This policy (“Policy”) clearly explains the types of personal data collected on the website www.deporticket.com and, more generally, within the context of the relationships between you, the event organizer and DPTK Innovación y Tecnología SL as the technology provider of the registration platform; it also informs you about how such data are used and about your rights regarding processing when you are a natural person, in particular:
(hereinafter, “you”).
For event registration forms available on the website, the organizer of each event acts as the Controller of participants’ personal data, determining the purposes and means of the processing.
DPTK Innovación y Tecnología SL acts as a Processor, providing technological services for registrations and payments on behalf of the organizer, in accordance with Article 28 of Regulation (EU) 2016/679 (GDPR). DPTK Innovación y Tecnología SL does not use this data for its own purposes and will retain it only for the time necessary to provide the service and to comply with contractual or legal obligations.
Data collected directly by DPTK Innovación y Tecnología SL in the context of its relationship with users, organizers, suppliers, or business contacts will be used by DPTK Innovación y Tecnología SL as Controller for the proper management of its services and corporate relations.
Your personal data may also be accessible to our technical service providers (processors within the meaning of the GDPR), strictly for the performance of their duties.
Some personal data may be disclosed to third parties who could use them for their own legitimate purposes (e.g., legal professionals managing disputes or, if DPTK Innovación y Tecnología SL or all/part of its assets are acquired by a third party, to persons involved in the preparation and execution of the transaction and included in the transferred assets).
Each registration form will display the identity and contact details of the organizing Controller, including a contact channel for exercising data protection rights.
Your personal data may be collected:
Where certain personal data are necessary to respond to you, perform a contract, or comply with a legal obligation, this will be indicated at the time of collection.
Minors: the forms are not intended for children under 14 years of age. Where permitted by applicable law, authorization from the holder of parental responsibility or guardianship will be required.
We collect only the personal data necessary for the purposes described below, namely:
Cookies. Our site uses strictly necessary cookies for its correct functioning (e.g., session cookies). These cookies do not require your consent and you cannot object to their use except by configuring your browser; note this may affect your browsing. This site may also use, with your consent, audience measurement and, where applicable, marketing/tracking cookies, which you can withdraw at any time using the available mechanism. For more information, see our Cookie Policy.
After the retention periods set out in the following table, your data may be archived for no longer than the applicable limitation or archiving periods, or for the duration of proceedings in case of disputes. After such periods, the data will be deleted.
| Purpose | Legal basis (Art. 6 GDPR) | Retention period |
|---|---|---|
| Managing our relationship with you (e.g., info requests, contact, account management) | Performance of pre-contractual or contractual measures; DPTK Innovación y Tecnología SL’s legitimate interests in managing relationships with third parties | 1 year after the end of the relationship |
| Service improvement and personalization | Legitimate interests (business development and service improvement) | 3 years from your last contact |
| Newsletter management; prospecting operations; commercial statistics; quality and satisfaction measurement; contact list creation/management; invitations to events and fairs; contests | Legitimate interests | 3 years from your last contact |
| Dispute management | Legitimate interests (defense of legal rights) | For the duration of the proceedings |
| Handling the exercise of your rights | Compliance with legal obligations | 6 months after our last contact |
| Billing and accounting data | Compliance with legal obligations | 6 years (tax/accounting regulations) |
| Technical records, security and logs | Legitimate interests (information security and fraud prevention) | Up to 12 months |
| Event images and audiovisual material | Consent / Legitimate interests (informational/promotional dissemination) with right to object | Until consent is withdrawn or objection is raised; thereafter blocked for potential claims |
Note on legal bases: event registrations and operational communications rely on contract performance (Art. 6(1)(b) GDPR) and/or the organizer’s legitimate interests (Art. 6(1)(f)). Promotional dissemination of image relies on your consent (Art. 6(1)(a)) or, where applicable, on legitimate interests with the possibility to object at any time.
For commercial communications based on legitimate interests, you can object at any time using the mechanisms included in each communication or by writing to inscripciones@deporticket.com.
You may exercise, at any time, the rights provided by applicable law: access; rectification of inaccurate data; objection (in the cases and within the limits set by law); erasure of certain data; restriction of processing; data portability for transmission to a third party; as well as defining the fate of your data after your death.
To exercise your rights, simply write to inscripciones@deporticket.com and, where appropriate, attach documentation proving your identity and the validity of your request.
Please note that, in accordance with the law, we may refuse certain requests (particularly the right to erasure) for legitimate reasons, such as the need to defend legal rights or legal obligations to retain certain data.
For any additional information or difficulties related to the use of your personal data, you may write to inscripciones@deporticket.com. If issues remain unresolved, you may contact the Spanish Data Protection Agency (AEPD) as the competent supervisory authority in Spain.
As a rule, data are processed within the European Economic Area. However, the use of certain infrastructure services (e.g., CDN/WAF) may involve access from third countries to technical data (such as IP addresses and logs). In such cases, transfers rely on Standard Contractual Clauses signed with providers in accordance with Arts. 46 et seq. GDPR and, where appropriate, on complementary security measures. You may request additional information or a summary of such safeguards at inscripciones@deporticket.com.
DPTK Innovación y Tecnología SL has not appointed a Data Protection Officer as it is not mandatory under Article 37 GDPR. For any data protection matters, please contact inscripciones@deporticket.com.
DPTK Innovación y Tecnología SL does not make individual automated decisions nor perform profiling producing legal effects or similarly significant impacts within the meaning of Article 22 GDPR.
This Privacy Policy may be amended and updated; changes will be effective upon publication on the site. We invite you to review it periodically to obtain the most up-to-date information on the use of your personal data.