What happens to attendee data
Attendees’ data is the event organiser’s responsibility, and we process it on their behalf under contract. With the Print Service nothing is stored; with the accreditation service it’s kept for a maximum of 4 years and, if the organiser asks, we delete it when the event ends.
Guides · Updated 18/10/2026
Who’s who
| Who | Role | What they do |
|---|---|---|
| The event organiser | Data controller | Decides what data is collected and why. Informs attendees and has a legal basis for passing their data to us. |
| Exyt Control SL (Acreditados.es) | Data processor | Processes the data on the organiser’s behalf and under contract: registration, sending, printing and access. |
| The attendee | Data subject | Exercises their rights with the organiser. If they write to us, we pass it on. |
What’s kept and for how long
| Service | What’s kept | How long |
|---|---|---|
| Print Service | Nothing: what’s typed is printed and isn’t stored | — |
| Accreditation service | The event’s registrations, so each person can be found | A maximum of 4 years. If the organiser asks, it’s deleted when the event ends |
| Contractors (health and safety) | Only what’s needed to accredit validated people, such as their company and role. The health and safety paperwork stays on its platform | Same as the accreditation service |
The data is stored on our own servers, and we send the badge emails ourselves.
Only ask for what you need
- To accredit someone you usually just need their name and surname, an email to send the badge to, and their company or pass type.
- No email or phone number on the label: that’s personal data on display for everyone.
- Health data, such as allergies or accessibility needs, only if it’s going to be used, explaining why and with each person’s consent.
This guide sums up how we work. It isn’t a substitute for your organisation’s legal advice. The details are in the privacy policy.
Frequently asked questions
Do we need to sign a data processing agreement?
Yes: we process the data on the organiser’s behalf under contract, which is signed when the service is confirmed.
Can you delete the data when the event ends?
Yes. If the organiser asks, we delete it as soon as the event ends. Otherwise it’s kept for a maximum of 4 years.
What do I do if an attendee asks for their data?
The organiser handles it, as the data controller. If the attendee writes to us, we pass it on.
Does the Print Service store anything?
No. What’s typed goes to the printer and isn’t stored anywhere.
Questions about your event’s data?
Write to us and we’ll go through it with you.