Privacy policy
1. Who processes your data
Exyt Control SL (tax ID B66643784), Paseo de la Alameda, 19H, local A, 29315 Villanueva de Tapia (Málaga, Spain), registered in the Commercial Register of Málaga. For any question about your data: info@exyt.es.
2. What data we process, why and on what legal basis
| When | Data | Purpose | Legal basis | How long |
|---|---|---|---|---|
| You contact us through the form, by email or by phone | Name, company, email, phone number (if you give it), date and size of the event, what you’re interested in and anything else you tell us | To reply to you and, if you ask, to prepare a quote | Your consent and pre-contractual steps at your request (Art. 6(1)(a) and 6(1)(b) GDPR) | As long as needed to deal with your request; if you don’t hire us, a maximum of 2 years |
| You hire a service | Contact and billing details of the company and its contact people | To manage the contract, invoice and meet legal obligations | Performance of the contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR) | For as long as the relationship lasts and then for the legal periods (6 years under commercial law, 4 years under tax law) |
| You submit the form | Technical data about your connection (IP address and browser) checked by Cloudflare Turnstile | To prevent spam and automated submissions | Legitimate interest in the security of the website (Art. 6(1)(f) GDPR) | Cloudflare’s periods for that check |
| You browse the website and accept analytics | Cookie identifier, pages viewed, device and approximate location | To know how many people visit the website and which pages they use | Your consent (Art. 6(1)(a) GDPR) | See the Cookie policy |
Form messages are also stored in the website’s database, hosted by Dinahosting (Spain), for the same period. We don’t make automated decisions or build profiles with your data. The fields marked with an asterisk are needed so that we can reply to you.
3. If you are attending an event
When we accredit the attendees of an event, the controller of their data is the organiser who hires us, and we process it on their behalf under a contract. With the Print Service, the details that are typed in are printed and not stored. With Acreditados.es, the event records are kept so that each attendee can be found, for a maximum of 4 years. If the organiser asks, we delete them as soon as the event is over. To exercise your rights over that data, contact the event organiser, or write to us and we will pass your request on.
4. Who we share data with
- We do not pass your data on to third parties unless required by law.
- We are helped by providers who process data on our behalf under contract: Dinahosting, S.L. (website hosting, in Spain), Google Ireland Ltd. (email and, if you accept it, web analytics), Twilio Inc. (SendGrid, which sends the form emails) and Cloudflare, Inc. (spam filter for the form).
- Google, Twilio and Cloudflare may process data outside the European Economic Area, under the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.
5. Marketing communications
We will only send you information about our services if you ask us to or, if you are already a client, about services similar to the ones you hired. You can unsubscribe at any time from the message itself or by writing to us.
6. Other people’s data
If you give us other people’s data (for example, your event’s guest list), you must have informed them and have a legal basis for doing so.
7. Your rights
You can ask for access to your data, its rectification or erasure, object to its processing, ask for it to be restricted or ported, and withdraw your consent at any time by writing to info@exyt.es with the subject “Data protection”. We will reply within one month. If we have reasonable doubts about your identity, we may ask you to prove it. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
8. Minors and security
The website is not aimed at children under 14. We apply technical and organisational measures to protect your data, such as an encrypted connection (https) and restricted access to information.
9. Changes
If the way we process your data changes, we will update this policy and the date at the end.
Last updated: 17 October 2026. This is a translation for your convenience. If there is any discrepancy, the Spanish version prevails.