Privacy Policy
This Privacy Policy applies to all personal data processing activities carried out by MOUD Group and its verticals: Moud Events, Moud Studio and Moud Tech (App6C Code Group SL). It complies with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
1. Data controllers
Depending on the services you request, your data will be processed by one or more of the following entities:
| Entity | Tax ID (CIF) | Verticals | DPO contact |
|---|---|---|---|
MWD Creative Studio SL |
Pending | Moud Events · Moud Studio | studio@mwd.cat |
App6C Code Group SL |
Pending | Moud Tech · Numu App · Moud.app | info@app6c.net |
In both cases, the postal address is: Avinguda Can Bordoll, 119 · 08202 Sabadell (Barcelona), Spain.
2. Personal data we collect
2.1 Data provided directly by the user
- Identification data: first name, surname, email address, phone number, company.
- Business contact data: type of project, budget, description of requirements.
- Account data: username, password (encrypted), platform preferences (Moud.app, Numu App).
- Payment data: handled by PCI-DSS certified payment gateways. We do not store card details.
2.2 Data collected automatically
- IP address, browser type, operating system, screen resolution.
- Pages visited, time spent on each page, browsing path.
- Cookie identifiers (see the Cookie Policy).
3. Purposes of processing
3.1 Purposes common to all verticals
- Handling requests and enquiries received through the contact forms.
- Responding to commercial proposals and quotes.
- Sending communications related to the contracted services.
- Compliance with legal and tax obligations.
- Improving the quality of our services and the user experience.
3.2 Purposes specific to each vertical
Moud Events
- Planning and managing the production of corporate events, sports events and brand activations.
- Coordination with the event's suppliers and partners.
- Management of attendees, accreditation and access control.
- Photo and video coverage of the event (with express consent).
Moud Studio
- Management and follow-up of branding, design and brand strategy projects.
- Presentation of creative proposals and working documents.
- Collaboration with the client during the creative process.
Moud Tech · App6C Code Group SL
- Management of software development, networking and infrastructure projects.
- Remote access and technical support for the client's systems.
- Monitoring of managed infrastructure (with consent and a service contract).
- Management of software licences and subscriptions.
Moud.app · Numu App
- Registration, authentication and management of the user account on the platform.
- Provision of the contracted services (event or project management).
- Push notifications related to activity on the platform.
- Usage analytics to improve the product (anonymised data).
- Management of payments and subscriptions.
4. Legal basis for processing
- Performance of a contract (Art. 6(1)(b) GDPR): processing necessary to provide the requested services.
- Consent (Art. 6(1)(a) GDPR): for commercial communications and non-essential cookies. You may withdraw your consent at any time.
- Legitimate interest (Art. 6(1)(f) GDPR): to improve our services, prevent fraud and keep our systems secure.
- Legal obligation (Art. 6(1)(c) GDPR): to comply with tax, accounting and commercial obligations.
5. Retention period
- Active clients: for the duration of the contractual relationship.
- Inactive clients: up to 6 years to meet commercial and tax obligations (Article 30 of the Spanish Commercial Code).
- Contact forms not leading to a contract: up to 1 year or until consent is withdrawn.
- Account data (Moud.app / Numu): until you request account closure, plus 30 days for backups, unless a legal obligation applies.
- Security logs: up to 12 months.
6. Your rights
You may exercise the rights granted by current legislation at any time:
- Right of access: to know what data we hold about you.
- Right to rectification: to correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): to request the deletion of your data.
- Right to data portability: to receive your data in a structured, machine-readable format.
- Right to object: to object to processing for commercial communications or based on legitimate interest.
- Right to restriction: to ask us to restrict processing in certain circumstances.
- Right to withdraw consent: at any time, without retroactive effect.
You can exercise your rights by writing to hola@moud.group or to the postal address above. You must identify yourself and state which right you wish to exercise. We will reply within a maximum of 30 calendar days. If you are not satisfied with our response, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
7. Recipients and third parties
Your data will not be sold or transferred to third parties for commercial purposes. We may disclose data to:
- Technology service providers (hosting, email, CRM) acting as data processors and bound by data protection agreements.
- External partners strictly necessary to provide the contracted service, under a confidentiality agreement.
- Public authorities where required by law.
- Certified payment gateways to process transactions.
8. International transfers
As a general rule, data is processed within the European Economic Area (EEA). If a technology service provider (for example, cloud or analytics services) involves a transfer outside the EEA, we make sure appropriate safeguards are in place: Standard Contractual Clauses approved by the European Commission, certification under the EU-US Data Privacy Framework, or equivalent.
9. Minors
Our services are not intended for children under 14. If we learn that we have collected data from a minor without the verifiable consent of a parent or legal guardian, we will delete it immediately. If you are a parent or guardian and believe your child has provided us with data, please contact us at hola@moud.group.