Privacy and Personal Data Protection Policy

Who is the data controller for processing your personal data?

The data controller is C2MASI, S.L. (hereinafter “c2+i”), with Spanish tax identity number (NIF) B01462936 and domiciled in Vitoria-Gasteiz at Calle Castro Urdiales, 8, 5º Izquierda, 01006 Vitoria-Gasteiz.

How did we obtain your personal data?

We obtained your personal data through (i) publicly accessible sources and (ii) prior relationships you have had with c2+i, or due to your current relationship with our entity because you are a customer, supplier of goods or services, attend workshops, conferences or other types of events or because you requested that we send you information about our activities.


This data may be or was obtained through physical forms or through forms on the c2+i website and social media networks.

Social media networks

The use of social media networks is becoming increasingly more popular and c2+i is therefore present in most of them, and this is another way of contacting you.

The information we collect through social media networks sometimes includes personal information that is available online to the public. We always ensure that all the information we use is correctly attributed to its source or is rendered anonymous.

These social media networks may have their own privacy policies that explain how they use and share your personal information. We recommend that you carefully review their privacy policies before using these social media networks to ensure that you agree with the way your personal information is collected and shared.


We collect and store limited personal information and anonymous aggregate statistics from all users visiting our website, whether they actively provide such information to us or are simply browsing our sites. The information we collect includes the Internet Protocol (IP) address of the device you use, the browser program you use, your operating system, the date and time of access, the Internet address of the website from which you accessed our sites and also information about how you use our website.

We use this information to ascertain how long our website takes to load, how it is used, the number of visits and the type of information that most attracts visitors. It also helps to identify if the website is working properly and resolve and improve the performance of our website if we detect faults or errors in its operation, in order to offer a better service to all users.

This information is collected through cookies. See the cookies policy that can be found on the c2+i website for further information.

What personal data do we process?

The data we process for the legitimate purposes that are explained later is as follows:

  • Data required to maintain a relationship with you:
    • First name
    • Surname
    • ID card number
    • Age
    • Sex
    • Preferred language
    • Email
    • Telephone
    • Postal address
    • Professional and/or business activity sector to which you belong and/or are interested.
  • We may also have the following information at our disposal if you voluntarily provided it to us in the course of your prior relationships with us:
    • Studies
    • Civil status
    • Profession
    • Occupation
  • We would also like to inform you that we will process any additional data that you voluntarily provide to us over the course of future relationships and interactions with c2+i, including that data you provide to us through a social media network or other application.

Why do we process your personal data?

We process your personal data to comply with our social objective, which is to provide services that promote creative processes and new areas of relationship among the economy, culture and social organisations, as well as specifically:

  • To send you information about c2+i activities via SMS, telephone, mail and email, even when our relationship has ended, unless the interested party states otherwise.
  • To invite you to programmes, activities and workshops organised by c2+i.
  • To conduct satisfaction surveys.

We also process your data in order to send you, including by electronic means, promotional communications about activities and initiatives of a similar nature to those in which you have previously participated.

The interested party may object to receiving this type of promotional communication now or at any other time by sending an email to or by sending a request to our postal address, in both cases stating the reference: DATA PROTECTION.


Why can we process your personal data?

The processing of your personal data in connection with maintaining your relationship with c2+i as an exhibitor, assistant or provider of services is legitimised as the required result of complying with the contractual obligations arising from these relationships.

The processing of your personal data in order to send you promotional information on similar activities or initiatives of c2+i to those in which you have participated responds to a legitimate interest of our entity and is authorised by current legislation.

The data requested in the forms is generally obligatory (unless otherwise stated in the required field) in order to comply with the purposes established in the previous section and corresponding to our corporate purpose. Consequently, these purposes cannot be fulfilled if the requested data is not provided or is not provided correctly.

When and why can we disclose your data to third parties?

Your data may be transferred to the recipients listed below for the following reasons:

  • Public administrations: in order to comply with the legal obligations to which c2+i is bound due to its activity.
  • Transfers to third parties that are required in order to comply with the obligations arising from the activities in which you voluntarily participate.
  • Suppliers that need to access your data in order to provide the services that c2+i has contracted from them and with which c2+i has signed the necessary confidentiality and personal data processing agreements as required by law to protect your privacy.

You will be duly informed if c2+i makes further transfers of your personal data in the future.

Do we perform international data transfers?

c2+i has contracted the services of technology providers located in countries with equivalent European standards. These suppliers have signed the required confidentiality and data processing agreements with c2+i, thereby applying the necessary guarantees and safeguards to preserve your privacy.

How long will we keep your data?

Your personal data will be retained for the duration of your relationship with c2+i and during the applicable legal limitation periods that are in force upon termination of said relationship for any reason. In this case, it will be processed solely for the purpose of proving compliance with our legal or contractual obligations. After expiry of these limitation periods, your data will be deleted or, alternatively, rendered anonymous.

What are your rights?

You can exercise your rights of access, rectification, erasure and portability, limitation and/or opposition to the processing of your date by writing to the postal and electronic addresses indicated in the previous sections.

These rights are as follows:

Right of access

You have the right to obtain confirmation as to whether or not c2+i is processing personal data concerning you and to access the personal data that c2+i holds about you.

Right of rectification

You have the right to request that c2+i rectifies your personal data when this is inaccurate or to complete it when it is incomplete.

Right to erasure/right to be forgotten

You can request that we erase your personal data when, among other reasons, the data is no longer required for the purposes for which it was collected.

Right to restrict processing

You have the right to request a restriction on the processing of your data, in which case we will only retain your data for the purpose of exercising or defending any claims.

Right of data portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format and to pass this on to another data controller when the processing is based on consent or a contract and is conducted by automated means.

Right to object to processing

You may object to your personal data being processed on the basis of the public or legitimate interest pursued by c2+i. In such case, c2+i will stop processing your data, except for compelling legitimate grounds or the exercise or defence of possible claims.

In addition, if you believe that the processing of your personal data violates the law or your privacy rights, you may file a complaint:

  • To our organisation by writing to the postal and electronic addresses herein indicated.
  • To the Spanish Data Protection Agency through its website or writing to its postal address.



M +34 673 608 790
Cale Manuel Iradier 2, 2º
01005 SPAIN
Newsletter Prensa Aviso Legal Política de privacidad

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.

Usamos cookies para las estadísticas de uso de la web. Si continúas navegando entendemos que aceptas esto.
Rechazar - Aceptar