Below, we inform you about the privacy policy applied in cases where the interested party, through browsing and/or using the website https://www.elementsmadrid.com (hereinafter, the “Website”), provides us with personal data. We would like to inform you of our updated Privacy Policy and how we handle the personal data you provide, including the data we collect through browsing our Website.

1.⁠ ⁠IDENTIFICATION OF THE DATA CONTROLLER
   •    Owner: Elements Madrid (hereinafter referred to as the “Controller”)
   •    Email: contact@elementsmadrid.com
 
2.⁠ ⁠INFORMATION AND CONSENT
In accordance with the EU General Data Protection Regulation 679/2016 (“GDPR”) and the Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights (“LOPDGDD”), by accepting this Privacy Policy, the data subject (hereinafter, the “Data Subject”) gives their informed, express, free, and unequivocal consent for the processing of their personal data collected through the Website, either via forms or through cookies.
The Data Subject consents to Elements Madrid processing their data to provide its services while applying the necessary security and organizational measures required by GDPR.

All requested personal data is mandatory, and the Controller cannot provide services without processing this data. However, browsing the Website is free.

The Data Subject guarantees that the personal data provided is true and accurate, and the Controller is not responsible for any inaccuracies provided by the Data Subject. The Data Subject may exercise their right to rectification if necessary.

If the Data Subject provides third-party data, they are responsible for ensuring compliance with all data protection regulations and obtaining prior consent from such third parties.

3.⁠ ⁠PURPOSES OF DATA PROCESSING AND LEGAL BASIS
The personal data of the Data Subject will be treated confidentially and incorporated into the corresponding processing activities of the Controller.
The processing activities carried out by the Controller are as follows:
ACTIVITY: CONTACT INQUIRIES, EVENT INVITATIONS, AND DIGITAL PRODUCTS
   •    Source: Provided directly by the Data Subject through forms on the Website.
   •    Legal Basis:
   •    GDPR Article 6.1.b): Execution of a contract or pre-contractual measures.
   •    Purpose:
   •    To respond to contact inquiries.
   •    To send invitations to events.
   •    To provide access to digital products.
   •    Data Collected: Name and email address.
   •    Recipients: No data will be shared with third parties unless legally required or with the prior, explicit consent of the Data Subject.
   •    International Data Transfers: No international data transfers are carried out.
   •    Retention Period: The data will be kept for a maximum of one (1) year.

4.⁠ ⁠DATA SUBJECT RIGHTS
The Data Subject guarantees they are over 18 years old and that the provided data is accurate, complete, and up to date. The Controller is not responsible for any damages resulting from inaccurate data.
If the data provided belongs to a third party, the Data Subject guarantees they have informed the third party of the privacy policy and obtained their consent before submitting their data.

The Data Subject may exercise the following rights as per GDPR:
   •    Right of access – The right to request a copy of the personal data being processed.
   •    Right to rectification – The right to request corrections to inaccurate or incomplete data.
   •    Right to erasure (right to be forgotten) – The right to request the deletion of personal data when it is no longer needed for the original purpose or upon withdrawal of consent.
   •    Right to restriction of processing – The right to request a temporary halt to data processing under specific conditions.
   •    Right to data portability – The right to receive data in a structured format and transmit it to another controller.
   •    Right to object – The right to object to the processing of personal data.

To exercise these rights, the Data Subject may send an email to contact@elementsmadrid.com with their name, surname, email address, and a copy of an identification document (e.g., ID card or passport).
If the Data Subject believes their data protection rights have been violated, they may file a complaint with the Spanish Data Protection Agency.

5.⁠ ⁠COOKIES POLICY
The Website may use cookies. Any personal data obtained through cookies will be processed in accordance with our Cookies Policy, which is available on the Website.

6.⁠ ⁠ACCEPTANCE OF THE PRIVACY POLICY
The Data Subject acknowledges and agrees that they have read and understood this Privacy Policy. By browsing and/or using the Website, the Data Subject expressly agrees to be bound by the terms of this Privacy Policy.

Last updated: 30th march 2025