Commercial website privacy policy

Operator and contact

Martín Rey Matesanz · Mibu

Spanish tax ID (NIF): 50769702P

C/ Alcira, 9 · 46007 Valencia · España

info@mibu.one

1. Controller

Martín Rey Matesanz (Mibu) is the controller for these activities. You can contact him at info@mibu.one or the business address at the top of this page.

2. Data, purposes and legal bases

To respond and arrange a demo, we use your name, email, restaurant, selected plan or service and correspondence. The legal basis is taking precontractual steps at your request (GDPR Article 6(1)(b)); when you represent a business, it is our legitimate interest in responding to its professional enquiry (GDPR Article 6(1)(f) and Article 19 of Spain’s LOPDGDD).

Required fields allow us to identify and respond to your enquiry; we cannot process the form without them. Do not send health data, identity documents or guest information in a sales enquiry.

IP addresses, basic browser information, timestamps and technical records are used to limit abuse, prevent duplicate submissions and maintain security, based on our legitimate interest in protecting the service. The form does not subscribe you to advertising. We do not make automated decisions producing legal or similarly significant effects.

3. Recipients and transfers

Mibu’s operator accesses enquiries. Hostinger provides hosting and email services. We do not sell your data or share it with restaurants because you requested a demo. Data is disclosed to authorities only where legally required.

The application server is hosted in the United Kingdom, which has an adequacy decision from the European Commission. Hostinger’s email, support and subprocessors are governed by its data processing addendum, which provides for standard contractual clauses for transfers where applicable. You may request recipient information and a copy of applicable safeguards at info@mibu.one. The provider’s addendum is linked below.

4. Retention

If you do not become a customer, we keep your enquiry while handling it and for no more than 3 months from the last contact. The operator reviews and deletes correspondence and working copies.

If you enter into a contract, the necessary data becomes part of contract administration and is kept for the relationship and applicable statutory periods. Data retained for a claim or legal obligation is restricted to that purpose.

Form anti-abuse counters have one-hour windows; duplicate-prevention fingerprints expire after 24 hours. Expired records are purged when new requests are processed. Backups follow their replacement cycle and are not used to restart deleted sales contacts.

5. Your rights

You may request access, rectification, erasure, restriction, objection and portability where applicable, by emailing info@mibu.one or writing to the operator’s address. You may object to processing based on legitimate interests. Additional identity information will only be requested where necessary.

We normally respond within one month; any legally permitted extension will be explained within that period. You may complain to Spain’s Data Protection Agency (AEPD) or the competent supervisory authority. A link to the AEPD is provided below.

Further information

Agencia Española de Protección de Datos (AEPD)

Hostinger — Data processing addendum

European Commission adequacy decisions