Privacy policy

1. Data controller

Legal name

MG SENTINEL, S.L.

Tax ID

B88921549

Registered address

Calle Inocencio Fernández, 67. 28035 Madrid (España)

Personal data email

privacy@mg-sentinel.com

2. Purpose of processing

Personal data received through the contact form or the published addresses is processed for the sole purpose of answering the enquiry sent and, where appropriate, maintaining the professional communication initiated by the user (institutional programmes, industrial partners, investors, press). It is not used for profiling, advertising or automated decision-making.

3. Legal basis

The explicit consent given by the user when submitting the form (art. 6.1.a GDPR) and, where applicable, the legitimate interest in managing professional relationships initiated at the user's own request (art. 6.1.f GDPR).

4. Categories of data

Identification data: name and, optionally, organisation. Contact data: email address. Content of the communication: the message sent. No special categories of data are collected. No tracking cookies or third-party analytics tools are used.

5. Retention, disclosures and transfers

Data is retained for as long as necessary to manage the enquiry and, thereafter, for the legally applicable limitation periods. It is not disclosed to third parties except where legally required. Form submissions are processed through Resend, Inc., a data processor established in the United States, under a processing agreement pursuant to art. 28 GDPR. This entails an international transfer of data to the USA, covered by Resend's certification under the EU-U.S. Data Privacy Framework (European Commission adequacy decision, art. 45 GDPR) and, additionally, by the standard contractual clauses (art. 46 GDPR) included in its processing agreement.

6. User rights

Users may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability over their personal data, and may withdraw their consent at any time. Such withdrawal does not affect the lawfulness of prior processing.

7. Exercising rights

To exercise any of the above rights, users may write by email to the controller, attaching a copy of an identity document. A response will be issued within a maximum of one month from receipt of the request.

8. Complaint to the supervisory authority

If users consider that their rights have not been properly addressed, they may lodge a complaint with the Spanish Data Protection Agency (AEPD) through its electronic office at www.aepd.es.