Privacy policy

Translation provided for information purposes only; in the event of any discrepancy, the French version shall prevail.

Last updated: 08/10/2026

This policy describes how Dryflavour, S.L. processes the personal data collected through the website’s contact form. It is drawn up in accordance with Regulation (EU) 2016/679 (GDPR), in particular Article 13, and with Spanish Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights (LOPDGDD).

1. Data controller

• Dryflavour, S.L. (trade name Aromasol; MEMA Premium Spices brand)
• Tax identification number (NIF): B19719517
• Address: Calle Almendro, 2 — 30500 Molina de Segura (Murcia), España
• E-mail: contact@memaspices.com
• Data protection officer: Dryflavour, S.L. has not appointed a data protection officer, as it is not required to do so (Art. 37 GDPR, Art. 34 LOPDGDD). Requests concerning your data should be sent to contact@memaspices.com.

2. Data collected

Data is collected only through the contact form. You provide it directly:

• name;
• company;
• business e-mail address;
• telephone number (optional);
• country;
• type of business;
• subject of the request (catalogue, partnership or other);
• message;
• product reference, where applicable;
• website language used.

The telephone number is optional. The other fields marked as mandatory are needed to process your request. Without them, we cannot respond.

Please do not include any sensitive data in the "message" field.

Technical data: the hosting provider processes technical connection data (IP address, logs) for the security and operation of its service, in accordance with its data processing agreement.

3. Purposes

Your data is used to respond to your B2B business request and to follow it up.

The website does not offer a newsletter.

4. Legal bases

The processing is based on:

• your consent, given by ticking the box provided for this purpose, which is not pre-ticked (Art. 6(1)(a) GDPR);
• the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

5. Recipients and processors

Your data is intended for the staff of Dryflavour, S.L. in charge of handling business requests.

It is processed on behalf of Dryflavour, S.L. by the following processors:

• Odoo S.A. (Belgium): Aromasol’s Odoo CRM, Odoo.sh platform. Recording and follow-up of your request.
• Netlify, Inc. (United States): website hosting. Form data passes through a Netlify server function, without being stored there, and is then recorded in the Odoo CRM.

Each of these processors acts under its data processing agreement (DPA), in accordance with Article 28 GDPR.

Your data may be disclosed to the competent authorities where required by law.

6. Transfers outside the European Union

Netlify, Inc. is established in the United States. Using this hosting provider may involve a transfer of data outside the European Union.

Applicable safeguard: Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework, which is the subject of the European Commission’s adequacy decision of 10 July 2023. Failing that, the standard contractual clauses adopted by Commission Implementing Decision (EU) 2021/914, provided for in Netlify’s data processing agreement, apply.

You may obtain information on these safeguards by writing to the address given in section 1.

7. Retention period

Where a request is not followed up, your data is kept for 3 years from the last contact.

Where a business relationship exists, it is kept for the duration of that relationship and then for the applicable statutory retention periods, in particular 6 years for business records (Art. 30 of the Spanish Commercial Code, Código de Comercio).

At the end of these periods, it is deleted.

8. Your rights

You have the following rights regarding your data:

• access;
• rectification;
• erasure;
• objection;
• restriction of processing;
• portability;
• withdrawal of consent, at any time.

To exercise them, write to: contact@memaspices.com. State the right concerned. If there is reasonable doubt as to your identity, additional information may be requested (Art. 12(6) GDPR).

You will receive a reply within one month, which may be extended by two months where necessary (Art. 12(3) GDPR). Exercising these rights is free of charge.

9. Complaints

If you consider that your rights have not been respected, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD, Spanish Data Protection Agency): www.aepd.es.

10. Security

In accordance with Article 32 GDPR, Dryflavour, S.L. implements appropriate technical and organisational measures to protect your data. These include: encrypted connection (HTTPS); access to data restricted to authorised staff of Dryflavour, S.L.; technical credentials kept outside the website’s code.

11. Cookies

The website uses no cookies and no audience measurement tools. Fonts are self-hosted: displaying them does not involve any third-party service.

12. Automated decision-making

Your data is not subject to any automated decision-making or profiling.

13. Updates

This policy may be amended. The date of the last update is shown at the top of the page.