1. Who we are
This Privacy Notice explains how Madrid School of Business and Technology ("we", "us", "our", or "the School") collects and processes your personal data when you visit our website at madridbusinesstech.com or register your interest in our programmes.
For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Spanish data-protection law (Ley Orgánica 3/2018, LOPDGDD), the data controller is Madrid School of Business and Technology, based in Madrid, Spain. You can contact us about data protection at [email protected].
2. What data we collect
When you register your interest through our website, we collect the information you provide in the form:
- First and last name
- Email address
- Country of residence
- The programme or programmes you are interested in
We may also collect limited technical information automatically when you visit the site, such as your IP address, browser type, and pages viewed, through standard server logs used to keep the site secure and working correctly.
3. How and why we use your data
We process your personal data for the following purposes and on the following legal bases under Article 6 of the GDPR:
| Purpose | Legal basis |
|---|---|
| To respond to your registration of interest and send you programme details, admissions information, and related updates you have asked for. | Consent (Art. 6(1)(a)), which you give when you submit the form. |
| To contact you about our programmes and admissions where you have expressed interest. | Consent, and/or our legitimate interest in responding to prospective students (Art. 6(1)(f)). |
| To operate, secure, and improve our website. | Our legitimate interest in running a safe, functional website (Art. 6(1)(f)). |
| To comply with legal obligations that apply to us. | Legal obligation (Art. 6(1)(c)). |
We will not use your data for automated decision-making that produces legal or similarly significant effects, and we will not sell your personal data.
4. How long we keep your data
We keep your registration data for as long as needed to respond to your interest and, if you become a candidate or student, for the duration of that relationship and any period required by law. If you do not enrol, we will retain your interest data for no longer than 24 months from your last contact with us, after which it is deleted or anonymised. You can ask us to delete it sooner at any time (see section 6).
5. Who we share your data with
We share personal data only where necessary, and with appropriate safeguards, including with:
- Service providers who process data on our behalf (for example, our form-handling provider and our email and hosting providers). These act as data processors under written agreements that require them to protect your data.
- Professional advisers and authorities where required by law or to protect our legal rights.
Some of our providers may process data outside the European Economic Area (EEA). Where they do, we rely on an adequacy decision or on appropriate safeguards such as the European Commission's Standard Contractual Clauses. You can contact us for more information about these transfers.
6. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request erasure of your data ("right to be forgotten");
- Restrict or object to our processing;
- Data portability, where applicable;
- Withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise any of these rights, contact us at [email protected]. You can also unsubscribe from our emails at any time using the link in each message.
7. Your right to complain
If you believe we have not handled your data properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), www.aepd.es, or with the supervisory authority in your country of residence. We would, however, appreciate the chance to address your concerns first.
8. How we protect your data
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure (HTTPS) transmission of website data and access controls on the systems that store it.
9. Cookies
Our website uses only the cookies necessary for it to function correctly. We do not use marketing cookies. You can control cookies through your browser settings.
10. Changes to this notice
We may update this Privacy Notice from time to time. The current version is always published on this page, with the "last updated" date shown above.
11. Contact us
For any question about this notice or your personal data, contact us at [email protected].