Privacy Policy
Effective date: 15 September 2026 · Last updated: 16 October 2026
This Privacy Policy describes how EXPOversal (“we”, “us”, or “our”) collects, uses, and protects your personal data when you use our website at expoversal.com (the “Site”).
1. Data Controller
The data controller for personal data collected through this website is Victoriano Frutos Juarez (07988429T), trading as EXPOversal, Antartida 42, Coslada, 28822, Spain Contact: expoversal@expoversal.com.
2. What Data We Collect
We may collect the following categories of personal data:
- Registration data: first and last name, email address, organisation, position or job title, country, phone number and role or primary interest when you create a member account; your weekly roundup email preference; and a record of the consents you give (date, time and IP address).
- Correspondence: your email address and the content of any message you send us.
- Anti-bot verification: data processed by hCaptcha (Intuition Machines, Inc.) when you complete the registration form.
- Usage data: IP address, browser type, pages visited, referrer, via cookies and server logs.
3. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), including Spain, we process personal data on the following legal bases:
- Consent — for optional analytics cookies and for editorial newsletters.
- Legitimate interests — for essential website functionality, security, and fraud prevention.
- Contractual necessity — to provide member account services once you register.
- Legal obligation — where processing is required by Spanish or EU law.
4. How We Use Your Data
- To manage your member account and send the weekly roundup you subscribe to.
- To respond to your messages.
- To send editorial updates and roundups where you have consented.
- To measure and improve the Site’s content and performance.
- To detect and prevent abuse of the Site.
Service providers. We share personal data only with providers that process it on our behalf: GoDaddy.com, LLC (website hosting; its platform also loads a site-performance script on every page), Resend, Inc. (email delivery), Google LLC (Google Analytics, only if you accept analytics cookies; and web fonts served from Google’s servers, which receive your IP address), Intuition Machines, Inc. (hCaptcha) and Automattic Inc. (Gravatar profile images for signed-in members). We do not sell personal data.
Members of the former expo2030.co platform. Accounts created on the former expo2030.co platform were carried over to EXPOversal; accounts of members who did not confirm that they wished to continue by 20 October 2026 are deleted.
5. Data Retention
We retain personal data only for as long as necessary for the purposes described above, or as required by law. Member account data is retained while your account is active and deleted within 30 days of account closure. Correspondence is retained for up to 12 months.
6. Your Rights (GDPR)
If you are located in the EU/EEA, you have the following rights under the General Data Protection Regulation:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — request deletion of your data (“right to be forgotten”).
- Right to restriction — request that we restrict processing of your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, at any time.
To exercise any of these rights, email us at expoversal@expoversal.com. We will respond within one month.
7. International transfers
Some of our service providers are based outside the EEA (for example, hosting, email delivery, and analytics providers located in the United States). Where personal data is transferred outside the EEA, we rely on adequacy decisions or Standard Contractual Clauses to ensure equivalent protection.
8. Supervisory authority
You have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es, or with the supervisory authority of your habitual residence.
9. Changes to this Policy
We may update this Policy from time to time. The “Effective date” at the top indicates the latest revision. Material changes will be notified via a banner on the Site.
10. Contact
For any privacy-related enquiry: expoversal@expoversal.com.