Controller
Rafael Gonzalez Muñoz (Evoteg), tax ID 78222335W, Polígono 12, parcela 208, 07300 Inca, Mallorca, Islas Baleares, España. Data protection contact: info@evoteg.com.
Data we process
Account: identifier, name, email, profile photo and whether the email is verified, received from your Evoteg account (https://gestor.evoteg.com). Your password is managed by the Evoteg account, not by Evomercado.
Listings: title, description, category, price, province or municipality, photos and the contact details you choose to publish. Professional profile: business name, description, province, logo and public contacts you add.
Activity: favourites, messages with other users, reports you submit, account notices and moderation decisions about your content.
Promotions and payments: token balance and movements, promotions and top-up orders (pack, amount, status and Stripe identifier). We do not store card details.
Listing statistics: daily views and contact openings. To avoid counting the same visit twice we use an encrypted connection fingerprint (HMAC) deleted after two days; we do not store IP addresses in these statistics or use tracking cookies.
Security: sessions with IP address and browser, and technical records to limit abuse.
Purposes and legal basis
Managing your account and providing the service (publishing and showing listings, messaging, favourites, professional profiles and promotions): performance of the contract (art. 6.1.b GDPR).
Charging token top-ups, handling refunds and meeting accounting and tax obligations: contract and legal obligation (art. 6.1.b and c).
Moderating content, handling reports and preventing fraud, spam and attacks: legitimate interest in keeping the marketplace safe (art. 6.1.f).
Sending service emails (verification, notices about your account and listings): performance of the contract. We do not send marketing without your consent.
Sending a draft of your listing to other Evoteg portals: only with your consent for each listing (art. 6.1.a), which you can withdraw by editing it.
What is public
Listings and professional profiles are public and may appear in search engines. Your sign-in email is never shown, only the contacts you publish. Do not include information you do not want to make public in texts or photos.
Recipients and processors
Other users: see your listings, professional profile and the messages you send them.
Evoteg account (https://gestor.evoteg.com): identity and email delivery through Amazon Web Services (Amazon SES).
Stripe Payments Europe, Ltd.: payment of token top-ups, as an independent controller of payment data.
Hosting and file-storage providers engaged by Evoteg to run the marketplace.
EvoLive, Músicos del Mundo or evoZoa, only if you choose to send them a draft: they receive the title, description, category, price, location, listing link, email and, if provided, phone; never photos.
Public authorities, where required by law.
International transfers
We process data preferably within the European Economic Area. Where a provider such as Stripe or Amazon Web Services processes it elsewhere, it relies on European Commission adequacy decisions or standard contractual clauses.
Retention
Account and content: while you keep your account. Listings are published for 60 days and can be renewed. When you delete your account (My account → Security) we delete the account, listings, messages, favourites, notices and token balance.
Payments: top-up receipts are kept for the accounting and tax periods (6 years) in Stripe and in Evoteg’s accounting records, even after you delete your account.
Statistics fingerprints: 2 days. Sessions: expire after 30 days without use.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by emailing info@evoteg.com from your account email. You can also delete your account in My account → Security. We reply within one month.
Your Evoteg account data is managed at https://gestor.evoteg.com. If you disagree with our reply, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Security and minors
We use encrypted connections (TLS), secure session cookies and abuse limits; passwords are managed by the Evoteg account. You must be at least 14 to create an account and 18 to buy tokens.
Changes
We will publish any change on this page with its date and announce important changes.