Legal

PRIVACY & LEGAL

Privacy Policy Cookie Policy Legal Notice Your Rights

Privacy Policy

Last updated: July 2026

FREEBOX SL, trading as BoxCongresos, is committed to protecting the personal data of users who visit this website or use our services, in accordance with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

1. Data Controller

  • Company name: FREEBOX SL
  • Tax ID (NIF): B87515516
  • Trading name: BoxCongresos
  • Registered address: Calle Francia, 2-Bis, Floor 2, Door G, 28224 Pozuelo de Alarcón, Madrid, Spain
  • Email: info@boxcongresos.com
  • Website: www.boxcongresos.com

2. Data We Collect

  • Demo request / contact form: name, email, phone, company and event type. Purpose: respond to your request and send a personalised proposal.
  • Event attendee registration: name, email and ticket reference. Purpose: manage access to congress features.
  • Server log data: IP address and browser information collected automatically. Retained for a maximum of 12 months.

3. Legal Basis for Processing

PurposeLegal basis
Handle your contact or demo request.Legitimate interest (Art. 6.1.f GDPR) and pre-contractual measures (Art. 6.1.b GDPR).
Send commercial communications about BoxCongresos services.Consent (Art. 6.1.a GDPR). Withdrawal possible at any time.
Compliance with legal obligations (tax, accounting, etc.).Legal obligation (Art. 6.1.c GDPR).

4. Data Retention

Form data is kept for as long as the business relationship exists, and for up to 3 years after the last contact. Tax-related data is retained for 5–6 years as required by Spanish law. Data processed under consent is deleted upon withdrawal.

5. Data Sharing

We do not sell or share personal data with third parties except when legally required or with service providers acting as data processors under data processing agreements (Art. 28 GDPR), such as our web hosting provider.

6. International Transfers

Google Fonts is a service of Google LLC (USA). Transfers to the USA are carried out under the EU–US Data Privacy Framework (Art. 45 GDPR). For more information, see Google's Privacy Policy.

Cookie Policy

A cookie is a small text file stored on your device when you visit a website. This policy applies to www.boxcongresos.com in accordance with Art. 22.2 of Spanish Law 34/2002 (LSSI-CE) and the GDPR.

Cookie / ServiceTypePurposeDuration
laravel_sessionNecessaryServer session management. No consent required.Session
XSRF-TOKENNecessaryCSRF security protection. No consent required.Session
bc_consentPreferenceStores your cookie consent preference so the banner is not shown on every visit.1 year
Google FontsThird-partyLoads website typography. Google may log your IP to serve font files.Up to 1 year

Managing cookies

You can configure your browser to block or delete cookies:

Your Rights

Under the GDPR you have the right to:

  • Access: obtain confirmation of whether we process your data and receive a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure ("right to be forgotten"): request deletion when data is no longer necessary.
  • Restriction: request suspension of processing in certain circumstances.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdrawal of consent: withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, write to info@boxcongresos.com with the subject "Data Rights" and a copy of your ID. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Authority: AEPD — www.aepd.es, C/ Jorge Juan 6, 28001 Madrid.