Privacy Policy
Last updated: 24 September 2026
1. Data Controller
GDC Events (Giulia De Carlo), based in Barcelona, Spain. For any questions about this policy or your personal data, contact us at info@gdc-events.com.
2. What data we collect
We only collect the information you voluntarily provide through the contact form on this site, including: your name, email address, and any details about your event that you choose to share with us.
This site does not currently use tracking cookies or analytics tools (such as Google Analytics). If we introduce these in the future, we will update this policy and, where required, ask for your consent via a dedicated banner.
3. How we use your data
We use the data we collect only to:
- respond to your enquiry;
- organise and manage the event or service you request, should we move forward with a collaboration.
The legal basis for this processing is your consent (GDPR Art. 6(1)(a)) and, where applicable, steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b)).
4. Who we share your data with
To provide our service, we rely on a small number of third-party providers who process data on our behalf:
- Resend (sending notification and reply emails)
- Supabase (secure storage of contact form submissions)
- Google Fonts (loads the site's fonts, which sends your IP address to Google's servers)
These providers may be located outside the European Economic Area; where this is the case, transfers rely on Standard Contractual Clauses approved by the European Commission or other appropriate safeguards under the GDPR.
We do not sell or share your data with third parties for marketing purposes.
5. How long we keep your data
We keep your data for as long as necessary to handle your enquiry, and in any case no longer than 24 months from our last contact, unless a longer retention period is required by law.
6. Your rights
As a data subject, you have the right to:
- access your personal data;
- request correction or deletion;
- restrict or object to processing;
- request data portability;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, write to us at info@gdc-events.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or the supervisory authority in your country of residence.
7. Data security
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.
8. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page, along with the date it was last updated.