Privacy and external services

1. Data controller

Amp Room SL, tax ID B10672970.
Contact address: Calle del General Lacy, 24, Local, 28045 Madrid, Spain.
Email: . You can also use the contact form.

2. What information we process and why

Contact-form enquiries

We process the name, email address, telephone number, budget and message you provide in order to answer your enquiry and manage the services you request. The legal basis is the pre-contractual action requested by you and, where applicable, performance of the contractual relationship.

Bookings

If you enable Trafft and make a booking, the information you enter — such as your name, surname, email address, telephone number, service, date and time — is processed to arrange and manage the appointment. The legal basis is pre-contractual action and, where applicable, the contractual relationship.

We do not use form or booking data for marketing, behavioural advertising or profiling.

3. Optional external services

Cloudflare Turnstile

Turnstile protects the form against bots and abuse. When you enable it, Cloudflare may process your IP address, TLS fingerprint, User-Agent header, site origin and other technical browser signals needed for the check. Turnstile does not receive the content you enter in the form. Read the Turnstile privacy information.

Trafft

Trafft displays availability and manages bookings. The service is operated by TOUCH ME SOFT d.o.o. in Serbia and acts as a processor for its clients' booking data. Its policy explains the technical information, cookies, booking data, retention and transfers it may handle. Read Trafft's privacy policy and cookie policy.

Where an international transfer requires safeguards, Standard Contractual Clauses or another valid GDPR mechanism will be used.

4. Your choice

You can enable Turnstile only, Trafft only, both services or neither. If you accept a service, we store only the notice version, the authorised services and an expiry date in your browser for no longer than 12 months. This technical preference is not used to identify you or track your browsing.

If you reject, we do not store that decision: the notice will appear each time you load a page. You can withdraw an acceptance through “Manage external services” in the footer. If a provider has already loaded, the page will reload to prevent further requests.

5. Recipients, retention and your rights

We do not sell or disclose your data. It is available only to providers needed to deliver the service and to public authorities when required by law.

Enquiries are retained for as long as needed to respond and meet legal responsibilities. Booking data is retained for the duration of the contractual relationship and the applicable statutory periods. It is then securely deleted or restricted.

You may request access, rectification, erasure, restriction, objection or portability, and withdraw consent through the email shown or the contact form. You may also lodge a complaint with the Spanish Data Protection Agency.

Last updated: 28 August 2026.