Privacy Policy
Last updated: October 2026
1. Data Controller
Name: Electronic and Opto-Mechanic Engineering EXOM S.L. (hereinafter "EXOM")
Registered address: Polígono Industrial Errotatxu, C-7, 48993 Getxo, Bizkaia (Spain)
Tax ID: B-95936852
Phone: (+34) 623 10 88 83
Email: info@exomengineering.com
Commercial Registry: Commercial Registry of Bizkaia, Volume 5808, Page 192, Sheet BI-72483
2. Data We Collect
Depending on how you interact with our website, we may collect the following personal data:
- Contact data: first and last name, company, email address, phone number – when you submit the contact form.
- Browsing data: IP address, browser type, pages visited, time spent, cookie data (see our Cookies Policy).
- Client portal data: login credentials and usage data for the private area.
- Laser Welding Challenge data: nickname, game results and – if you choose to leave them – your contact details (see section 4).
We do not collect special categories of personal data (Art. 9 GDPR) through this website.
3. Purpose and Legal Basis
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and contact requests | Legitimate interest / pre-contractual steps (Art. 6(1)(b) and (f) GDPR) |
| Managing the client portal | Performance of a contract (Art. 6(1)(b) GDPR) |
| Website analytics and improvement | Consent (Art. 6(1)(a) GDPR) / Legitimate interest (Art. 6(1)(f) GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Taking part in the Laser Welding Challenge, public ranking and game statistics | Legitimate interest (Art. 6(1)(f) GDPR) |
| Sending the score certificate to the email address you provide | Carrying out your request (Art. 6(1)(b) GDPR) |
| Sales follow-up with participants who agree to it | Consent (Art. 6(1)(a) GDPR) |
| Posting the gift to online winners | Consent (Art. 6(1)(a) GDPR) |
| Preventing abuse of the game (limiting rounds per network) | Legitimate interest (Art. 6(1)(f) GDPR) |
4. Laser Welding Challenge (laser welding quiz)
The Laser Welding Challenge (exomengineering.com/tools/laser-quiz) is a laser welding quiz you can play on our website and at EXOM trade-fair stands, on your own phone. You do not need to give any identifying personal data to take part.
4.1 Game data
- Nickname of your choice. There is no need to use your real name.
- Results: level, language, answers chosen, response times, lifelines used, score and, where applicable, gift code.
- Context of the visit: the trade fair or event you play from, how you arrived (QR code, link or campaign parameters) and the domain of the referring website.
- Technical data: device type, operating system and browser (derived from your browser; the full identifier is not stored), and approximate country where our network provider supplies it.
- IP address: not stored. We keep only an irreversible hash of it, to limit the number of rounds and prevent abuse, and delete it after 24 hours.
Public information: the Wall of Fame on the website and the screen at our stand show only the nickname, level, score and date of the round. EXOM may hide inappropriate nicknames.
4.2 Data stored on your device
The game stores a random, anonymous identifier, your last nickname and your sound preference in your browser's local storage (localStorage). The identifier is used to compare your result with your previous attempts and to avoid repeating questions. While you play, a code for the current round is also kept (sessionStorage) so you can resume it after reloading the page. These are not advertising cookies and are not used for cross-site tracking. You can delete them at any time in your browser settings.
4.3 Contact details (optional) and consents
After a round you may choose to leave your name and email address and, optionally, your company, phone, country, role, industry, topic of interest and project timeline. We use them to email you your score certificate. We ask for two separate consents:
- Sales contact: EXOM stores your details and may contact you about laser welding solutions.
- Gift shipping (online winners only): EXOM uses the postal address you give solely to send you your gift. At trade fairs the gift is collected at the stand and no address is requested.
If you only agree to gift shipping, we will not contact you for sales purposes. For each consent we record the date, language and version of the consent text, so that it can be demonstrated. You may withdraw your consent at any time by writing to info@exomengineering.com; this does not affect the lawfulness of processing before withdrawal. Each contact triggers an internal notification to the EXOM team.
4.4 Retention
- Contact details and shipping address: deleted automatically after 12 months, or earlier if you withdraw your consent or request erasure.
- IP address hash: 24 hours.
- Game results (nickname and score): kept for the rankings and game statistics. You may request their deletion at any time.
5. Retention Period
Contact data is retained for as long as necessary to handle your request and thereafter for the applicable statutory limitation periods. Client data is kept for the duration of the contractual relationship and the subsequent legal retention periods. Browsing data is retained as set out in our Cookies Policy. Contact details left in the Laser Welding Challenge are deleted automatically after 12 months (see section 4).
6. Recipients and International Transfers
Your data may be shared with:
- Technology service providers acting as data processors (web hosting, email, databases) under a data processing agreement with appropriate security measures.
- Public authorities where required by applicable law.
Some service providers may be located outside the European Economic Area. In such cases, EXOM ensures that adequate safeguards are in place (European Commission standard contractual clauses or other mechanisms recognised under the GDPR).
7. Your Rights
Under the GDPR, you have the right to:
- Access: obtain information about the personal data we process about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): request deletion of your data when it is no longer necessary.
- Restriction of processing: request that we suspend processing under certain circumstances.
- Data portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Not to be subject to automated individual decision-making with significant effects.
To exercise your rights, please contact us at info@exomengineering.com with a copy of your identity document. We will respond within one month (extendable in complex cases).
If you believe the processing of your data does not comply with data protection law, you may lodge a complaint with the competent supervisory authority. In Spain: Agencia Española de Protección de Datos (AEPD), www.aepd.es.
8. Security
EXOM implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure, in accordance with Art. 32 GDPR.
9. Changes to This Policy
EXOM reserves the right to update this Privacy Policy to reflect changes in legislation or business activity. We recommend reviewing it periodically. The current version will always be available on this website.
10. Contact
For any questions about the processing of your personal data, please contact us at:
info@exomengineering.com