Privacy policy

Website owner and data controller

Asociación Cultural Italo-Española Metro Etnico Sound System (MESS).

NIF

G44628832.

Address

Passeig de Montjuïc 30, 08004 Barcelona.

Contact

info@metroetnicosoundsystem.com.

How we use your data

The contact form collects your name, email address, subject and message so that we can handle and respond to your enquiry. The form does not accept attachments. Do not include identity documents or confidential information. Contacting us does not sign you up for marketing.

The legal basis is the consent you freely give by submitting your enquiry, under Article 6(1)(a) of the GDPR. You can withdraw it without affecting any processing that took place before withdrawal. We cannot respond without the information we need to handle your enquiry.

The form status shows whether submissions are enabled. When the status is pending, the message is not sent.

Applications for MESS membership

We record the type of membership you apply for. If you choose a design or an alias for your digital card, we use them to prepare it once your application is approved.

We process your first name, surname, email address, place, date and an image of your signature to handle your application and communicate the Board of Directors’ decision. Your identity document, date of birth, address, telephone number and how you heard about us are optional fields. We do not ask for copies of documents. Your signature is included as an image in the application. It is not analysed to identify you using biometrics.

The legal basis for processing your application and, if it is approved, managing your membership is taking steps before you join and managing that relationship, under Article 6(1)(b) of the GDPR. You must complete the required fields and sign before you can submit the application. The privacy checkbox confirms that you have read the policy. It does not authorise marketing.

Your data and signature are sent to MESS when you select “Submit application”. The form first checks whether the service is available and shows the submission result. Confirmation means that the server has accepted your application for processing. It does not confirm that someone has read it or that you have been admitted. The Board of Directors decides in accordance with the statutes, without automated decision-making.

Optional communications

We will only use your email address for news and promotions about concerts, events, merch and MESS activities if you tick the optional checkbox, which is unchecked by default. The legal basis is your consent under Article 6(1)(a) of the GDPR, which is separate from your membership application. You can withdraw it at any time by writing to the contact address provided, without affecting prior processing or your application.

Retention and protection

We keep enquiries and applications while we process them. If you are admitted, we keep the data we need for as long as you remain a member. We then delete it, except for data that must be kept under restricted access to meet legal obligations or address enforceable liabilities. We retain your email address for optional communications until you withdraw your consent.

The membership application form uses a technical session cookie to protect submissions. Its dedicated security logs retain session and submission identifiers, keyed hashes of the IP address and content, dates and status, to limit abuse for fifteen minutes and prevent duplicate submissions for seven days. Expired entries are removed when the logs are updated while processing new applications. The security token is valid for two hours, and session files are removed through the hosting service’s clean-up process. These logs do not store the form fields or the signature image. MESS processes applications through its email service.

Service providers and recipients

DonDominio (Soluciones Corporativas IP, S.L.) provides hosting and email with the necessary technical access. It states that its servers are located in Spain in its terms of service. We do not share data for commercial purposes. Data may be disclosed where there is a legal obligation.

Your rights

You can exercise your rights of access, rectification, erasure, restriction of processing, objection and data portability, where applicable, or withdraw your consent, by email or by writing to the address above. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Cookie policy

You can find details about storage and manage your preferences in the cookie policy.

Last updated 6 November 2026.

If you allow Meta advertising measurement, we share browsing data with Meta to measure campaigns. You can see what we share and withdraw your permission in the cookie policy.