Skip to content
Aforo

Privacy policy

Last reviewed: 22 September 2026

This translation is provided for information only. The Spanish version is the legally binding one.

1. Data controller

  • Owner: SCOPE X TECHNOLOGIES SL
  • Tax ID (NIF): B88730429
  • Registered office: Calle Pablo Casals 10, 1.º A, 28011 Madrid (España)
  • Email: fjurado@scopex.es
  • Phone: 647 937 259

2. What data we collect and why

Website forms

When you request a demo, we collect the details you type into the form: your name, your email address, your phone number if you give it, the name of your studio and the message you write to us.

When you subscribe to news updates from the blog, only your email address.

  • Purpose: to deal with your request (arranging the demo or sending you the updates you have subscribed to) and to follow up commercially on that relationship.

  • Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) for the demo, and your consent (Art. 6(1)(a) GDPR) for the updates.

    You can withdraw that consent at any time using the unsubscribe link in each email or by writing to us.

  • Retention: for as long as the relationship lasts or until you ask to be removed; after that, kept blocked for as long as needed to deal with any possible legal liabilities.

Usage analytics

Only if you accept it in the cookie notice do we use PostHog (with servers in the European Union) to find out which pages help and which do not. Without your acceptance, no identifier is installed and no browsing data is sent.

That analytics includes recording your visit to the page: where you click, how far you scroll and how you move the mouse, so that we can watch it afterwards and understand where people get stuck.

Nothing you type into the forms is recorded. The fields are masked before the data leaves your browser, so your name, your email address or your message is not sent in that recording.

Nor do we create a profile of anyone who only passes through the website without leaving their details. The cookie policy explains it in detail.

Server logs

Like any website, the server generates technical logs (IP address, date and page requested).

They are essential to provide the service and protect it against abuse (legitimate interest, Art. 6(1)(f) GDPR). They are kept for a limited time.

If we have written to you without you asking us to

Sometimes we write to studios and academies to introduce Aforo. If you have received an email from us that you had not asked for, this is what we hold about you and where it came from.

  • What data: the name of your business, its sector, its town, its phone number and its website, and an email address published on that website.

    We do not buy lists, we do not use third-party databases and we do not guess addresses.

  • Where it comes from: Google’s public directory and your own website. In the first email we send you, we tell you the exact page and the day on which we found your address, so that you can check it.
  • Purpose: to tell you once that Aforo exists and to ask you how you handle bookings today.

  • Legal basis: our legitimate interest in contacting a business about its activity (Art. 6(1)(f) GDPR and Article 19 of Spanish Organic Law 3/2018).

    We have written up that balancing test and can show it to you if you ask for it.

  • How often: at most three emails in a year, and no more. This does not rely on a promise: the limit is set in the program that sends the emails, and it will not let a fourth one go out.

  • How to make us stop: with the unsubscribe link in any email, or by replying “baja” (Spanish for “unsubscribe”).

    We keep your address on an unsubscribe list so that we never write to you again, not even if it reappears on your website later on. It is the only way to make an unsubscribe stick.

  • Retention: for as long as the business still fits what we do, or until you ask to be removed. Unsubscribed addresses are kept only to honour that unsubscribe.

We do not put any invisible image or marker inside those emails to find out whether you have opened them.

3. Where your data goes

Form data is stored in systems managed by us (our CRM and our automation tools).

Those systems are hosted on servers contracted with Contabo GmbH (Germany), within the European Union.

The providers that process data on our behalf do so as processors, under a contract in accordance with Art. 28 GDPR:

  • Contabo GmbH (Germany): hosting for the website and our internal tools.
  • PostHog (hosted in the EU): usage analytics, only if you accept the analytics cookies.

We do not sell your data or pass it on to third parties for their own purposes.

There are no international transfers outside the European Economic Area; if there ever were, they would be made with the safeguards of Chapter V of the GDPR and we would update this policy.

4. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to fjurado@scopex.es and stating which right you wish to exercise.

We will reply within one month. If you believe we have not handled your data properly, you can lodge a complaint with the Agencia Española de Protección de Datos (the Spanish data protection authority, AEPD) (aepd.es).

5. About the data inside the Aforo product

This policy covers the aforoapp.com website. When a studio uses the Aforo software, its students’ data is processed by the studio itself as controller.

In that case, SCOPE X TECHNOLOGIES SL acts as processor under the service contract and its data processing agreement. The conditions are set out in the terms of service.

6. Changes to this policy

If we change anything significant (for example, a new provider), we will update this page and its review date.