What we do with your data
What data we process, why, who with, and how you can delete it: from the website, from purchases and from the memorials that families prepare.
1. Who is responsible
El Último Adiós, based in Málaga (Spain).
Holder: Manuel Garcia · Tax ID (NIF): 44599399F · Address: Málaga (Spain).
Contact for any privacy matter: hola@elultimoadios.app.
2. What data we collect and why
Contact form. When you write to us through the website form, we store your name, your email, who it is for (if you tell us), your message, the date, the language and the type of browser. We also keep a short fingerprint of your IP address (a code calculated from it; we don’t store the IP address itself), to prevent automated submissions and to be able to prove that you gave your consent. We use them to reply to you and, if you are a funeral director asking for a demonstration, to arrange it. The legal basis is your consent, which you give by ticking the box on the form and can withdraw at any time.
Free guide and monthly emails. If you ask for the guide, we store your email, the language, the date and the version of the text you accepted, the date you confirmed your email and the short IP fingerprint described above. We ask you to confirm your email with a link (double opt-in): until then we send you nothing else. Afterwards we send you the guide, a personal discount code and, at most, one email a month with stories, ideas for keeping memories, news and offers from El Último Adiós. The legal basis is your consent. You can unsubscribe with the link at the bottom of every email; when you do, we stop writing to you and keep only your email and the date you left, so we never write to you again by mistake and can prove it. If you never confirm, we delete your email after 30 days.
Purchases. When you buy, payment is handled by Stripe on its own page: we never see or store your card details. We receive and keep your name, email, phone number, billing and delivery address, what you bought, the format you chose, the amount and the details you give us for the memorial (the person’s name, the cemetery, who will fit the plaque and, for the frame, its colour). If you reached the website through a funeral director’s link, we also keep their code, so we know where the order came from. We use them to prepare the memorial, engrave and send the piece, help you and meet our accounting and tax obligations. The legal basis is the contract and legal obligation. Billing data is kept for as long as the law requires (six years); the rest, while the memorial is active.
Email and WhatsApp. If you write to hola@elultimoadios.app or message us on WhatsApp, we keep the conversation so we can help you. WhatsApp is a Meta service, which handles those messages under its own terms; if you’d rather it wasn’t involved, write to us by email.
Browsing and statistics. To understand which parts of the website are clear and which need improving, we measure anonymously and with our own tool (no Google Analytics or other third parties): the page and sections you view and for how long, how far you scroll, where you click, whether you play a voice note, which website you came from, the type of device, the browser, the language and your approximate country, which is worked out from your device’s time zone and not from your IP address. To group the pages of a single visit we use a code calculated from your IP and browser mixed with a key that is changed and deleted every day: the IP is not stored and it is not possible to recognise you from one day to the next. This data is kept on our own server, in Germany, for thirteen months, and is used only to improve the website. The legal basis is our legitimate interest in knowing, in aggregate, how it is used.
Cookies and data in your browser. We don’t use advertising or tracking cookies. We only use what the website needs to work: a session cookie when you sign in to the family area or the conversation, so we know you are family, and a few small items your browser keeps during the visit (the format you choose, whether you closed the language notice and, if you arrived through a funeral director’s link, their code). On the memorial, your browser also remembers whether you have already lit a candle and keeps the conversation in that tab until you close it. As they are essential for what you ask us to do, they don’t require your consent.
The fonts are loaded from Google Fonts, which means your browser sends Google its IP address when requesting them.
3. Who we share data with
With nobody for commercial purposes. We never sell or pass on data. The only third parties involved are technical providers who process it on our behalf:
- Hostinger (web hosting and email), with servers in the European Union.
- Stripe (payments): processes the payment and the data needed to charge and prevent fraud. It may transfer data to the United States under the EU–US Data Privacy Framework and standard contractual clauses.
- ElevenLabs (their voice): receives the voice recordings the family provides in order to create the replica of their voice, and generates the audio of each answer. It is only used if the family signs the permission to create their voice.
- Anthropic (the conversation): receives the messages written to them and the memorial memories needed to reply, and writes the answer. It does not use this data to train its models.
- Engraving and printing workshops (in Spain): they receive only what is needed to make the piece, that is, the QR code and, for the frame, the chosen photo, plus the delivery address when they send it themselves.
ElevenLabs and Anthropic are in the United States, so their voice and the conversation go through servers in the United States. Transfers are made with the safeguards required by the General Data Protection Regulation (standard contractual clauses and, where applicable, the EU–US Data Privacy Framework). They act as data processors: they only process the data to provide their service to us.
4. How long we keep it
Messages from the form, email and WhatsApp: for as long as we need to help you and, at most, two years after your last message, unless you ask us to delete them sooner. Data for the guide and the monthly emails: until you unsubscribe. Data for purchases and memorials: as explained in sections 2 and 6.
To unsubscribe, just use the link at the bottom of any email, reply to any of our emails with the word UNSUBSCRIBE (or BAJA), or write to hola@elultimoadios.app.
5. Your rights
You can ask us at any time to access, correct or delete your data, to restrict or object to its use, or to receive it in a readable format. Write to hola@elultimoadios.app and we will reply within one month at most. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).
6. Memorials and the family area
When a family prepares a memorial, we process the following on its behalf, to provide the service it has bought:
- Family members: name, email, each person’s role (manages, edits or family) and the date they last signed in. People sign in with a single-use link we send by email; there are no passwords.
- Memorial content: the person’s name and dates, their story, photos, videos, audio, memories and life timeline. Photos are stored without their internal data (EXIF), including GPS location.
- Guestbook and candles: the name and message of whoever signs. To prevent abuse we keep a fingerprint of the IP address that changes every day and cannot identify anyone.
- Their voice: the recordings the family provides, the signed permission (name, relationship to the person, date, IP address and browser, so that it can be evidenced) and the digital replica of their voice, created in ElevenLabs.
- The conversation: an artificial intelligence answers in their voice, based on what the family has told it. Each message is sent to Anthropic to write the answer and to ElevenLabs to give it their voice. We do not store the content of conversations on our server: it stays only in the browser of the person talking, until they close the tab. We do count how many messages and answers in their voice there are, for family use. If you speak to them instead of typing, the dictation is done by your browser or phone with its own speech recognition service (for example, Google’s in Chrome or Apple’s in Safari), and only the text reaches us. Only people invited by the family can talk to them.
Legal basis. The contract with whoever buys and, for their voice, the family’s explicit and separate consent, which can be withdrawn at any time from the family area: when it is withdrawn, we delete the replica of their voice. Only a close relative, the person themselves during their lifetime, or someone authorised by the family can create a memorial and give that permission.
Who can see it. The family chooses whether the memorial is public (anyone who scans the plaque or has the link), protected by a code, or visible only to invited people. Talking to them is always reserved for the people the family invites. Memorials are not shown in search engines. They are stored on our server, in Germany; their voice and the conversation go through the United States providers listed in section 3.
How long. For as long as the memorial is active, with no expiry date. If the voice is paused when the included year ends, we keep the replica of their voice in case you want to talk to them again, unless you ask us to delete it. The family can download all its content as a ZIP file at any time and ask us to delete it completely, voice replica included; we do so within 30 days at most. Any close relative can ask for a specific piece of content to be removed. If El Último Adiós had to close, we would tell you months in advance so you could download everything, and we would delete it afterwards.
7. Minors
The form, the guide and purchases are intended for people over 18.
8. Changes
If we change this policy, we will update the date above. If the change affects how we use your data, we will tell you by email before applying it.
You can also read the terms of purchase and the legal notice.