Skip to content
Space Speakers
Legal

Privacy policy

This policy explains what personal data Space Speakers processes, why, on what legal basis, and how you can exercise your rights under the General Data Protection Regulation (EU) 2016/679.

Last updated: 19 August 2026

1. Who is responsible for your data

The data controller is Space Speakers (“we”, “us”). You can reach us at privacy@space-speakers.com for any question about this policy or about how your data is handled. Full company identification details are set out in our legal notice.

2. What data we process and why

Enquiry and booking forms. When you contact us or request a speaker, we process your name, email address, organisation, event details and the content of your message in order to answer you and prepare a proposal. Legal basis: performance of a contract or steps taken at your request (Art. 6(1)(b) GDPR).

Expert applications. If you apply to join the roster, we process your professional profile, biography, areas of expertise, languages, links and any material you send us, in order to assess and — if accepted — publish your profile. Legal basis: steps taken at your request and, for publication, your consent (Art. 6(1)(a)-(b) GDPR).

Optional analytics. If you consent, we record aggregated, cookieless usage measurements: pages viewed, search and filter interactions, a per-tab session identifier stored in sessionStorage, referrer and UTM campaign parameters. We do not store IP addresses, do not build profiles and do not track you across other websites. Legal basis: your consent (Art. 6(1)(a) GDPR), withdrawable at any time.

Technical operation and security. Our hosting and backend providers process request metadata to serve the site and protect it from abuse. Legal basis: legitimate interest in a secure, functioning service (Art. 6(1)(f) GDPR).

3. Who we share data with

We do not sell personal data and we do not share it for advertising purposes. We rely on a small number of processors acting on our instructions: our hosting and application platform, our managed database and authentication provider, and our email delivery provider. Where a speaker enquiry concerns a specific expert, we share the details of your request with that expert so that the engagement can be assessed.

Our infrastructure is operated in the European Union wherever available. If a transfer outside the EEA is unavoidable, it is covered by the European Commission's Standard Contractual Clauses and additional safeguards.

4. How long we keep it

Enquiries and booking requests: up to 24 months after the last contact, then deleted or anonymised. Expert applications: up to 24 months if not accepted; for the duration of the collaboration, plus statutory retention periods, if accepted. Analytics events: up to 14 months in aggregated form. Consent records: up to 24 months as proof of your choice.

5. Your rights

You have the right to access your data, to rectify it, to erase it, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of prior processing. Write to privacy@space-speakers.com and we will respond within one month.

You may also lodge a complaint with your national supervisory authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).

6. Security

Access to personal data is restricted to authorised staff, protected by authentication and row-level access rules, and transmitted over encrypted connections. We review our measures regularly and notify you and the competent authority of any breach that meets the GDPR notification thresholds.

7. Changes

We may update this policy to reflect changes in our services or in the law. Material changes are announced on this page and, where consent is affected, by asking for your choice again. See also our cookie policy and terms of use.