Version 2026-10-draft-1

Privacy policy

This draft is a placeholder and must be reviewed by legal counsel before publication. Items in [brackets] need to be completed.

Who we are

Data controller: [Legal entity name], [registered address], [company registration number]. Contact: [privacy contact email].

What we collect

When you request an invitation we collect your full name, email address and optionally your WhatsApp or phone number, together with the time you gave consent and the privacy policy version.

For personal invitations, authorized organizers also record the inviting host, invitation and expiry dates, invitation status and private follow-up notes. We verify your email before accepting personal invitation details. When you use a friend’s referral link, we record that introduction without displaying your referrer’s private records. No guest list is public. Any future guest profile visibility will require a separate opt-in.

Guests can invite friends by creating a personal link that they send themselves. We store only the friend’s first name and who invited them. Full name, email and phone are stored only if the friend chooses to request participation. This data is used only for this event.

Why we use it

Solely to review your request and contact you privately about the Madrid Invitational. Legal basis: your consent (GDPR Art. 6(1)(a)). We do not sell your data and use no non-essential trackers.

Retention

We keep request data for [retention period], after which it is deleted unless you become a participant.

Your rights

You may access, correct, delete or withdraw consent at any time by writing to [privacy contact email]. You may also complain to your local supervisory authority, in Spain the Agencia Española de Protección de Datos.