Privacy & Cookie Policy
Last updated: 26 October 2026
Table of Contents
1. Data Controller
The data controller is:
- Company name: [RAGIONE SOCIALE]
- Registered office: [INDIRIZZO SEDE], Barcelona
- Tax ID: [NIF / CIF]
- DPO Email: events@bluvita.es
- Phone: +34 658 450 228
In accordance with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPD-GDD), Bluvita SRL guarantees the protection of users' personal data.
2. Data Collected
We collect the following categories of personal data:
Data provided by the user
- First and last name
- Email address
- Phone number (optional)
- Date of birth (optional)
- Notes or special requests related to events
- Password (stored in non-readable form)
Data collected automatically
- IP address
- Browser type and operating system
- Pages visited and visit duration
- Technical and analytical cookies (see Cookie section)
3. Purposes and Legal Basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| User account management and authentication | Performance of a contract (art. 6.1.b) |
| Event registration and management | Performance of a contract (art. 6.1.b) |
| Sending confirmation emails and operational communications | Performance of a contract (art. 6.1.b) |
| Anonymous statistical traffic analysis | Legitimate interest (art. 6.1.f) |
| Marketing communications (newsletter) | Consent of the data subject (art. 6.1.a) |
| Compliance with legal and tax obligations | Legal obligation (art. 6.1.c) |
4. Data Retention
Personal data will be retained for the following periods:
- User account data: until the account is deleted or a deletion request is made, and in any case no longer than 5 years from the last login.
- Event registration data: 3 years from the event for accounting obligations.
- Marketing data (consent): until consent is withdrawn.
- System logs: maximum 12 months.
After this period, data will be securely deleted or anonymised.
5. Disclosure to Third Parties
Bluvita SRL does not sell or transfer users' personal data to third parties. Data may be disclosed to the following categories of recipients, solely for the purposes indicated:
- IT service providers (hosting, cloud): as data processors under art. 28 GDPR.
- Payment platforms (if applicable): for transaction management.
- Public authorities: where required by Spanish or EU law.
All third-party suppliers are bound by data processing agreements compliant with the GDPR.
6. Data Subject Rights
Under articles 15–22 of the GDPR and the LOPD-GDD, you have the right to:
- Access: obtain confirmation of the processing of your data and a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure (“right to be forgotten”): request the deletion of your data.
- Restriction of processing: request the suspension of processing in certain cases.
- Portability: receive your data in a structured format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
To exercise your rights, write to privacy@bluvita.com enclosing a copy of an identity document. We will respond within 30 days.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.
7. Minors
As provided by art. 7 LOPD-GDD, Bluvita services are intended for persons aged at least 14 years (the digital consent age in Spain). We do not knowingly collect data from minors under 14. If you become aware of data of minors processed without consent, please contact us immediately.
8. Cookie Policy
The Bluvita website uses cookies and similar technologies. A cookie is a small text file saved on your device.
Technical cookies (necessary)
Essential for the website to function. No consent required.
| Name | Purpose | Duration |
|---|---|---|
| PHPSESSID | Maintains the authenticated user session | Session |
| bv_remember | Keeps you logged in if you choose “Remember me” | 60 days |
| bluvita_cookie_consent, bluvita_lang | Records the cookie choice | 12 months |
Analytics and advertising
This website does not use analytics, profiling or advertising cookies.
How to manage cookies
You can manage cookie preferences via the banner that appears on your first visit, or through your browser settings:
Disabling technical cookies may make some website features unavailable.
9. Security
We adopt appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction or accidental disclosure, in accordance with art. 32 GDPR. Measures include: HTTPS encryption, authenticated access, regular backups and security monitoring.
10. Changes to the Policy
Bluvita SRL reserves the right to update this policy at any time. Material changes will be communicated via email and/or a notice on the website. The “last updated” date at the top of the page indicates the current version.
11. Community, QR code and Membership Card
Community. Other logged-in members can see your public profile: first name and initial of your last name, country and bio if you add them, your badges and the past events you attended. Comments you write under an event are visible to logged-in members with the same name. Your email, phone number, date of birth and membership card code are never shown.
To let you into events, every account has a personal QR code. When our staff scan it at the entrance we record the date and time of your check-in for that event.
If you become a Premium member we store the dates your Membership Card is valid from and until, who activated it and a note about the payment made in person. You receive an email when it is activated and one week before it expires.
Messages sent with the forms of the website (contact, event proposals, company requests, packages) are stored so that our team can answer you, and deleted on request.