Privacy policy
Last updated: [09/09/2026]
1. Data controller
In accordance with the General Data Protection Regulation and Spanish Organic Law 3/2018, the controller responsible for processing personal data collected through this website is:
Data controller: Daniel Gragera
Trading name: El Invitado Invisible
Tax identification number: [50881992N]
Professional address: [C/ Entre arroyos 98, piso 2. 28030 Madrid]
Email: info@elinvitadoinvisible.com
Website: www.elinvitadoinvisible.com
2. Personal data we collect
Through this website, we may collect the following categories of personal data:
- Identification and contact details, such as your name and email address.
- Information voluntarily provided through the contact form.
- Information relating to your wedding or requested service, such as its date, location and other details about the event.
- Information required to prepare quotations, manage bookings and provide the requested services.
- Technical browsing data, such as your IP address, browser, device or access logs.
- Information collected through analytics cookies, but only when you have provided your consent.
We do not request special categories of personal data. Please do not provide sensitive information that is unnecessary for dealing with your enquiry.
3. Purposes and lawful bases for processing
Your personal data may be processed for the following purposes:
Responding to enquiries and quotation requests
Information submitted through the contact form or by email will be used to respond to your enquiry, understand the characteristics of your event and prepare a possible professional proposal.
The lawful basis for this processing is taking steps at your request before entering into a contract.
Managing the professional relationship
If you book the services of El Invitado Invisible, your information will be used to manage communication, planning, performance and delivery of the commissioned work.
The lawful basis for this processing is the performance of a contract.
Complying with administrative, tax and legal obligations
When a contractual relationship exists, certain information must be processed and retained for invoicing, accounting and compliance with applicable legal obligations.
The lawful basis for this processing is compliance with a legal obligation.
Protecting the security of the website
Certain technical information may be processed to prevent unauthorised access, identify fraudulent activity, resolve technical incidents and protect the operation and security of the website.
The lawful basis for this processing is the legitimate interest of the data controller in protecting the security of its systems.
Analysing use of the website
When authorised through the cookie consent system, measurement tools such as Google Analytics may be used to obtain aggregated statistics about use of the website and improve its operation.
The lawful basis for this processing is the user’s consent, which may be withdrawn at any time through the cookie settings panel.
We do not make automated decisions or create profiles that produce legal or similarly significant effects for users.
4. Source of the data
Personal data is obtained directly from you when you:
- Complete and submit the contact form.
- Contact us by email.
- Request information or a quotation.
- Book any of the services offered.
- Accept certain categories of cookies.
You are responsible for ensuring that the information you provide is accurate, truthful and up to date.
5. Data retention
Enquiries that do not result in a professional relationship will be retained for as long as reasonably necessary to deal with them and for no longer than twelve months from the last communication, unless the information must be retained to establish, exercise or defend a legal claim.
When a booking is made, the relevant information will be retained throughout the professional relationship and afterwards for the periods required under applicable tax, commercial and other legislation.
Information associated with cookies will be retained for the periods specified in the Cookie Policy or until you withdraw your consent.
Once the corresponding retention periods have expired, the information will be securely deleted or restricted.
6. Recipients of personal data
Personal data is not sold or disclosed to third parties for their own commercial purposes.
It may be accessed by service providers necessary for the operation of the business, including website hosting, email, technical maintenance, form, storage and analytics providers. These providers will act as data processors and must provide the safeguards required under data protection legislation.
Information may also be disclosed to public authorities, courts or other competent bodies when required by law.
7. International data transfers
Some technology providers, including those offering analytics, storage or email services, may process information outside the European Economic Area.
Where an international transfer takes place, it will only be made through providers offering the safeguards required by the General Data Protection Regulation, such as an adequacy decision, standard contractual clauses or another legally recognised mechanism.
The use of analytics services requiring consent is explained in the Cookie Policy.
8. Photographs and videos
When photography or audiovisual services are commissioned, images and other information necessary to perform and deliver the work will be processed in accordance with the corresponding contract.
The publication of photographs or videos on the website, portfolio, social media or other channels will be carried out in accordance with the agreed terms and, where necessary, with the appropriate authorisation.
Submitting the contact form does not, by itself, authorise the publication of any image.
9. Your rights
You may request:
- Access to your personal data.
- Correction of inaccurate or incomplete information.
- Erasure of your personal data when it is no longer required.
- Restriction of processing.
- Objection to processing where applicable.
- Portability of your data where applicable.
- Withdrawal of your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, send your request to info@elinvitadoinvisible.com, using “Data protection” as the subject and explaining which right you wish to exercise.
Additional information may only be requested when necessary to verify your identity. You do not need to provide a copy of your identity document with your initial request.
If you believe that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.
10. Required information
Fields marked as required in the forms are necessary to process your enquiry. If you do not provide this information or confirm that you have read the Privacy Policy, the form cannot be submitted correctly.
You are responsible for the accuracy of the information provided and must communicate any relevant changes.
11. Children’s privacy
The services offered through this website are not specifically directed at children.
Children should not provide personal information without the permission of their parents or legal guardians. If personal information relating to a child is found to have been collected without the necessary authorisation, it will be deleted.
12. Information security
The data controller implements reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, disclosure or destruction.
However, no Internet-connected system can guarantee absolute security. If a security breach capable of significantly affecting users is identified, it will be managed in accordance with applicable legal obligations.
13. Links to external websites
This website may contain links to websites or services operated by third parties. El Invitado Invisible does not control their privacy policies and is not responsible for the processing carried out by those third parties.
You should review their respective privacy policies before providing them with personal information.
14. Changes to this policy
This Privacy Policy may be updated if the processing activities, services used or applicable legislation change.
The current version will always be the one published on this page, together with the date of its latest update.
15. Contact
For any questions regarding this Privacy Policy or the processing of personal data, please contact: