Privacy policy
1. Data controller
- Controller: 2M GROUP EVENTOS S.L.
- Tax ID (NIF/CIF): B87192498
- Registered address: Palenque, 33 · 28794 Guadalix de la Sierra (Madrid)
- Privacy email: [Pending: email address for exercising your rights]
2. What data we process
Through the pre-registration form we only process: full name, email, phone number, date and time of registration, the version of this information you accepted, the language of the form and, only if you tick the optional box, the date on which you agreed to receive marketing communications.
To protect the form against abuse, the IP address of each attempt is irreversibly transformed (HMAC code) and kept as a technical counter for a maximum of 48 hours. The IP address is not stored in clear text and is not linked to your registration.
Source of your visit: together with the pre-registration we store, separately, the campaign that brought you here (the utm_* parameters of the link, the domain of the referring website and whether the link came from a Google, Meta, TikTok or Microsoft ad, without storing its identifier). Only if you accept analytics do we also store the first campaign through which you found the website. We do not store your browsing history or your IP address.
3. Purposes
- Pre-registration: to manage your pre-registration for RAGNAROK and send you, by email or phone, the access information for the event.
- Marketing communications (optional): only if you tick the corresponding box, to send you information about future SOLO VIKING events. You do not need to accept this to pre-register.
- Campaign measurement: to find out, in aggregate form, which campaigns and channels generate pre-registrations. Your contact details are not sent to Google, Meta or any other advertising platform, nor used to create audiences.
- Website analytics and advertising (optional): only if you accept them in the cookie notice; see the cookie policy.
4. Legal basis
Your consent (Article 6(1)(a) of Regulation (EU) 2016/679, GDPR), given separately for each purpose. You may withdraw it at any time without affecting the lawfulness of processing carried out before its withdrawal.
For the aggregate measurement of campaigns based on the link through which you arrived, the controller's legitimate interest in knowing the effectiveness of its communication (Article 6(1)(f) GDPR), without storing anything on your device or creating profiles. You may object by writing to the email address above. [Pending legal validation]
5. Retention
[Pending: retention period or criteria]
6. Recipients and data processors
No data is disclosed to third parties unless required by law. Service providers acting as data processors for the controller may access it, under a contract in accordance with Article 28 GDPR:
[Pending: data processors (hosting, email/SMS tools…)]
7. International transfers
[Pending: whether there are international transfers and the applicable safeguards]
8. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent by writing to [Pending: email address for exercising your rights]. Please state the right you wish to exercise and the email or phone number you registered with. We will reply within one month (Article 12(3) GDPR). You may write to us in English or Spanish.
If you consider that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.
9. Security
Data is transmitted encrypted (HTTPS) and stored in a database that is not publicly accessible. Access to the administration area requires individual authentication, passwords are stored hashed with robust algorithms and sensitive actions (queries, exports, configuration changes) are logged.
10. Cookies
See the cookie policy.