Privacy Policy


With this privacy policy, Mersi Studio (hereinafter, “we” or “Mersi Studio”) informs you of the personal data it collects through the services it offers and which are reflected through the website www.mersistudio.net (hereinafter, “our website” or “this website”), how it processes them and the rights that, in relation to your personal data and our processing, are conferred on you by the personal data protection regulations applicable to us.


Applicable regulations:


Law 29/2021, of October 28, on the protection of personal data of the Principality of Andorra (hereinafter, the LQPD)

Decree 391/2022, of 28-9-2022, approving the Regulations for the implementation of the LQPD

Decree 45/2023, of 25-1-2023, approving the Regulations amending the Regulations for the application of the LQPD

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, “the GDPR”)

In the following table you will find links to facilitate your access to the points of this policy that may be of interest to you; however, please read all sections of the legal notice, the cookie policy and this privacy policy before using this website.



1. To whom does this privacy policy apply?


This policy applies to individuals who interact with the Government through this website, to users of the services that the Government offers for the purposes described in section 4 of this policy (the services) and to all individuals whose personal data (for example, images) may appear on our website or in the context of the services.



2. Who is responsible for the processing of your personal data?


The sole party responsible for the processing of your personal data in accordance with this policy is: Mersi Studio, with NRT U-802767-V and with postal address for the purposes of this policy at Crta: Engolasters 25, Bajos. AD700 Escaldes-Engordany, Andorra (Principality of Andorra).


Mersi Studio is not responsible for your activities on other websites, even if you access them through links on our website. We therefore strongly recommend that you carefully read the information provided by the managers of these other websites before providing them with your personal data (especially the privacy and cookie policies of each website you visit), and that you contact these managers if you have any concerns or questions.



3. How do we obtain your personal data?


In general, you are the one who directly provides us with your personal data - for example, by using the forms on this website. The only exceptions to this rule are:


  • Personal data provided to us by third parties on your behalf (as a beneficiary).
  • Photographs or videos of events we organize or participate in, and in which you may appear.
  • The photographs, texts or other media that the author may submit for publication on our website or our social networks, normally within the framework of a participatory process, in accordance with the corresponding terms and conditions, and therefore, with his/her consent.
  • Images or other personal data that correspond to a news item in which we consider that the public interest, our obligation of transparency and the right to information prevail over the possible interests of the persons whose image or other personal data is published on our website or social networks.
  • Images that correspond to any content on the website for which we have the corresponding rights.
  • The personal data about you that may appear in the emails and instant messages we receive, or through the forms on our website.
  • The cookies on this website, about which you will find more information below.



4. What do we use your data for and on what legal basis do we do so?


To confirm your identity


The cookies on this website, about which you will find more information below.

If we do not know you, we may use your personal data to confirm your identity and, if necessary, the entity you work for and your role within that entity. We do this where we are subject to legal obligations requiring us to authenticate your identity before we continue to process your personal data, or where it is in our legitimate interest to ensure that your request is genuine and not made for fraudulent purposes or is spam.


To offer you a more personalized service


We collect the optional data that you voluntarily provide us in the forms (which are not marked with “*”) to offer you a more personalized service in relation to the purpose for which the form is specifically dedicated, and to extract statistics that help us improve our attention and our services. The basis that legitimizes us to process this personal data for this purpose is the consent that you express when you provide it to us. You may retract and withdraw your consent at any time, with the sole effect that we will no longer use this personal data and, therefore, the services associated with the form will be less personalized from that moment on.


To publish the photographs, drawings, etc., that you send us


We collect the data you provide us in the photographs, drawings, writings or any other means of participation on our website and our social networks, with the purpose of disseminating the work of our artists. The basis that legitimizes these treatments is your consent, which you express when sending us your work, or the fact that it is necessary to execute the agreement of publication on the web. You can withdraw this consent at any time as indicated later in this policy, and the only consequence is that we will remove from the website and our social networks the work published in accordance with this consent, and we will keep it blocked for the time during which we may receive claims or complaints for having published it.


To develop our public functions


We collect and process data that the interested party provides us directly, or that we request from third parties in accordance with the powers granted to us by law, in order to carry out the exercise of our public functions. For example, to process what may be required from the general Administration. The basis that legitimizes the processing of personal data to carry out the public functions assigned to us by the laws identified on this website is the public interest.


