Quote

Tell us the date, venue and how many people.

Your contact. A senior coordinator reads your message, prepares the proposal and is at the venue on the day of the event.

This site is protected by reCAPTCHA and the Google privacy policy and terms of service apply.

Privacy policy

Review how we handle your data before sending the form.

1. General information

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and with Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we hereby inform you about the processing of your personal data.

2. Data controller

The controller of your personal data is:

  • Company name: Aptia Servicios de Consultoría S.L.
  • Tax ID (NIF/CIF): B19954890
  • Registered office: Sagasta 6, 36001 Pontevedra, España
  • Email: info@aptia.es
  • Phone: +34 662 107 062

3. Personal data we collect

We collect and process the following types of personal data:

3.1 Identification data

  • First name
  • Surname
  • Company

3.2 Contact data

  • Email address
  • Phone number

3.3 Browsing data

  • IP address
  • Browsing data and cookies (see our Cookie Policy)
  • Website usage data (pages visited, time spent on the site, etc.)

3.4 Communication data

  • Messages and enquiries sent through forms
  • Service of interest
  • Event date and location
  • City of residence and experience, for job applications

4. Purposes of processing

Personal data are collected and processed for the following purposes:

4.1 Handling enquiries and requests

  • Answering enquiries and requests for information received through contact forms
  • Providing quotes and commercial information
  • Maintaining the business relationship with clients and potential clients

4.2 Managing resource downloads

  • Providing access to downloadable resources (PDFs, guides, etc.)
  • Sending download links to the email address provided
  • Managing contacts interested in our resources

4.3 Commercial communications

  • Sending commercial communications (with express consent)
  • Providing information about news, services and content of interest
  • Managing marketing campaigns

4.4 Website analysis and improvement

  • Analysing user behaviour on the website
  • Improving the user experience
  • Statistical and web traffic analysis

4.5 Compliance with legal obligations

  • Compliance with tax and accounting obligations
  • Retention of documentation in accordance with applicable legislation

4.6 Handling job applications

  • Handling job applications received through the Work with us form (name, contact details, city and experience), based on the data subject's consent

5. Legal basis for processing

The processing of personal data is based on the following legal grounds under Article 6 of the GDPR:

  • Consent of the data subject (Art. 6(1)(a) GDPR): For sending commercial communications, handling job applications and for the use of non-essential cookies. Consent may be withdrawn at any time.
  • Taking steps prior to entering into a contract (Art. 6(1)(b) GDPR): For handling enquiries, requests for information and quotes.
  • Legitimate interest (Art. 6(1)(f) GDPR): For maintaining the business relationship, improving our services, statistical analysis and contact management.
  • Compliance with a legal obligation (Art. 6(1)(c) GDPR): For compliance with tax, accounting and document retention obligations under applicable legislation.

6. Data retention

Personal data will be retained for the following periods:

  • Contact form data: For as long as the business relationship is maintained and, where applicable, for the periods established by applicable legislation (6 years for commercial and accounting records, under Article 30 of the Spanish Commercial Code, and 4 years for tax obligations, under Article 66 of Law 58/2003, General Tax Law).
  • Download form data: For as long as the business relationship is maintained or until the data subject requests their erasure.
  • Job applications: One year from receipt, unless you withdraw your consent earlier. After that period they are deleted.
  • Commercial communications: Until the data subject withdraws their consent or unsubscribes.
  • Browsing data and cookies: As specified in our Cookie Policy.

Once the retention period has ended, the data will be securely erased, unless a legal obligation requires their retention.

7. Disclosure of data to third parties

Personal data will not be disclosed to third parties, except in the following cases:

  • Where necessary to provide the requested service (technology service providers, email delivery platforms, etc.).
  • Where there is a legal obligation.
  • Where the user has given their express consent.

7.1 Data processors

Aptia uses the following data processors to manage data:

7.2 International transfers

Personal data may be processed by services located in the European Union (such as Brevo, based in France). Should international transfers outside the European Economic Area take place, it will be ensured that they are made to countries with an adequate level of protection recognised by the European Commission or under the appropriate safeguards set out in the GDPR (standard contractual clauses, EU-US Data Privacy Framework, etc.).

