1. Data controller

Fundación PROMESA (Scout Madrid HOSTEL) · Tax ID (CIF) G-85874550
Calle Entre Arroyos, 19 bis · 28030 Madrid (Spain)
Tel. +34 910 912 322 · reservas@scoutmadridhostel.com

2. Purposes and legal bases

Management of bookings and stays (guest identification, invoicing, handling requests): legal basis, the performance of the accommodation contract (art. 6.1.b GDPR).

Traveller registration and communication of data to the competent authorities under Spanish regulations on the documentary registration of accommodation: legal basis, compliance with a legal obligation (art. 6.1.c GDPR).

Informative and promotional communications about our services: legal basis, your express consent (art. 6.1.a GDPR), which you may withdraw at any time.

CCTV monitoring of the premises for security reasons: legal basis, the controller’s legitimate interest (art. 6.1.f GDPR).

3. Recipients

We do not disclose your data to third parties except where legally required (competent authorities for traveller registration, law enforcement, public administrations or courts). For booking management we use providers acting as data processors (for example, the Cloudbeds booking platform), with whom the processing agreements required by art. 28 GDPR are in place.

4. Retention periods

Booking and invoicing data are kept for the periods required by tax and accounting regulations. Traveller registration data are kept for the period established by accommodation regulations. CCTV images are kept for a maximum of one month, unless they must be made available to the authorities. Data used for commercial communications are kept until you withdraw your consent.

5. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to reservas@scoutmadridhostel.com or by post to the controller’s address, enclosing a copy of your identity document. If you believe the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Origin and categories of data

We process the data you provide when booking or staying with us: identification data (first name, surname, identity document, nationality, date of birth), contact data (phone, email) and stay details. We do not process special categories of data.

7. Security

We apply appropriate technical and organisational measures to guarantee the confidentiality, integrity and availability of your data, in accordance with art. 32 GDPR.

8. Cookies and third-party services

This website may embed third-party content (such as Google Maps) which may set its own cookies. You can configure your browser to block or delete cookies.

Last updated: August 2026.