To execute our agreements or contracts


Mersi Studio collects data that you provide directly, or that is provided by third parties on your behalf (identification, contact, financial and often employment data), during the signing of agreements or contracts to which Mersi Studio and you (or the entity you represent) are party, in order to formalize, manage, execute them and keep you informed about everything that may be of interest to you (or the entity you represent) in relation to the matters referred to in the scope of each agreement or contract. The processing of your data for the purpose of keeping you informed in relation to the matters referred to in the scope of our agreement or contract is legitimized by our public interest (if the contract is linked to our public function) or our legitimate interest (if it is not). The processing of your data for the other purposes is legitimized, in these cases, to be necessary to execute the terms and conditions of the corresponding agreement or contract, or to establish pre-contractual conditions when you so request.


To extract statistics that help us improve our services


We use the data you provide us in the forms on this website to extract aggregated statistics (in which it is not possible to identify any specific person) in order to improve the services we offer you.

The basis that legitimizes us to process your data for this purpose is our legitimate interest in improving our economic results and, simultaneously, the services we offer you.


To respond to your requests, queries or complaints


We collect the personal data that you voluntarily and freely provide us in your emails or instant messaging messages, by phone, through web forms such as the contact form, or through requests to exercise rights, to deal with your requests, queries or complaints in relation to our services or the rights you have over your personal data. The legal basis for these treatments is our legal obligation to deal with your requests to exercise rights, and, for the rest of the purposes, our legitimate interest in serving you. The provision of your personal data is, therefore, voluntary, although if you do not provide it to us, we will not be able to give free rein to your request, query or complaint. You can object to our legitimate interest whenever you wish, although, equally, this objection will make it impossible to continue processing the request, query or complaint.


To analyze your assessment of our services, to improve them


We may process the data you provide us through surveys to request your assessment of the service you have received. The basis that legitimises these processing operations is our legitimate interest in improving the quality of our services.


To send you information of interest


We collect your email address when you subscribe to our commercial communications service (newsletters) to inform you about news, events, grants or other news that we may consider of interest to you. The legal basis for this processing is your consent, and you can withdraw it at any time by exercising your right as indicated later in this policy, or through the link at the bottom of each email. The only consequence of withdrawing consent is that you will no longer receive the catalogues and information we send you by email, and you will not be able to participate in promotions, contests or raffles reserved for our subscribers.


To manage possible future claims


We retain data that may be necessary to manage your or our potential claims based on our legitimate interest in defending ourselves to safeguard our rights.


To provide media coverage to activities and events


If you participate in our activities or attend our events or award ceremonies in person, the independent press and our own professionals may record your image and, at previously agreed times, your voice, in the context of the event or the award ceremony. The legal basis for this processing of your image is your express consent whenever we can ask for it, or, when this is not possible (for example, when time has passed since the recording and we do not have your contact details), the public interest in promoting the events and activities that we organize or sponsor, or that we consider to have a link with the country's brand. You are not obliged to appear in a recording. If you wish, you have the right to withdraw your consent or to object to our public interest at any time. In order to assess your opposition to the public interest, and if necessary immediately remove the images in which you are identified, we will ask you to tell us where you have seen them.


To promote our facilities, products and services


If you have signed a contract or consent to transfer image rights with us, we may collect photographs or videos of our facilities, products or services in which you are identified, and perhaps you are pictured, to later use them in promotional campaigns or publish them in the media such as national or international press, our websites or other media such as public radio or television. If you have signed a consent to transfer image rights, we inform you that you can revoke it at any time so that we can remove your image, without the revocation having any effect on the dissemination of the image that has taken place before processing the request. Additionally, we can graphically record the atmosphere of our facilities to promote them or to promote your products and services and, eventually, your image may appear in this graphic material. Unlike what is indicated in the previous paragraph, in this case the legal basis for the processing of your images is our legitimate interest, which you can object to at any time if you consider that it is contrary to your own interests. In order to assess your objection to our legitimate interest and, where appropriate, immediately remove the images that identify you, we will ask you to tell us where you saw them.


