we collect: what you fill in (name, restaurant, role, phone or WhatsApp, email, city, covers per day, plan you are interested in, how you found us and your message), the page you come from (UTM and origin) and the proof of your tick boxes (text, value and time). From your connection we keep a technical fingerprint of your IP for one day only, to stop spam; we do not store your IP.
Why: (1) to handle what you ask for (a demo, information, or the editable version and the alerts about changes to the rules); (2) if you tick the optional box, to send you news and offers from Mordia by email or WhatsApp; (3) to measure, in aggregate, where requests come from.
Legal basis: (1) your request (art. 6.1.b GDPR); (2) your consent (art. 6.1.a), which you can withdraw at any time; (3) our legitimate interest (art. 6.1.f).
Who sees your data: only the Mordia team. We use hosting providers (Cloudflare) and email or messaging providers as processors, listed at mordia.es/en/subprocessors. We do not sell your data. Some providers are in the USA, with the safeguards the GDPR requires (EU-US Data Privacy Framework or standard clauses).
How long: if you ask for a demo or information, up to 12 months from our last contact; if you subscribe to the rule-change alerts, until you unsubscribe (we ask you again every 24 months). We keep the proof of your consent for 3 years afterwards, without your contact details. If you unsubscribe from the news, we keep only your address on a do-not-contact list.
Your rights: to access, correct, delete, object, restrict or port your data, and to withdraw your consent, by writing to hola@mordia.es or with the unsubscribe link in any email. We reply within one month at most. If you think we are not handling your data properly you can complain to your data protection authority (in Spain, the AEPD).
Optional details are not compulsory; without a name and a way to reach you we cannot reply.
If you ask for the Auditor report (mordia.es/auditoria): besides the above, we keep the website you enter, the result of the analysis (scores and links found) and the report we send you. Source: Mordia Auditor (mordia.es/auditoria). Why: to prepare and send you the report you ask for (art. 6.1.b GDPR); if you tick the optional box, to send you news (art. 6.1.a). How: our system visits the public page you enter and queries PageSpeed Insights (Google); it identifies itself as MordiaAuditor and obeys robots.txt. We do not keep the content of the page. Retention: 12 months from the last contact; the one-click unsubscribe deletes your data.
2. If we write to you because your restaurant's email is public (business contacts)
Who we are: Aeternal Creative Group LLC (Mordia), 501 Silverside Rd, Ste 105-1765, Wilmington, DE 19809, USA · hola@mordia.es.
What we hold: your business contact email and, if you reply, your name, restaurant name and the content of your reply.
Where we got it: your restaurant's public website, listing or business profile.
Why: to offer you our restaurant management software. Legal basis: our legitimate interest in B2B marketing (art. 6.1.f GDPR), which we weigh against your rights.
Who sees it: our team and the providers that send the emails and host the data, bound by contract.
How long: until you tell us to stop; if you never reply, we delete it after about 12 months. If you unsubscribe we keep only your address on a do-not-contact list so we do not write to you again.
Your rights: to access, correct, delete, or object at any time (one click in any email, or hola@mordia.es). If you are in the EU you can also complain to your data protection authority (in Spain, the AEPD).