This legal text provides details on how we collect and process your personal data through the use of our website http://www.engage-mh.com, including any information you may provide to us through the site when submitting your data via the form provided for that purpose.
By providing us with your data, you acknowledge that our services are not available to individuals who are legally prohibited from giving consent. Therefore, when you submit any forms, you guarantee that you have the legal capacity to provide consent.
Below, we provide information regarding the data protection policy of DG Invest Hospitality, S.L. and IPIH Espagne, S.L.
Contact details of the Data Controller:
DG Invest Hospitality, S.L. and IPIH Espagne, S.L.
Tax ID (CIF): B09801119 / B55134704
Registered addresses:
Company Registrations:
DG Invest Hospitality, S.L. and IPIH Espagne, S.L. are responsible for your personal data (hereinafter, “we”, “us”, or “our”).
The General Data Protection Regulation (GDPR) defines personal data as any information relating to an identified or identifiable natural person — that is, any information capable of identifying an individual. This does not include anonymous or aggregated data.
The personal data that may be collected directly from the data subject will be treated confidentially and incorporated into the respective data processing activities owned by DG Invest Hospitality, S.L. and IPIH Espagne, S.L.
On our website, we may process the following categories of personal data:
We do not collect any information related to special categories of personal data (such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, genetic or biometric data).
If we are legally required to collect personal data from you, or under the terms of a contract between us, and you refuse to provide it, we may be unable to perform the contract or provide the requested service, and you must inform us in advance.
We collect personal data through the following means:
The most common purposes for processing your personal data are:
You may withdraw your consent at any time by emailing engage@engage-mh.com, or by following the instructions in the section on the exercise of data protection rights below.
| Form / Context | Purpose | Type of Data | Lawful Basis for Processing |
|---|---|---|---|
| Contact Form | To manage inquiries and requests for information received through the website | Name, Email, Telephone | Consent of the data subject (Art. 6.1.a GDPR); Pre-contractual measures (Art. 6.1.b GDPR); Legitimate interest of the controller (Art. 6.1.f GDPR) |
Purpose: We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible reason, in which case we will notify you in advance and explain the lawful basis for doing so.
We will retain your data only for as long as necessary to fulfill the purposes for which it was collected and to determine any potential liabilities arising from such purposes and processing. The applicable retention period will depend on the relevant legal requirements in force.
DG Invest Hospitality, S.L. and IPIH Espagne, S.L. do not authorize individuals under 14 years of age to provide personal data through the means available on this website (such as completing web forms, requesting services, or contacting us via email).
Therefore, any individual who provides personal data using these methods formally declares that they are over 14 years of age, and DG Invest Hospitality, S.L. and IPIH Espagne, S.L. shall be exempt from any liability arising from non-compliance with this requirement.
If your child, who is below the age limit, has provided personal information to DG Invest Hospitality, S.L. or IPIH Espagne, S.L., please contact us to exercise the applicable rights.
If any of the services offered by DG Invest Hospitality, S.L. and IPIH Espagne, S.L. are directed at minors under 14, appropriate mechanisms will be established to obtain the consent of parents or legal guardians.
How to exercise your rights:
Users may contact DG Invest Hospitality, S.L. or IPIH Espagne, S.L. by sending a letter to the registered address or by email to engage@engage-mh.com, including a copy of their ID or similar identification document, to exercise the following rights:
You may use the forms provided by the Spanish Data Protection Agency (AEPD) to exercise these rights: click here.
If you believe there is an issue with how DG Invest Hospitality, S.L. or IPIH Espagne, S.L. is handling your data, you have the right to file a complaint with the supervisory authority — in Spain, this is the Agencia Española de Protección de Datos (AEPD).
We may request specific information to confirm your identity and ensure your right to access your personal data (or exercise any other rights). This is a security measure to prevent personal data from being disclosed to unauthorized individuals.
All requests will be processed within the legal timeframe of one month. If your request is particularly complex, we may require more time, but we will notify you accordingly.
In the course of our work, we may require assistance from third parties who will process data solely to provide the contracted services and who are subject to appropriate safeguards to ensure your rights.
These third parties may include:
All data processors to whom we transfer your data will respect its security and process it in accordance with the GDPR.
We only allow such processors to handle your data for specific purposes and under our instructions.
For transparency, you may request a list of these third-party service providers by emailing engage@engage-mh.com.
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way.
Access to your data is restricted to employees, agents, contractors, and third parties who have a legitimate business need to know. They will only process your data according to our instructions and are subject to confidentiality obligations.
We have also implemented procedures to handle any suspected data breach, and we will notify you and the competent Supervisory Authority of any breach in accordance with Articles 33 and 34 of the GDPR.