To facilitate our audits


When you request it, we provide access to your personal data to the entities that audit us. The Government has no influence on the audit and, equally, the entity that audits us is obliged to carry out the audit in an objective and independent manner, and therefore the Government limits itself to making documents that may include your data available to the audit entity, while the audit entity is responsible for any subsequent processing as well as the way in which the audit data is stored. This processing of your personal data is legitimised by our legal obligation to undergo periodic audits.


To share personal data with other public administrations that need them to carry out their public function


Public administrations may communicate personal data by informing the interested party of how to do so through this policy, without their consent being necessary, provided that the requesting public administration justifies that the data requested are necessary and proportional for the exercise of its powers within the framework of the sending of an administrative procedure, or that they are related to scientific, historical or statistical purposes.1 In the event that the requesting public administration does not prove the above, the requested public administration must reject its communication. The legal basis for this treatment is our legal obligation described in section 7 of article 17 of the LQPD. 1 Please note that any transfer of data to a third party is a processing activity in itself, independent of the other activities of the entity that transfers the data, and that, from the transfer, it is the third party who becomes responsible for the subsequent processing of these data.


To ensure the functioning of our website (functional cookies)


We use functional cookies to collect, store, consult and process personal information (linked to you by unique identifiers or IP addresses) from your device's browser in order to ensure the proper functioning of our website. As these are cookies necessary for the proper functioning of the website, or personalization cookies, their use does not require you to give us your express consent, and the basis that legitimizes us to use them is our legitimate interest in being able to offer you the services of our website in accordance with your preferences. You can find more information about these cookies in our cookie policy.


To extract aggregated statistics on the use of our website (analytical cookies)


We use analytical or statistical cookies to identify the most and least visited pages, analyse which content is of greatest interest to our visitors, and measure the success of our information campaigns, all with the aim of improving the services we offer you through the website. All these purposes provide aggregate results, in which it is not possible to identify the interests of any specific person.

The LQPD does not impose specific requirements on this type of cookies, and the European Data Protection Committee has noted that, generally, if they are not sent to third parties, the data collected for statistical purposes does not pose an appreciable risk to the data subjects.

However, the law regulating electronic contracting and operators who carry out their economic activity in a digital space requires that, when the website is dedicated, among other things, to carrying out an economic activity in the digital space, or if the data collected by the statistical cookies are shared with third parties, the data controller may only use the data from the statistical cookies or transfer them to third parties with your consent. In the case of our website, we will ask for your consent before using your data, and the fact of not giving it to us or withdrawing it will not have any other effect than to hinder our purpose of improving the website by analyzing aggregated statistics of the navigation of our visitors.

You can find more information about these cookies in our cookie policy.


To improve the interest of the advertising you receive (advertising cookies)


We download advertising cookies from third parties. These files help us infer your interests based on the pages you visit, the content you click on and other actions you take online.

As these are not necessary cookies, we will not use them without your consent, and not giving or withdrawing your consent will have no effect unless your visit to our website cannot be used to improve the interest of the advertising you receive. You can find more information about these cookies in our cookie policy.


To use Google services


Additionally, as an obligation that Google LLC, a company of which Google Ireland Ltd is a subsidiary, imposes on entities that, like us, use the Google Analytics tools, we inform you that these two services are operated by Google Inc., domiciled at 1600 Amphitheatre Parkway, Mountain View, CA 94043, in the USA, and that Google Inc. is a beneficiary of these services.


The information generated by the cookies about your use of this website and your advertising preferences is generally transmitted to a Google server in the USA and stored there. For more information, please refer to the page describing how Google uses information from our website and/or to Google's privacy policy for the services mentioned above. Please note that we have activated the IP anonymization function on Google's service in order to add additional safeguards to the standard contractual clauses protecting this international data transfer to the USA. In doing so, Google will shorten your IP address before transmitting it to the USA (identity obfuscation process). Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. Google guarantees that the IP address transmitted by your browser to Google Analytics will not be processed together with any other data held by Google. You can view the categories of personal data processed by these services at privacy.google.com/businesses/adsservices.


