Privacy policy

• Owner and data controller: 1consulting beintheg SL (memba)
• Tax ID (NIF): B88171806
• Registered address: Calle Andrés Mellado, 79, 1A, 28003 Madrid, Spain
• Contact email: juan@memba.es
• Website: https://memba.es

This information is also provided for the purposes of Article 10 of the LSSI. Accessing and using this website implies acceptance of the terms of use in force at any given time. The site's content (text, images, design and brand) belongs to its owner or is used with permission, and may not be reproduced without authorization.

Through the contact form and the leadership workshop request form, we process:

• Identification and contact data: name, email and, if provided, phone number, company and job title.
• Request details: message, selected interest, company size and, on the workshop form, industry, number of participants, format, tentative dates and any other information you provide.
• Your acceptance of this policy (consent) and the date of submission.
• Visit attribution data: campaign parameters (utm_source, utm_medium, utm_campaign), referring page (referrer), landing page and ad click identifiers (gclid, fbclid), when present. They are stored temporarily in the browser's session storage and sent only together with the form.
• If you accept analytics cookies: browsing data (pages visited, cookie identifier, device, browser and approximate location) processed through Google Analytics 4, and cookieless measurement pings sent to Google Ads to measure campaign performance.
• Technical data needed for security and spam prevention: IP address, browser data and anti-spam verification signals.

Please do not include special categories of data (health, beliefs, etc.) in your message. By submitting the form, you confirm that the data is accurate and that, if you provide third-party data, you are entitled to do so.

• Handling your request, answering your inquiry and, where applicable, preparing a training or consulting proposal. Legal basis: consent (Art. 6.1.a GDPR) and steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR).
• Managing the business contact as an opportunity (lead) in our own CRM and sending internal email notifications for each request received. Legal basis: consent (Art. 6.1.a) and pre-contractual steps (Art. 6.1.b).
• Analyzing, in aggregate, where contacts come from (campaigns and channels) using attribution data. Legal basis: consent given when submitting the form (Art. 6.1.a).
• Producing site usage statistics with Google Analytics 4 and measuring Google Ads campaign performance through cookieless pings, with no personalized advertising. Legal basis: consent (Art. 6.1.a GDPR and Art. 22.2 LSSI), which you can withdraw at any time from "Cookie preferences".
• Protecting the site and forms against spam, abuse and automated submissions. Legal basis: legitimate interest in the security of the service (Art. 6.1.f GDPR).

No automated decisions are made and no profiling with legal effects takes place. We will not send commercial emails without your prior consent, in accordance with Article 21 of the LSSI.

Data is kept for as long as needed to handle your request and maintain the business relationship and, if no engagement follows, for up to two years from the last contact, unless you ask us to delete it sooner. If services are contracted, data is kept for the periods required by tax and commercial law. After that, it is kept blocked solely to address potential legal liabilities.

Data is not disclosed to third parties unless required by law. The following providers act as data processors to deliver the service, under contracts compliant with Article 28 GDPR:

• Cloudflare: website hosting (Cloudflare Pages), anti-spam verification (Turnstile) and cookieless aggregate visit measurement (Cloudflare Web Analytics).
• Google Ireland Ltd.: web analytics (Google Analytics 4) and Google Ads campaign measurement, only if you accept analytics cookies.
• Resend: delivery of email notifications for each request, from formulario@memba.es.

The CRM where requests are stored (company.memba.es) is hosted on servers owned by the controller and located in Spain, with no external hosting providers involved.

Some of these providers are based in the United States or may process data outside the European Economic Area. In those cases, international transfers rely on appropriate safeguards under the GDPR, such as the Standard Contractual Clauses approved by the European Commission or, where applicable, the provider's certification under the EU-U.S. Data Privacy Framework.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, without affecting the lawfulness of prior processing (consent to analytics cookies, which includes Google Ads campaign measurement, is withdrawn from "Cookie preferences"). Just email juan@memba.es, stating the right you wish to exercise. We may ask for additional information to verify your identity.

If you believe the processing does not comply with the law, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

memba's services are aimed at companies and professionals. We do not knowingly collect data from children under 14; if we become aware of it, the data will be deleted.

We apply appropriate technical and organizational measures to protect data against loss, unauthorized access or alteration, including encrypted connections (HTTPS), access controls and anti-spam verification.

This site uses strictly necessary storage and, only if you accept, Google Analytics 4 analytics cookies. Analytics cookies are not set and Google's code is not loaded until you give consent (Art. 22.2 LSSI). No advertising cookies are set and no personalized ads are shown.

Google Analytics 4 is a service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) used for statistical analysis of site usage. It is enabled only with consent (Art. 6.1.a GDPR and Art. 22.2 LSSI), with advertising and ad personalization turned off. Data may be transferred to Google LLC (United States), which is certified under the EU-U.S. Data Privacy Framework.

Google Ads campaign measurement. Google Analytics 4 is linked to Google Ads account AW-392335048. Only if you accept analytics cookies, cookieless measurement pings (page views) are sent to Google Ads (pagead2.googlesyndication.com) to measure campaign performance. The advertising consent parameters (ad_storage, ad_user_data and ad_personalization) remain denied, so no advertising cookies are set and no personalized ads are shown. The provider is Google Ireland Ltd., and data may be transferred to Google LLC (United States) under the EU-U.S. Data Privacy Framework.

Cloudflare Web Analytics measures visits in aggregate, without setting cookies or identifying users. Cloudflare Turnstile anti-spam verification may use strictly necessary technical information to tell people apart from automated submissions.

How to give or withdraw consent. On your first visit, a notice offers Accept, Reject and Customize. Your choice is stored for 12 months, after which we ask again. You can change it or withdraw consent at any time from Cookie preferences (also in the footer); withdrawing consent deletes the Google Analytics cookies. You can also block or delete cookies in your browser settings (Chrome, Firefox, Safari or Edge), which may affect some site features.

This policy may be updated to reflect changes in the law or the service. The current version is always the one published on this page, with its last updated date: October 20, 2026.

This English version is provided for convenience. If there is any discrepancy between this version and the Spanish version, the Spanish version prevails.