Legal
Privacy policy
Updated 2026-06Layer · Doc
This Privacy Policy explains how Multimedia Resources, S.L.U. collects, uses, and protects personal data obtained through the website mrfactory.com, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
2.1 Data Controller
The data controller is:
- Entity: Multimedia Resources, S.L.U.
- Tax ID (NIF): B-80396237
- Address: C/ Isaac Newton nº 5, 2ª planta, Parque Tecnológico de Madrid, 28760 Tres Cantos, Madrid (Spain)
- Contact: hello@mrfactory.ai
2.2 Data Collected and Source
We collect personal data through the following means:
Contact form. When you submit the contact form on mrfactory.com, we collect: full name, company name, job title, business email address, and the content of the message you send.
Automatic technical data. When you visit the Website, our servers automatically record standard technical data including IP address, browser type, operating system, referring URL, pages visited, and session timestamps. This data is collected through server logs and, where applicable, through cookies (see Cookie Policy).
Direct communications. If you contact us by email at hello@mrfactory.ai, we retain the content of that correspondence and any personal data it contains.
We do not knowingly collect personal data from individuals under the age of 18. The Website is directed exclusively at professionals and business users.
2.3 Purposes and Legal Bases for Processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to enquiries submitted via the contact form | Art. 6(1)(b) — pre-contractual measures at the request of the data subject |
| Managing the commercial relationship with clients and prospects | Art. 6(1)(b) — performance of a contract; Art. 6(1)(f) — legitimate interests |
| Sending commercial communications about MR FACTORY services to business contacts who have expressed interest | Art. 6(1)(a) — consent, or Art. 6(1)(f) — legitimate interests in the B2B context, subject to applicable rules |
| Website analytics and performance improvement | Art. 6(1)(a) — consent (for non-essential cookies); Art. 6(1)(f) — legitimate interests (for aggregated, anonymised analytics) |
| Compliance with legal obligations | Art. 6(1)(c) — legal obligation |
2.4 Data Retention
Personal data is retained for the minimum period necessary for each purpose:
- Contact enquiries: data is retained for the duration of the potential or actual commercial relationship, and for up to 3 years after the last interaction, unless a longer period is required by law.
- Client data: retained for the duration of the contractual relationship and for the periods required by applicable Spanish commercial and tax law (generally 5–6 years after the end of the relationship).
- Technical/log data: retained for a maximum of 12 months from collection.
- Marketing communications: until consent is withdrawn or a valid opt-out is registered.
2.5 Data Sharing and International Transfers
Multimedia Resources, S.L.U. does not sell personal data to third parties. Data may be shared with:
- Group companies: Whisper World Pte. Ltd. (Singapore) and affiliated entities within the Whisper World group, for internal operational and commercial coordination purposes. Transfers to Singapore are conducted under appropriate safeguards in accordance with GDPR Chapter V, including Standard Contractual Clauses where applicable.
- Service providers: third-party processors acting on our behalf (hosting, email delivery, CRM, analytics). These processors are bound by data processing agreements that require them to process data only on our documented instructions and to implement appropriate security measures.
- Legal or regulatory requirements: where disclosure is required by applicable law, court order, or regulatory authority.
2.6 Your Rights
Under the GDPR and the LOPDGDD, you have the right to:
- Access — obtain confirmation of whether we process your personal data and, if so, access a copy of that data.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your personal data where there is no lawful basis for continued processing.
- Restriction — request that processing be restricted in certain circumstances.
- Portability — receive your personal data in a structured, commonly used, machine-readable format.
- Objection — object to processing based on legitimate interests or for direct marketing purposes.
- Withdrawal of consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at hello@mrfactory.ai with the subject line “Data Rights Request / Ejercicio de derechos”. We will respond within one month of receipt of the request, extendable by a further two months in complex cases, with prior notification.
You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at www.aepd.es if you consider that your rights have been infringed.
2.7 Security
Multimedia Resources, S.L.U. implements technical and organisational measures appropriate to the nature and volume of the personal data it processes, including access controls, data minimisation practices, and encrypted transmission via HTTPS. However, no method of internet transmission is entirely secure, and we cannot guarantee absolute security.
2.8 Links to Third-Party Sites
This Privacy Policy applies solely to mrfactory.com. The Website may contain links to third-party websites, which have their own privacy policies. Multimedia Resources, S.L.U. is not responsible for the privacy practices of those sites.
2.9 Modifications
This Privacy Policy may be updated periodically. The date of the most recent revision appears at the top of the document. Material changes will be communicated through a notice on the Website.