Privacy Policy

• Name: SexCitante Barcelona
• Contact email: hola@sexcitante.com
• Applicable regulatory framework: Regulation (EU) 2016/679 (GDPR) and applicable data protection legislation.

SexCitante processes exclusively the data that individuals voluntarily provide through the contact form or by direct email to hola@sexcitante.com. No additional data is collected without the knowledge of the data subject, and this website does not install cookies or use any tracking technology that would allow the collection of visitor behavioral data.

The data processed is:

• Name or pseudonym: to identify the applicant in internal community communications.
• Email address: to manage communication regarding access to events and the private calendar.
• Age: to verify that the applicant meets the legal age requirement.
• Personal introduction text: to evaluate the applicant's profile and determine whether it fits the values and dynamic of the community.

No particularly sensitive data is collected beyond the above. Information relating to sexual preferences or interests that the user freely includes in their personal introduction is treated with the utmost confidentiality and is never shared with third parties.

Data is processed for the following purposes, each supported by its corresponding legal basis under Article 6 of the GDPR:

• Management of community access requests: processing necessary for the performance of pre-contractual measures requested by the data subject (Art. 6.1.b GDPR).
• Age and profile verification: legitimate interest of the controller to guarantee the safety of the community and compliance with access requirements (Art. 6.1.f GDPR).
• Communications about private events: explicit consent of the data subject, which can be withdrawn at any time without affecting the lawfulness of prior processing (Art. 6.1.a GDPR).

Data is kept for the strictly necessary time to fulfil the purpose for which it was collected:

• Data relating to the management of a specific event is deleted within a maximum of 30 days after the event takes place.
• Data of active community members —who have expressed their wish to receive information about future events— is kept until the data subject requests its deletion.
• Email communications are deleted once they have lost their operational relevance, with a maximum retention period of 12 months.

This website does not use behavioral analytics tools, third-party cookies or advertising tracking systems. The only external services with any type of access to data related to the site are the following:

• Cloudflare Inc. (USA) — Hosting and security: this site is hosted on Cloudflare Pages. Cloudflare may process technical metadata from connections (IP addresses, HTTP headers) solely for security and content delivery purposes. This data is not accessible to SexCitante and is not used to identify individual users. Cloudflare complies with the EU-US Data Privacy Framework and has Standard Contractual Clauses approved by the European Commission. Privacy policy: cloudflare.com/privacypolicy.
• Google LLC (USA) — Google Search Console: this site is registered with Google Search Console exclusively to manage indexing in search engines (sitemap submission, crawl error monitoring). Google Search Console provides only statistical and aggregated data about the site's visibility in search results —impressions, clicks, average position— and does not install any cookies or collect identifiable personal data from site visitors. Google's privacy policy: policies.google.com/privacy.
• Tally.so (Belgium) — Contact form (pending implementation): if implemented, Tally.so will process data that users voluntarily submit through the contact form (name, email, age, personal introduction). Tally operates under a privacy-by-default philosophy and processes data on servers located within the European Union. Privacy policy: tally.so/privacy. This policy will be updated when the form is activated.

No personal data is transferred to third parties for commercial, advertising or any other purposes beyond those described in this policy.

Under the GDPR, you have the right to:

• Access: know what personal data of yours we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data when it is no longer necessary or you withdraw consent.
• Restriction of processing: request that processing be restricted under certain circumstances.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to processing based on legitimate interest.
• Withdrawal of consent: at any time, for consent-based processing, without affecting the lawfulness of prior processing.

To exercise any of these rights, write to us at hola@sexcitante.com. We will respond within a maximum of one month from receipt of your request.

If you consider that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with your national data protection supervisory authority.

SexCitante applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss or destruction. These measures include:

• Encrypted communications via HTTPS/SSL protocol throughout the site.
• Restricted access to data to strictly necessary team members.
• Active deletion of data once the established retention period has elapsed.
• Absence of cookies, trackers or behavioral analytics tools that could collect visitor data without their knowledge.

This policy may be updated to reflect regulatory changes or modifications to the services used. The date of the last update is indicated at the top of this page. We recommend reviewing it periodically. Relevant changes will be communicated through a notice on the site.