To communicate security breaches


The Government takes security measures appropriate to the level of risk to protect personal information against loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in the processing and the nature of the personal information. However, if we determine that your data has been misappropriated (including by a Government employee or former employee), has been exposed by a security breach or has been acquired incorrectly by a third party and exposes you to a high risk, we will immediately inform you about this security breach, misappropriation or acquisition, and about the measures we have taken and those we recommend you take so that the breach does not affect you. The basis that legitimizes this treatment is the legal obligation provided for in article 37 of the LQPD (35 of the RGPD), and our legitimate interest in preventing this security breach from harming you.


For other scientific, historical, statistical, or other purposes that are not incompatible with the above


We may use your personal data for other scientific, historical, statistical or other purposes that are not incompatible with those indicated above, for reasons of public interest, provided that it is permitted by a law and by current regulations on the protection of personal data, and of course, acting in accordance with these regulations and other applicable regulations.



5. With whom can we share your personal data?


We do not share your personal data with anyone, except:


  • You are the one who asks us.
  • We have a legal obligation to do so.
  • It is necessary to enforce the terms and conditions of our agreements or contracts, including investigation of potential violations.
  • It is necessary to detect, prevent, or otherwise address fraud, security or technical issues.
  • We are jointly responsible for data collection, so that, always with your consent, other entities can process it on their own behalf.


This is the case of:


  • Other public administration entities that justify that the requested data are necessary and proportional for the exercise of their powers within the scope of the submission of an administrative procedure.
  • Google Ireland Ltd., with registered office at 4 Gordon House, Barrow, Dublin, Ireland, which we have commissioned to process the data for the cookies necessary to use its Analytics services. Google Ireland Ltd. acts as an independent controller for all processing it carries out on your behalf in accordance with its privacy policy. We transfer data to Google Ireland Ltd. based on the data protection agreement that this company located in the EU includes in the addendum to the standard contract for countries suitable for the GDPR, such as Andorra, to which we add the additional safeguard of activating the anonymization of the IP addresses collected by the cookies. In our cookie policy you will see which analytical and advertising cookies we offer you and how you can configure them.


  • A company subcontracted by us needs to process them on our behalf (for example, the company that provides us with data protection officer services, and that must respond to your requests to exercise your rights), always under the terms and conditions of the corresponding data processing manager contract.
  • We need to protect or defend the rights or property of the Government.


No international transfer of personal data is planned, and if we eventually need to do so, we inform you that they will comply with the provisions of the regulations in force that affect us at any given time, and preferably, selecting providers that guarantee that they only transfer your data when the recipient countries offer a level of protection equivalent to Andorran law, in accordance with article 43 of the LQPD.



6. How long do we retain personal data?


Mersi Studio retains personal data only for the duration of the processing that requires it and, afterwards, for as long as it takes for the legal responsibilities that affect us at any given time to expire, arising from the processing in question (including the obligation to be able to demonstrate that we have attended to your request for the destruction of personal data).


We will destroy any unnecessary or disproportionately large personal data that may appear in emails and instant messages we receive, or through forms on our website as soon as we receive it.


We will destroy (and rectify) any personal data that we find to be inaccurate as soon as we become aware of its inaccuracy.

If you send us a copy of an identity document, we will destroy this copy or obfuscate the sensitive data as soon as we have verified that it fulfills the function for which you sent it to us.


Where we have no legitimate purpose to process some of your personal data, we will either delete or anonymise it or, if this is not possible (for example, so that it can be stored in backup archives), then we will securely store your personal data and block it in order to isolate it from any further processing until deletion is possible.



7. What rights do you have?


You have the right to obtain confirmation as to whether or not we hold any of your personal data.


We remind you that when we share personal data with other controllers, you must exercise your rights directly with these controllers by following the instructions provided in their own privacy policies. Specifically, in relation to the data that our cookies share with Google, we inform you that you can install the add-on in the Chrome, Internet Explorer, Safari, Firefox or Opera browsers to not send Google Analytics or Google Ads data to Google Inc. .


Below we explain what other rights you have and how you can exercise them.


Your rights


You may request us to exercise the following rights:


  • Access to your personal data.
  • Rectification of any of your personal data, specifying the reason.
  • Delete some or all of your personal data.
  • Limitation of the processing of your data, specifying the reason for the limitation.
  • Opposition to the processing of your personal data.
  • Portability of your data when the basis for legitimation of the collection has been consent or a contract.
  • Right not to be subject to automated individual decisions.


