13- 15 MAY 2025 | BILBAO - BEC

If you consider subscribing to an event organised by Next Business Exhibitions S.L., hereinafter NEBEXT, the below information is of your interest to:

1. Who is responsible for the use of your data?

Name: Next Business Exhibitions S.L.
VAT number B87396818
Address C/ Poeta Joan Maragall, 23, 1st floor – 28020 Madrid
Email: data@nebext.com


VAT number G48939508
Address Isla de Txatxarramendi s/n, 48395 Sukarrieta
Email: info@azti.es


2. When do we collect your personal data?

Through an inscription request: the inscription request is made on the website of the event through an inscription form filled out by the delegate with required information as well as attached information if necessary. When completed, we also ask for authorization to send commercial communication.

Always when the inscription requires a payment, the process is redirected to a third party so that NEBEXT never will access the delegate´s bank details, being informed only upon the completed payment transaction.

Communication after the inscription request: if necessary, the registered individual may be contacted to provide additional information or any clarification of the information provided in the request.

During the event: you may interact with us during the event providing additional information. When register for accreditation on the different activities we will gather information upon your assistance and participation.

Inquiries, complaints and claims: on the website we make different channels available to contact us in case you would have any additional inquiry, complaint or claim. If any, we will collect necessary data to solve your query or manage your claim.

When registering to our newsletter: when you register to receive our newsletter.

Using cookies: the web uses cookies collecting information about the browsing. We recommend you read the cookies policy to have all the information.


3. Purposes and legitimation of the use of your data

The following table shows the purposes to use the personal information provided to us and their relation to the legitimation base, allowing us to process the data.



Purpose Base of legality
Management of the inscription made, confirm it complies with the requirements for the inscription and keep you informed about related updates to the event. The execution of a contract of which the individual takes part. (art. 6.1.b) GDPR)
During the event we process data to acknowledge the person as registered participant, enabling access to the facilities and the activities included in the registration. The execution of a contract of which the individual takes part. (art. 6.1.b) GDPR)
Administrative work and accounting of your registration payment. Comply with our legal obligations. (art. 6.1.c) GDPR)
When the participant registers using an invitation, his or her details will be used to verify the use of the invitation and the details of the person who is going to enjoy the invitation to the Partner who has sent the invitation (see section Acceptance of the invitation). Consent given by you (art 6.1.a) GDPR)
Provide your data to third parties of interest. (please see Use of registration) Consent given by you (art 6.1.a) GDPR)
In the case of having a base of legality authorising us, we will process your data to send additional information and commercial communications informing about other similar events organized by us that may be of your interest. When requirements are fulfilled of article 21.1, Law 34/2002, LSSICE to send electronic commercial communications.
The given consent to send communications (artículo 6.1.a) GDPR)
The satisfaction of legitimate interests (art. 6.1.f) GDPR)
If you have given your express consent, we will process your data to send you commercial information about all the events we organise, as well as commercial information from third party companies participating in the event. When requirements are fulfilled of article 21.1, Law 34/2002, LSSICE to send electronic commercial communications.
Consent given for the sending of communications (Article 6.1.a) GDPR).
The information will be processed to comply with our legal obligations and regulations as well as possible legal resolutions and other specific decisions by the authorities, including the communication of personal data to security forces and bodies whenever we have suspicions or indications of any act that could be illicit and criminal offence.


Comply with our legal obligations. (art. 6.1.c) GDPR)
Manage/resolve inquiries, complaints and claims that may be sent to us, related to our events in general or with the execution of a specific contract. The given consent when sending the query. (artículo 6.1.a) GDPR)
The performance of a contract to which the data subject is a party (Art. 6(1)(b) GDPR)
The send questionnaire and surveys to understand the degree of satisfaction of the delegates and improve the quality of our events. Satisfaction of legitimate interests (art. 6.1.f) GDPR)
Analyse the information upon our interaction with you to improve our commitment and/or carry out surveys and statistics to improve the functionality of our company, our services related to the events we organize and our relation and experience with the delegates. Satisfaction of legitimate interests (art. 6.1.f) GDPR)


4. Capture and use of images during the event

Nebext, aiming to promote the events and activities, could capture images and/or videos of the delegates of the event. Either Nebext or any contracted third party would carry out this capture. This data process is based upon legitimate interest. The captures could be published on internet, Nebext website or the event one, social media sites, magazines and publications.

This activity does not confer the right to remuneration or any benefit to the subjects that occasionally could appear on the captures.


5. The use of accreditation

When formalizing the registration, the participant will receive the accreditation with a QR code. This QR enables access to the facilities and the activities the person will participate in.

As an additional functionality, the QR code could be used as a substitute of a business card when visiting a booth of your interest. You may allow the exhibitors to scan your accreditation, and they will receive basic information about you, specifically: Name, surname/s, contact details, company you work for and position at the company.

