Privacy policy

1. Data controller

Controller: M/GRID Madrid, the trading name used to manage The Apex Madrid.

Privacy contact: agomezgropius@gmail.com.

The owner’s complete fiscal identity and address will be added to this notice and the contract before any definitive booking is accepted. Until then, this website only accepts information requests without payment.

2. Information we process

We process the information you enter in the form: full name, email, telephone, number of guests, voluntary trip details, language, source page and technical information strictly necessary to prevent abuse and keep the service secure.

We do not request bank or payment details through this website.

3. Purposes and legal bases

We use your information to answer the enquiry, check availability, prepare a proposal, contact you and, if you continue, take pre-contractual steps and arrange the booking. The legal basis is your request and pre-contractual measures under Article 6(1)(b) GDPR.

Consent under Article 6(1)(a) covers optional information and Google Maps. Legitimate interests under Article 6(1)(f) cover security, abuse prevention and legal defence. Legal obligations cover applicable fiscal and contractual retention.

We do not use your information for advertising or make automated decisions or commercial profiles.

4. Recipients and providers

Information is only shared with technical suppliers required to provide the service, professional advisers and authorities where legally required. The form uses FormSubmit, a Devro LABS service, to send the request to the stated inbox; its public documentation says submissions are archived for up to 30 days.

Maps are served by Google Maps only after consent. Some suppliers may process data outside the European Economic Area using safeguards required by applicable law.

5. Retention

Enquiries that do not become bookings are retained for no more than 12 months unless you request deletion earlier or retention is needed for a claim. Contract records are kept for applicable legal, tax and limitation periods.

6. Your rights

You may request access, correction, deletion, objection, restriction, portability or withdraw consent by emailing agomezgropius@gmail.com and stating the right you wish to exercise. We may request reasonable information to verify your identity.

You may complain to the Spanish Data Protection Agency at aepd.es if you believe processing is unlawful.

7. Security, children and changes

We use reasonable safeguards, although no Internet transmission is completely infallible. The form is not intended for anyone under 18. If we identify information submitted by a child without authority, we will delete it.

We may update this policy following legal or technical changes. The current version is always the one published here.