The consent given, both for the processing and for the transfer of the data of the interested parties, is revocable at any time and it is necessary to communicate it, as with any other right, as indicated in the following section. This revocation will in no case be retroactive.


Where and how you can exercise your rights


You can exercise your rights:


  • By sending a written request to the Government, addressed to our postal address, indicated in section 2 of this policy, indicating a means of contacting you so that we can respond to your request, or ask you for more information if necessary. We would appreciate it if you wrote on the envelope “Exercise of personal data protection rights”.


  • By sending an email or the form associated with the right you wish to exercise to the email address hola@mersistudio.net, preferably indicating “Exercise of personal data protection rights” in the subject line. You will find these forms later in this same section of the privacy policy.APDA).


In both cases, if we are unable to verify that you are who you say you are, we will ask you to provide us with proof of your identity, to ensure that we respond only to the interested party or their legal representative.


If the person sending the email does so as a representative of the interested party, the accreditation of the representative must be done through documents or legal instruments that correctly identify the interested party and the representative and specify the task or procedure for which the representation is delegated.


Finally, and especially if you consider that you have not obtained full satisfaction regarding the exercise of your rights, we inform you that you may file a claim with the national supervisory authority of your country, or contact the Andorran Data Protection Agency (APDA) for this purpose.


Forms for exercising your rights


In order to facilitate the exercise of your rights, we recommend that you use the corresponding request forms from the following, and not fill in the data that you consider not necessary to authenticate your identity or that of your representative:


  • Form for exercising the right of access
  • Form for exercising the right to rectification
  • Form for exercising the right to object
  • Form for exercising the right to erasure
  • Form for exercising the right to restrict processing
  • Form for exercising the right to portability
  • Form for exercising the right not to be subject to automated individual decisions



8. What responsibilities do you have?


By providing us with your data, you guarantee that it is accurate and complete. You also confirm that you are responsible for the veracity of the personal data that you have provided to us and that you will keep it updated so that it reflects your real situation, and that you will be responsible for any false or inaccurate personal data that you may provide us, or that subsequently becomes inaccurate, as well as for any direct or indirect damages that may arise from its inaccuracy.


You may not provide us with other people's data unless it is justified in relation to the services you request from us. In any case, if you provide us with the personal data of third parties, you assume the responsibility of informing said third parties before providing us with their personal data. This information that you must provide to the third parties whose data you provide us must include all the provisions set out in this privacy policy, and it is you who are responsible for the legality of this personal data and for transmitting to its owners the rights they have in relation to their personal data.


In cases where you must provide us with data of a person under 16 years of age or of a person whose rights are limited, you are obliged to obtain the authorisation of the holders of their parental authority or guardianship. Without this authorisation, you are prohibited from providing us with any personal data of these persons.



9. How do we protect your personal data?


We are fully committed to protecting your privacy and personal data. We have kept records of all personal data processing activities we carry out, we have analysed the risk that each of these activities may pose to you, and we have implemented appropriate legal, technical and organisational safeguards to prevent, as far as possible, the alteration, misuse, loss, theft, unauthorised access or unauthorised processing of your personal data. We keep our policies up to date to ensure that we provide you with all the information we have about the processing of your personal data, and to ensure that our staff receives appropriate guidance on how to process it. We have signed data protection clauses and data processor contracts with all of our service providers, taking into account the need each has to process personal data.


We restrict access to personal data to employees who really need to know it in order to carry out any of the processing mentioned in this policy, and we have trained and made them aware of the importance of confidentiality and maintaining the integrity and availability of information, as well as the disciplinary measures that any potential infringement in this matter would entail.


However, if Mersi Studio determines that your data has been misappropriated, exposed by a security breach, or improperly acquired by a third party, Mersi Studio will immediately inform you of this security breach, misappropriation, or acquisition.



10. Modifications to this privacy policy


We will update this policy when necessary to reflect any changes in the regulations or in our processing. You will have the option to exercise your rights as we informed you in a previous section. In any case, we recommend that you periodically review this privacy policy to find out how we protect your personal data.


If you have any questions about this policy, please feel free to let us know by emailing us at hello@mersistudio.net.


Last updated: January 10, 2025