Last updated: 12 October 2026. This notice covers adamexpostand.com, website enquiries and our AI stand designer. Our Chrome extension has a separate privacy policy.
Who is responsible for your information?
Adam Expo Stand Solutions SL is the data controller. NIF/CIF: B-88186051. Address: Calle Planeta Urano 90, 28983 Parla, Madrid, Spain. Registro Mercantil de Madrid: Tomo 38050, Folio 197, Hoja M-677401, Inscripción 1ª. For privacy questions or rights requests, email [email protected].
Information we use and why
- Enquiries and proposals: your name, business contact details, company, event, stand requirements and message. We use these to answer your request, prepare a proposal and discuss that project. For an individual prospective customer, the basis is taking requested steps before a contract (GDPR Article 6(1)(b)). For correspondence with a company representative, it is our legitimate interest in responding to business requests and managing the business relationship (Article 6(1)(f)).
- AI concepts: venue, dimensions, layout, style, company name, sector and any optional brief. We process these to provide the design service you request, on the same purpose-specific bases above. To unlock and email concepts, we also use your email address and optional name. A copy is sent to our company inbox so our team can discuss your project.
- Operation and security: IP address, request time, connection information, service responses and associated concept records. Our legitimate interest is operating the website securely, investigating faults, preventing abuse and enforcing the free-generation limit. The limit is two generations per IP per UTC day, shared between English and Spanish.
- Optional measurement: Google Analytics helps us understand website use, interactions and usability, subject to your Statistics choice. Processing can include browser/device information, online identifiers, page activity and approximate location. Microsoft Clarity interaction recording is currently paused. Use the cookie controls to review or change your optional choices.
- Comments: if you choose to post a comment, we process the details you submit and technical information used to operate and protect the comment service. Your displayed name and comment can be public. Do not include private or sensitive information in a public comment. Our legitimate interest is providing and moderating relevant discussion.
- Legal records: we retain information when necessary to meet applicable legal obligations (Article 6(1)(c)) or establish, exercise or defend legal claims (Article 6(1)(f)).
Required fields are identified in each form. Without the necessary information we may be unable to respond or supply the requested service. A project enquiry or concept request does not itself subscribe you to a marketing mailing list. Do not put sensitive personal data, third-party personal information or confidential materials in an AI brief.
AI processing and image links
Design inputs are assembled into a prompt and sent with style-reference images to fal.ai for image generation. Company names and details in your optional brief can therefore reach the AI provider. The unlock name and email are handled by a separate delivery workflow; they are not fields in that image-generation request. Provider-hosted image links are not authenticated private storage: anyone who obtains a link may be able to view the image.
Concepts and estimates are illustrative planning aids. They do not confirm construction feasibility, create a binding quotation or determine your eligibility for a service. Our team reviews a project before confirming its design, price and delivery terms. We make no blanket promise that all provider processing is confined to the EU or that every AI model has identical storage or training terms.
Recipients and international processing
Authorised company staff handle enquiries and project communications. Technical services include Webempresa (website and mail hosting), Cloudflare (website delivery/security and AI application records), fal.ai and its relevant model infrastructure (image generation), Google Analytics (optional measurement). Microsoft Clarity has been used for usability analysis; new recordings are currently paused. These providers may use subprocessors. We may also disclose information to professional advisers or public authorities when necessary for a legal obligation or claim.
Using international providers can involve processing outside the European Economic Area, including the United States. The published Cloudflare data-processing terms and fal.ai data-processing terms describe standard contractual clauses for relevant restricted transfers. Google’s and Microsoft’s applicable contractual terms also describe their international processing arrangements. These published documents do not establish the location of every operation or the terms of every model. Contact [email protected] to request information about the safeguards applicable to your information or a copy, subject to necessary protection of confidential details.
Retention
- Unsuccessful enquiries and related emails: our rule is to review them for deletion 12 months after the last meaningful contact, unless a documented legal reason requires continued retention. This is a review rule, not automatic deletion on the anniversary.
- Customer and legal records: for the project or relationship and the applicable accounting, tax, warranty and legal-claim periods. Restricted records may be retained where required by law.
- AI application records in Cloudflare: generation and unlock records have seven-day expiry; unlocked enquiry records have 90-day expiry; IP/date quota counters expire after approximately 25 hours. Updating some records can restart expiry. These periods do not delete email copies, provider-hosted images, other website records, logs or backups.
- Provider images and technical records: their lifespan depends on the service’s lifecycle and security arrangements. A concept-session expiry does not guarantee deletion of its image link. You can ask us about deletion of a particular concept or enquiry.
- Comments: while the comment remains published and relevant, subject to moderation and applicable rights. Technical logs and backups are retained according to their security and recovery purpose and reviewed to avoid unnecessary retention.
- Analytics: cookies and provider records have separate lifetimes. Google Analytics user and event retention is set to two months, without resetting on new activity. The change is subject to Google’s 24-hour application period. These controls do not cover most aggregated standard reports. Pausing new Clarity recordings does not delete previously collected provider records, which have separate retention arrangements.
Your rights and choices
You may request access, correction, erasure, restriction or portability where applicable, and object to processing based on legitimate interests. Where consent is the basis, you can withdraw it without affecting earlier lawful processing. Use the website’s cookie-preference controls to change optional-cookie choices. Email [email protected] with enough information to identify your request; we may ask for proportionate identity verification. We normally respond within one month, subject to the extensions and exceptions permitted by law.
You can complain to the Spanish Data Protection Agency (AEPD) or your competent supervisory authority. You may contact us first, but this is not a condition for making a complaint. For cookie information see our cookie policy. External services you choose to open, such as WhatsApp, have their own privacy terms. We update this notice when the described processing changes.