Privacy Policy

This policy explains how Madrid International Business School processes personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

• Controller: Madrid International Business School
• Tax ID (CIF): B-55381040
• Address: Paseo de la Castellana, 200, planta 7, oficinas 701–720, 28046 Madrid, Spain
• Contact: director@ibsmadrid.com

2. What data we collect

When you use our enquiry form or write to us, we collect the data you provide: name, email address, organisation, phone number, the programme you are interested in and your message.

3. Why we use it and legal basis

• To answer your enquiry and send you the information you request. Legal basis: your consent and, where applicable, steps taken at your request before entering into an agreement.
• To manage cooperation agreements and programme participation with you or your institution. Legal basis: performance of a contract.
• To comply with legal obligations, such as tax and accounting rules. Legal basis: legal obligation.

We do not use your data for automated decision-making or profiling, and we do not sell it.

4. How long we keep it

Enquiry data is kept for as long as needed to answer you and, at most, two years after our last contact, unless a contractual relationship begins. Contract data is kept for the duration of the relationship and afterwards for the periods required by law.

5. Who receives your data

Your data is not shared with third parties except where required by law, or with service providers that help us run this website and our communications (for example, web hosting and email), under data processing agreements. If you take part in an international mobility, the data needed to organise it may be shared with host institutions, travel and accommodation providers, with your knowledge.

6. International transfers

Some providers may process data outside the European Economic Area. In that case we make sure appropriate safeguards are in place, such as the European Commission’s standard contractual clauses.

7. Your rights

You can request access, rectification, erasure, restriction of processing, objection and data portability, and withdraw your consent at any time, by writing to director@ibsmadrid.com. If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.

8. Security

We apply technical and organisational measures appropriate to the risk to protect your data against loss, misuse or unauthorised access.

9. Changes

We may update this policy. The current version is always available on this page.

Last updated: October 2026.