Privacy policy

Who is responsible for your data

Pasdiu is a product built and operated by MTM CYA Corp, trading as MTM Cofounders & Associates (“MTM”), a company incorporated in the United States. MTM is the controller of the personal data described in this policy. “Pasdiu”, “we”, and “our” refer to that same entity.

Relationship with MTM and other group products

MTM builds and operates several of its own software products; Pasdiu is one of them. You can find the company at mtmcya.com. Because all of those products share a team, infrastructure, and internal support, administration, and billing functions, authorised MTM personnel may access data processed through this site for those purposes — form submissions from this site are delivered to an MTM mailbox. That internal access is not a disclosure to a third party: it remains under MTM’s control and responsibility, with the same safeguards described here.

Each MTM product keeps its own site, its own privacy notice, and its own systems. We do not merge or cross-reference your profile between different products for commercial or advertising purposes.

What this policy covers

This policy applies only to the pasdiu.com marketing site: the public pages, the news section, and the contact form. Data you enter inside the Pasdiu application — workspaces, clients, tasks, deliverables, review threads, and the team and reviewer accounts you invite — is governed by the service agreement and privacy notice you accept when you create a workspace. If you hold an account, that document prevails over this one for everything that happens inside the product.

What we collect

We collect data in three situations, and no others:

What we do not collect

We build no advertising profiles, use no social-media pixels, buy no contact lists, and collect no special categories of data through this site.

Legal basis and purpose

If you are in the EU, EEA, or UK, we process your data on the following GDPR bases:

• The contact form: pre-contractual steps at your request (Art. 6(1)(b)) — we answer what you asked.
• reCAPTCHA and server logs: legitimate interest (Art. 6(1)(f)) — keeping the site available and protecting the form from automated abuse.
• Google Analytics: consent (Art. 6(1)(a)) — you can decline or withdraw without losing functionality.
• Keeping records of correspondence and responding to lawful requests: legal obligation and legitimate interest (Art. 6(1)(c) and 6(1)(f)).

We never sell personal data, do not rent it, and do not use it for third-party advertising.

Where processing rests on your consent, you may withdraw it at any time from the “Cookie preferences” link in the footer. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Who we share data with

We do not sell or rent your data. We rely on the following providers, who process it on our behalf and on our instructions:

• Google (Firebase Hosting, Cloud Functions, Analytics, reCAPTCHA Enterprise) — site hosting, form processing, measurement, and abuse prevention.
• Google Workspace (Gmail) — delivery of notification and confirmation emails.
• MTM CYA Corp and its authorised personnel — support, administration, and commercial management, as described above.

We may also disclose data where strictly necessary to comply with a legal obligation or a valid request from a competent authority, to establish or defend legal claims, or in connection with a merger, acquisition, or corporate reorganisation — in which case we would tell you before your data became subject to a different policy.

These providers may process data outside the EEA, principally in the United States. Google relies on the European Commission’s Standard Contractual Clauses and on the EU-U.S. Data Privacy Framework for those transfers. MTM, as a U.S. entity, processes data in the United States under the same contractual safeguards.

Cookies and similar technologies

The site sets no first-party cookies. Google Analytics loads only if you accept the cookie notice — until then no measurement script runs and none of its cookies are set. Your choice is saved in your browser’s local storage, not a cookie, so we do not ask again; clearing the site’s data removes it. reCAPTCHA Enterprise loads only at the moment you submit the form and may set third-party cookies for bot detection; it is a strictly necessary security measure without which the form cannot work.

You can change or withdraw your decision at any time from the “Cookie preferences” link in the footer, and block or delete cookies in your browser settings. The site keeps working, though the form may stop submitting if you block reCAPTCHA. We honour browser privacy-preference signals where applicable law requires it.

How long we keep data

We keep each item only for as long as the purpose that justified it requires:

• Form messages: for as long as needed to handle your enquiry and any resulting business relationship, up to 24 months from last contact.
• Google Analytics data: 14 months, in aggregate.
• Server logs: a short period, per our hosting provider’s standard configuration.

Once those periods pass we delete or anonymise the information, unless a legal obligation or the defence of a claim requires us to keep it longer.

Your rights

You may at any time request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent. Email info@pasdiu.com and we will respond within 30 days. We may ask for additional information to verify your identity before acting on a request; we use it for that purpose only.

Exercising these rights is free. We will not treat you differently or deny you any service for having done so.

If you believe we have not handled your request properly, you may lodge a complaint with your national supervisory authority. In Spain that is the Agencia Española de Protección de Datos (aepd.es).

United States residents

If you live in California or another state with consumer privacy legislation, you also have the right to know, access, correct, and delete the personal information we hold about you, and not to be discriminated against for exercising those rights. You can exercise them through the same channel above and, if you prefer, through an authorised agent.

We do not sell personal information and do not share it for cross-context behavioural advertising, as the CCPA/CPRA and equivalent state laws define those terms. Nor do we process sensitive personal information to infer characteristics.

Automated decision-making

We make no decisions producing legal effects about you based solely on automated processing, and we do not profile you for that purpose. A reCAPTCHA score only determines whether a submission is accepted as legitimate; if one is blocked in error, write to us and we will handle it manually.

Security

The site is served entirely over HTTPS. Service credentials live in Google Secret Manager and never appear in site code. Access to the inbox receiving form submissions is limited to authorised personnel. No system is infallible: if a breach occurred that posed a high risk to your rights, we would notify you and the competent authority within the deadlines the law sets.

Minors

This site is aimed at media and production professionals and is not directed at anyone under 16. We do not knowingly collect data from minors. If we find we have received a minor’s data without the necessary authorisation, we will delete it; if you are a parent or guardian and believe this has happened, please write to us.

Links to third-party sites

This site may link to pages we do not control, including mtmcya.com and the sites of other MTM products. Each has its own privacy notice, and we are not responsible for their content or processing practices.

Changes to this policy

If we change this policy we will update the date shown above. Material changes will be announced prominently on the site and, where the law requires it, we will ask for fresh consent. We encourage you to review this page periodically.