Privacy policy

Last updated: October 2026

At Beguerrilla we respect your privacy. This policy explains what personal data we process through beguerrilla.com, what we use it for, how long we keep it and what rights you have, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

• Controller: BEGUERRILLA S.L.
• Tax ID (NIF): B54971387
• Address: Avenida Seis de Diciembre, 5, Local E, 03550 Sant Joan d'Alacant (Alicante), Spain
• Data protection email: info@beguerrilla.com
• Telephone: +34 966 366 887

Beguerrilla is not required to appoint a data protection officer. For any matter relating to your data, you can write to info@beguerrilla.com.

2. What data we process and why

2.1. Contact form

• Data: name, email address, profile (for example, licensor, customer or distributor, ICONS exhibitor or job applicant) and any information you provide about your company or project. The name, email, profile and message fields are mandatory: without them we cannot handle your request.
• Purpose: to respond to your enquiry or request and, where applicable, to send you the information or commercial proposal you ask for. We receive your message and record your request through our email and contact management provider (Brevo), with servers in the EU.
• Legal basis: taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) and, otherwise, your consent (Art. 6(1)(a) GDPR), which you give by submitting the form.
• Retention: for as long as necessary to handle your request and, if no business relationship is established, for a maximum of 2 years from the last contact.
• Form security: to prevent automated and abusive submissions, the form uses a hidden field and a time check, and we keep an encrypted identifier of your IP address for a maximum of 24 hours. We do not use external verification services (captcha) or cookies for this. The legal basis is our legitimate interest in protecting the website (Art. 6(1)(f) GDPR).

2.2. Marketing communications

• Data: name and email address.
• Purpose: to send you information about our products and services.
• Legal basis: your express consent (Art. 6(1)(a) GDPR and Art. 21 LSSI), which is requested by means of a specific, unticked checkbox. We may ask you to confirm your subscription from an email (double opt-in). If you are already a customer, we may send you communications about products or services similar to those you have purchased, on the basis of Art. 21.2 LSSI.
• Retention: until you withdraw your consent or object. You can unsubscribe at any time via the link included in every communication or by writing to info@beguerrilla.com.

2.3. Customers and suppliers

• Data: identification and contact details of the contact person, and the data required for the business relationship and invoicing.
• Purpose: to manage the contractual relationship, invoicing and accounting and tax obligations.
• Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
• Retention: for the duration of the relationship and, thereafter, for the applicable statutory periods (generally 6 years for commercial-law obligations and 4 years for tax obligations).

2.4. Analytics and advertising

• Data: browsing data, cookie identifiers, IP address and device data.
• Purpose: to measure use of the website (Google Analytics 4), measure the effectiveness of our campaigns and show personalised ads (Google Ads and Meta Pixel).
• Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI), which you give through the cookie settings panel. These tools are not activated without your consent.
• Retention: in accordance with the periods set out in the Cookie Policy.

2.5. Social media

• Data: the public data in your profile and your interactions with our pages on LinkedIn and Facebook.
• Purpose: to manage our social media presence and reply to your messages.
• Legal basis: our legitimate interest in maintaining a social media presence (Art. 6(1)(f) GDPR). For certain processing operations, such as page insights, we act as joint controllers with the social network, in accordance with its terms.
• Retention: for as long as you follow our pages or until you delete the interaction.

3. Children's data

The website is not intended for children under the age of 14. If you are under that age, please do not provide us with personal data without the consent of your parents or guardians (Art. 7 LOPDGDD).

4. Recipients of the data

We do not sell or disclose your data to third parties, except where required by law. To provide our services we use providers that process data on behalf of Beguerrilla, with whom we have signed the corresponding data processing agreements:

We may also disclose data to public authorities and courts where there is a legal obligation to do so.

5. International transfers

Contact form data does not leave the European Union. Only the analytics and advertising providers (Google and Meta), which are activated only if you accept the corresponding cookies, are located in the United States or may access the data from there. These transfers are carried out with the safeguards provided for in the GDPR:

• Providers certified under the EU-U.S. Data Privacy Framework, recognised by the European Commission as providing an adequate level of protection by its Decision of 10 July 2023.
• Failing that, standard contractual clauses approved by the European Commission.

You can request further information about these safeguards at info@beguerrilla.com.

6. Your rights

You may exercise the following rights at any time:

• Access: to find out whether we process your data and obtain a copy of it.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request that we delete your data when it is no longer necessary, among other circumstances.
• Objection: to object to processing based on legitimate interest or for direct marketing purposes.
• Restriction: to request that we retain your data solely for the establishment, exercise or defence of legal claims.
• Portability: to receive the data you have provided to us in a structured, commonly used format, or to have us transmit it to another controller.
• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
• Not to be subject to automated decision-making. Beguerrilla does not make decisions based solely on automated processing, nor does it carry out profiling that produces legal effects concerning you.

To exercise these rights, write to info@beguerrilla.com stating the right you wish to exercise. If we are unable to verify your identity, we may ask you for additional information. We will respond within one month, which may be extended by a further two months in complex cases, in which case we will inform you.

If you believe that we have not handled your rights properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (C/ Jorge Juan, 6, 28001 Madrid; www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, alteration or destruction. The website uses HTTPS encryption on all its pages.

In the event of a personal data breach affecting your data, we will notify the Spanish Data Protection Agency (AEPD) within 72 hours and, where it is likely to result in a high risk to your rights, we will also inform you without undue delay.

8. Accuracy of data

You warrant that the data you provide to us is true, accurate and up to date, and you undertake to inform us of any changes. If you provide data relating to third parties, you warrant that you have informed them and obtained their consent.

9. Changes to this policy

We may update this policy to reflect changes in legislation or in our processing activities. We will publish the current version on this page together with the date of the last update and, if the changes are significant, we will notify you by appropriate means.

10. Language versions

In the event of any discrepancy between the different language versions of this policy, the Spanish version shall prevail.