CONTROLLER
CROM EVENT MANAGEMENT, S.L.U. (B17841495)
Av. de les Alegries, 12 — 17310 Lloret de Mar (Girona), Spain
Tel. +34 619 565 289 · events@cromevent.com
PURPOSES OF DATA PROCESSING
- Managing event registrations and participation (including operational and logistical communications).
- Responding to enquiries and information requests.
- Sending informational or marketing communications, when expressly authorised by the user.
- Measuring site usage through Google Analytics 4, to analyse traffic and improve functionalities (only with user consent).
Data will not be used for incompatible purposes nor disclosed to third parties, except where required by law or strictly necessary for service provision (e.g. payment gateway, logistics, insurance, or technical support).
LEGAL BASIS
- Performance of a contract or registration formalised by the user.
- Explicit consent (marketing communications).
- Compliance with legal obligations (tax, consumer, accounting, etc.).
- Legitimate interest (internal management and service improvement, within the limits of the GDPR).
- User consent (Art. 6.1.a GDPR) for analytical cookies.
DATA RETENTION
Data will be retained for as long as necessary to manage the event or the contractual relationship, and thereafter for the legally required periods.
Data used for communications will be kept until unsubscription or withdrawal of consent.
RECIPIENTS
Data may be shared with data processors under appropriate contractual terms (e.g. payment gateway, hosting services, logistics, insurers).
CROM does not transfer data outside the European Economic Area, except when expressly indicated and with appropriate safeguards (e.g. Standard Contractual Clauses).
Google Ireland Ltd. acts as analytics provider; limited transfers outside the EEA may occur under SCCs. Further details are available in the Cookie Policy.
DATA SUBJECT RIGHTS
You may access, rectify or erase your data, as well as object to processing or request restriction or portability, by emailing events@cromevent.com or writing to the postal address above (include a copy of an identity document).
If you believe your rights have not been respected, you may lodge a complaint with the Catalan Data Protection Authority (APDCAT) or the Spanish Data Protection Agency (AEPD).
AGE AND LEGAL CAPACITY
Registration requires legal capacity. For minors, a written authorisation from a parent or guardian is required, along with compliance with legal requirements (valid driving licence, mandatory insurance, etc.).
UPDATES
This policy may be modified to reflect legal or technical changes; updates will be published in this section.
Last updated: November 2025