Privacy policy

Last updated: 6 October 2026

This policy explains what personal data may be processed when you visit mbtcompany.eu or contact MBT Company, why it is used and what choices you have. It applies to this website and to enquiries received through the channels described here. If you become a client, you may receive additional information specific to that service.

1. Who is responsible for your data?

2. What data may be processed?

• If you prepare an enquiry: your name, email address, message and, if you choose to provide it, telephone number. The form does not ask for special-category data; please do not include it in your message.
• Technical visit data: IP address, date and time, requested resource, server response and technical browser data needed to deliver and protect the website.

3. Why is it processed and what is the legal basis?

• To answer questions and requests for information or a quote: to take steps at your request before a possible contract (Article 6(1)(b) GDPR) and, for general enquiries, our legitimate interest in handling incoming communications (Article 6(1)(f) GDPR).
• To protect and maintain the website: our legitimate interest in preventing abuse, investigating errors and securing the server (Article 6(1)(f) GDPR).

We do not use these details for advertising or newsletters without a separate legal basis. We do not make automated decisions or create profiles about website visitors.

4. How does the “Let's talk” form work?

The form sends your name, email address, optional phone number and message to our server over HTTPS. The service validates the fields and, if valid, relays the enquiry by SMTP to info@mbtcompany.es through Hostinger Email. This website does not retain a copy of the message in a database or files. The page confirms submission only if the email provider accepts it; if sending fails, it displays an error and you can use the direct email link.

If you choose the email link instead, your message is sent from your own email app and your email providers’ terms apply.

5. Recipients and service providers

The website and VPS infrastructure provider may process technical connection data. Hostinger Email is the email provider used to deliver form enquiries and processes their contents for that purpose; messages reach MBT Company’s mailbox and are accessible to authorised personnel at JV Gestiones 2022. Data may also be disclosed to public authorities or courts where legally required.

The street map is an SVG hosted on this website and drawn from OpenStreetMap data; its route animates in your browser without loading remote map tiles or scripts. Compact attribution appears over the map and links to the licence. The “Get directions” link opens Google Maps only if you select it; from that point, Google may receive technical visit data and apply its own policy. This page does not use analytics, advertising or external tracking services.

The “Book a meeting” link takes you to the booking page of our application (app.mbtcompany.eu), run by JV Gestiones 2022 with no outside provider. If you book, we process your name, email, phone and the reason you write, with the day and time, only to handle the call you ask for (pre-contractual measures at your request, art. 6.1.b GDPR), with no commercial use, and we delete them 3 months after the call. See the application’s privacy policy.

6. International transfers

Hostinger states that data processed through its services may be handled by group entities and subprocessors, and that international transfers may occur. The applicable terms and safeguards for its email service are described in its Data Processing Addendum. Google Maps may also process data if you choose its directions link.

7. How long is data kept?

• Email enquiries: for as long as needed to answer and close the enquiry. Afterwards, data may be restricted for the time needed to handle legal liabilities or claims and deleted when no longer necessary.
• Technical server logs: rotated daily; the current configuration retains up to 14 rotations, normally about 14 days, unless a security incident requires evidence to be kept longer.

8. Your rights

Where applicable, you may request access, rectification, erasure, restriction of processing, data portability or object to processing. If a processing activity is based on consent, you may withdraw it without affecting processing carried out before withdrawal. To exercise your rights, email info@mbtcompany.es and explain your request; reasonable information may be requested to verify your identity.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

9. Cookies and external links

In this configuration, we do not use first- or third-party cookies, analytics, advertising, tracking pixels, or session storage. The language switch stores your choice (mbt.lang) in the browser's local storage only to remember it on your next visit: you ask for it, it does not identify you, it is not sent to any server, and you can delete it in your browser settings. The website loads its files from this domain; the OpenStreetMap-based map is local too. The Google Maps, WhatsApp, email and booking links open those services only if you select them. See the Cookie policyfor this configuration and when it might change.

10. Security and updates

Reasonable technical measures are used to protect the website and limit access to information. No system connected to the internet can guarantee absolute security. This policy may be updated if the website, services or legal requirements change; the date above identifies the latest version.

Legal framework: Regulation (EU) 2016/679 (GDPR) and Spain's Organic Law 3/2018 on Personal Data Protection and digital rights. If this translation differs from the Spanish version, the Spanish version prevails.