Some of the scheduled events allow attendees who so wish, to provide data to the entities offering or participating in the event in question, exhibitors, sponsors and/or speakers (hereinafter “Partners”), for this, it is sufficient for the attendee to be accredited by means of the QR when accessing the conference. Accreditation is in any case voluntary and is not a requirement for access to the conference. The Partners to whom you decide to transfer your data, may treat them to contact you and send you commercial communications, the data processing carried out by the Partners will be governed by the privacy policy of each of them, not being Nebext responsible for the data processing they perform.

We remind you that, through the event website, you can access the information related to your accreditation and update it with correct data.


6. Acceptance of the invitation

Nebext provides our Partners and Exhibitors with invitations to the event in which they participate or collaborate. Each Partner or Exhibitor, will distribute the invitations of their property as they consider, or will provide Nebext the contact details of the guests so that it is the one who performs the sending.

The use of the invitation by the interested party implies an acceptance for Nebext to proceed to communicate their personal data to the Partner or Exhibitor owner of the invitation.

Specifically, the following data will be transferred: name, surname, contact details, company you work for and position you hold, these data will be those that appear on your registration form.

Your data will be used by the Partner or Exhibitor who owns the invitation to monitor the invitations and to be able to carry out reinforcement actions to encourage the use of the invitations.

7. For how long do we keep your personal data?

Your data will be processed during the time of the registration process. Once the registration is confirmed, data will be processed until the end of the event.

Data related to the payment of the inscription will be kept during necessary time to comply with the tax obligations.

If we dispose of your authorization to send communications, we will keep your data until you voluntarily unsubscribe or after three years since the last interaction with us. We remind you that all newsletters and commercial communications have a link to unsubscribe with a single click.

In any of the situations described above, finalized given time periods, the data will be conserved blocked during a legally specified term for the defence of any claims and to comply with legal obligations that might have been generated.


8. To whom the data might be disclosed

Your personal data will be processed by Nebext staff. It is only intended to be communicated to public administrations for the fulfilment of legal obligations.

When a participant registers using the invitation code provided by one of our Partners or Exhibitors, Nebext will provide this partner with the data related to the registration.

Your personal data may be transferred to Partners of the event if you expressly authorise this transfer of data.

As explained in the section Use of accreditation, when the participant authorises a partner to scan the QR code on the accreditation, Nebext will provide the partner with the basic contact details contained on a business card.

9. Which are your rights when providing us your personal data?

If we process your data, your rights are:

Right to request access to personal data: you could ask Nebext if the data is processed and access them

Right to request correction if the data is incorrect, inaccurate or incomplete

Right to request supression of your data

Right to request limits to its processing

Right to object to data processing: Nebext will end to process the personal data, with the exception that they will continue to be processed for motives laid down in the regulation.

Right to the portability of the data: in case the user prefers the data to be processed by other responsible, Nebext will provide for the transfer of the data to the new responsible

Right to not be subject to a decision made exclusively upon the automated process of personal data

At Nebext we process data based on the consent and you have the right to withdraw it at any time without affecting the legality of the process carried out previously to the withdrawal.

To exercise your rights, you should contact us sending an email to data@nebext.com or in writing to the address provided in this document.

Whenever deemed opportune, you could file a claim to the Agencia Española de Protección de Datos https://www.aepd.es/ (National Data Protection Agency in Spain).

Remember that you are responsible for the data provided. Therefore, they should be truthful, accurate and updated.


10. Data of minors

The events organized by Nebext target professionals of legal age. In any case, if the parents or legal representatives consider their children or protected to attend any of our events  providing personal data, we kindly ask them to contact us by email at data@nebext.com.

11. How did we gather your data

If registered to an event, the data that we process will be the ones provided by you. The applicant should always provide with truthful information and update personal data in case of any change since we should dispose of accurate information.

If you have received an invitation sent by Nebext, you should know that the contact details for this mailing have been provided to Nebext by the Partner or Exhibitor who offers you the possibility to use the invitation. This Partner must have previously informed you of this communication of data.

The user should not include third party personal data without previous consent and information upon current privacy policy, holding exclusive responsibility of the legality of the data provided.

12. International data transfer

We may transfer your personal information to a country outside the European Economic Area (E.E.A.) where your personal information is transferred to foreign partners or where processing is carried out by certain service providers. Such transfers are always done by ensuring that we have adequate protection of personal data through the use of safeguards permitted by law, such as the use of standard contractual clauses approved by the European Commission.

13. Amendments

We will only use your personal data in accordance with this document, valid the moment we collect your information. In the case Nebext amend the process of your data, you will be informed.


Date of publication, March 05, 2024