Privacy Policy

Last updated: 9 September 2026

1. Introduction

This Privacy Policy explains how Patafest (the “Platform”), operated by IRIS Technology Solutions S.L., processes personal data in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller for personal data collected through the Platform is:

You may contact the data controller at the address above for any matter relating to the processing of your personal data.

3. Personal Data Collected

We may collect and process the following categories of personal data during registration and use of the Platform:

• Identification data (e.g., name, surname)
• Contact data (e.g., email address)
• Account credentials (e.g., password)
• Basic technical and usage data (e.g., login activity)

4. Purpose of Processing

Personal data provided during registration is processed exclusively for the following purpose:

• To create and manage your user account
• To enable secure access to private areas of the Platform

Your data will not be used for any additional purposes, including profiling, marketing, or analytics beyond what is strictly necessary for platform access and operation.

5. Data Sharing

Your personal data:

• Will not be shared with other users of the Platform
• Will not be disclosed to third parties, except where required by law or strictly necessary for the technical operation of the Platform (e.g., hosting providers under data processing agreements)

6. Legal Basis for Processing

The processing of your personal data is based on:

• Performance of a contract (Article 6(1)(b) GDPR): to provide access to the Platform and its private areas

7. Data Retention

Your personal data will be retained:

• For as long as your account remains active
• Or until you request deletion of your account and associated data
• Subject to any legal obligations requiring longer retention

8. Data Security

Appropriate technical and organizational measures are implemented to ensure the security and confidentiality of your personal data and to protect it against unauthorized access, loss, or alteration.

9. User Responsibilities

You are responsible for maintaining the confidentiality of your login credentials and for all activities carried out under your account.

10. Data Subject Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise your rights of rectification and/or deletion of your personal data and your account on the Platform, you may contact us at info@iris-eng.com.

11. International Data Transfers

Personal data will not be transferred outside the European Economic Area unless appropriate safeguards are in place in accordance with GDPR requirements.

12. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time. Any changes will be made available on the Platform, and continued use of the Platform constitutes acceptance of such updates.