Privacy policy

MEDLA ASESORES S.L., Spanish tax identification number (NIF) B56848799, with contact address at C/ Velázquez, 27, Piso 1º ext. izq., Barrio de Salamanca, 28001 Madrid, Spain. For privacy enquiries, write to [email protected].

Enquiries and requests. We collect the details you enter in the selected form: your name, surname where requested, email, phone number, message and preferences needed to handle your request, such as the service or preferred appointment time. We use these details to respond to your service request, take steps before entering into a contract and, where you engage us, perform the service (GDPR Article 6(1)(b)). Required fields are needed to process the request; without them the form cannot be submitted. The form’s data processing checkbox is separate from the optional marketing checkbox.

Newsletter and other communications. The general form lets you request information about the newsletter; submitting it does not confirm an automatic subscription. Marketing requires the corresponding optional checkbox, based on your consent (GDPR Article 6(1)(a)). You can withdraw consent or unsubscribe by writing to us; this does not affect the handling of your enquiry or service.

Guidance summary. If you choose to transfer it to your enquiry, your answers and results become an editable summary using a temporary record in your browser session. Transfer between pages is local. When the HubSpot form loads, the summary is copied to its fields and becomes available to that provider. You can review, change or remove it before submitting. Your enquiry is sent only when you press the submit button. Your answers are not included in the page address. The cookie policy explains how the browser record is removed or discarded.

VIBE Stay. Accommodation enquiries are addressed to MEDLA through the general form. Submitting it does not automatically authorise sharing your details with VIBE Stay. If the request needs to be passed to that partner, we will ask for separate express permission (GDPR Article 6(1)(a)). Permission for marketing communications is also separate.

Bookings and payments. HighLevel calendars load directly on booking pages. They collect the details requested during booking. Managing an appointment and its payment, where applicable, relates to the requested service (GDPR Article 6(1)(b)). Displaying the calendar does not confirm a booking or make a payment. Review the information and terms displayed by the provider before completing a booking.

Chat. The Jotform assistant connects when you press the chat button, without a second activation step. The provider receives connection details and anything you write. Loading it does not depend on map preferences. Opening chat does not authorise advertising. Avoid sending identity documents, bank details or sensitive case information in an initial chat; the team can explain the appropriate channel.

Preferences and analytics. CookieYes stores your optional category choices and records consent decisions. CookieYes loads directly to display the banner. Google Tag Manager and Google Analytics 4 load only when you expressly accept the analytics category, to understand visits and page usage. The providers receive technical connection information when their services load. Personalised advertising and the transfer of customer details for enhanced conversions remain disabled. MEDLA’s integration does not add enquiry, chat or guidance summary content to Analytics events and uses page addresses without query parameters or fragments. You can withdraw permission through cookie preferences; withdrawal stops subsequent measurement and does not itself erase data already processed. Maps require acceptance of the functional category. These choices are separate from the support channels.

Data minimisation. Do not include identity documents, bank details or sensitive case documents in initial forms. If documents are needed to provide a service, the team will explain the appropriate channel.

We use the HubSpot form to receive and manage website enquiries. It loads directly on pages that include it. From that point, HubSpot can access details added to its fields and perform form checks before submission. Its bot protection uses Google reCAPTCHA, which may receive connection information when loaded. HighLevel provides booking calendars; Jotform provides chat when you open it; and Google Maps provides maps when you allow them to load. CookieYes manages preferences; Google Tag Manager organises tags after you accept analytics; Google Analytics 4 measures visits with your permission. These providers and hosting services support the website. VIBE Stay receives request details only when you authorise sharing. Data may also be disclosed where required by law.

Providers may operate in different countries. You can read their privacy information: HubSpot, HighLevel, Jotform, CookieYes and Google. You can ask MEDLA about providers, retention periods and safeguards applicable to the processing of your data.

We retain data for the time needed to handle the request or provide the service. After the relationship ends, data needed to meet applicable legal periods and address potential liabilities is retained or restricted as required. Subscription details are used while consent remains in place, without prejudice to information needed to record and respect an unsubscribe request.

You may request access, rectification, erasure, objection, restriction and portability where applicable, and withdraw consent. Write to [email protected] explaining your request. We will only request additional identification when needed to verify who is exercising a right.

You may also complain to the Spanish Data Protection Agency (AEPD). Withdrawing consent does not affect processing lawfully carried out before withdrawal.

If you follow a link to WhatsApp, LegalitAI or another external service, the service you choose opens and its privacy information also applies. This website’s cookie preferences do not extend to those destinations. Informational or automated content does not replace professional assessment of your circumstances.

Footer preferences open CookieYes to accept, reject or change analytics and the functional category that enables maps. Both remain off until you accept their respective categories. Chat connects when you open it; calendars and the form load directly on pages that include them. These support channels have no activation switches in preferences, and earlier chat and booking choices do not block their use. Enquiries are not sent and provider checkboxes are not selected for you. Withdrawing analytics permission stops subsequent measurement; withdrawing the functional category removes loaded maps from the page. Support channels remain available. These actions do not erase data already processed. See the cookie policy for services, storage and how to change your choice.