8. Data subject rights

In accordance with the GDPR and the LOPDGDD, you have the right to:

  • Access (Art. 15 GDPR): Obtain confirmation as to whether we are processing your personal data and, where that is the case, access them.
  • Rectification (Art. 16 GDPR): Request the correction of inaccurate or incomplete data.
  • Erasure (Art. 17 GDPR): Request the deletion of your data when they are no longer necessary for the purposes for which they were collected or when you withdraw your consent.
  • Restriction of processing (Art. 18 GDPR): Request the restriction of the processing of your data in certain circumstances.
  • Portability (Art. 20 GDPR): Receive your data in a structured, commonly used and machine-readable format, and transmit them to another controller.
  • Objection (Art. 21 GDPR): Object to the processing of your data where the processing is based on legitimate interest.
  • Withdrawal of consent: At any time, where the processing is based on consent, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, you may contact us at:

  • Email: info@aptia.es
  • Postal address: Sagasta 6, 36001 Pontevedra, España

Your request must be accompanied by a copy of your identity document or an equivalent proof of identity, and must state the right you wish to exercise.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if you consider that the processing of your personal data does not comply with the regulations in force. You can contact the AEPD at:

  • Website: www.aepd.es
  • Phone: 912 663 517
  • Address: C/ Jorge Juan, 6, 28001 Madrid

9. Security measures

Aptia has adopted the technical and organisational measures necessary to ensure the security of personal data and to prevent their alteration, loss, or unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which they are exposed.

The measures implemented include:

  • Encryption of data in transit (HTTPS/TLS)
  • Access control and authentication
  • Regular backups
  • System security updates
  • Staff training in data protection

10. Minors

Our services are not intended for children under 14, the age from which Article 7 of the Spanish LOPDGDD allows a person to consent to the processing of their own data. We do not knowingly collect data from children under 14 without the consent of their parents or legal guardians. If you become aware that a minor has provided personal data without that consent, please contact us so that we can delete it.

11. Changes to the privacy policy

Aptia reserves the right to amend this privacy policy at any time. Changes will be published on this website, indicating the date of the last update.

We recommend that you review this privacy policy periodically to stay informed of any changes.

12. Contact

For any questions about this privacy policy or the processing of your personal data, you can contact us:

  • Email: info@aptia.es
  • Phone: +34 662 107 062
  • Address: Sagasta 6, 36001 Pontevedra, España

You can also consult our Legal Notice and our Cookie Policy.

access control

Access control at events: how to avoid queues and chaos

A practical guide to organising access control at corporate events, congresses and trade fairs, covering staff, systems and the mistakes you can avoid.

Aptia Team5 min read

Walkie-talkie with an Aptia label and a Celta 25/26 season accreditation

Imagine 200 people arriving at once at three accreditation desks, with one person at each desk and an average registration time of 45 seconds.

Do the maths. 200 people ÷ 3 desks = 67 people per desk. At 45 seconds each, the last to arrive waits 50 minutes in the queue.

That is 50 minutes on their feet before the event has even started, and a first impression ruined.

Technology is not enough

You can have the best accreditation software on the market and still have a queue if there are not enough registration points, if people do not know which desk to go to or if someone with a problem blocks a desk for 3 minutes.

Access control is, above all, a question of flow.

Tools help, but what decides whether it works is how you organise the space, how many people you put on it and what happens when something goes wrong.

How to calculate the staff you need

Most organisers work it out like this: "there are 300 of us, so 3–4 people on accreditation will do". Then they are surprised when a queue forms.

The right way is to work backwards, starting from the arrival peak:

  1. How many people arrive in the first half hour? At most events, between 50% and 70% of attendees arrive in the first 30–40 minutes.

  2. How long does each registration take? It depends on the system. With a QR code and a fast scanner, 10–20 seconds. With a list search and handing out materials, 40–60 seconds. With a badge that has to be printed on the spot, 90 seconds or more.

  3. Do the division. If you expect 200 people in 30 minutes and each registration takes 45 seconds, you need to process 200 × 45 = 9,000 seconds of work in 1,800 real seconds. That means 5 registration points working non-stop.

  4. Add a margin. Add an extra 20–30% for breaks, incidents and people who take longer than expected.

In the example, 5 points + 30% = 6–7 people on accreditation during the peak.

The three systems and when to use each

Paper list or tablet with manual search

When: small events (fewer than 80 people) where you do not want to complicate things with technology or where the internet connection is unreliable.

Time per registration: 40–60 seconds.

Risk: transcription errors, slowness if the list is long and difficulty updating it in real time.

Individual QR code with a scanner

When: medium-sized and large events where you can send attendees their ticket in advance.

Time per registration: 10–20 seconds.

Risk: you depend on attendees bringing the QR code (printed or on their phone). There is always 5–10% who do not bring it or cannot find it.

Advance accreditation (collected the day before or sent by post)

When: multi-day congresses and events where attendees are travelling in and have time to collect their badge beforehand.

Time per registration on the day: almost zero. You simply check that they are wearing their badge.

Risk: more complex logistics beforehand and postage costs if you send it by post.

For large events, the ideal is to combine QR codes as the main system with 1–2 dedicated points for incidents (people without a QR code, last-minute changes, technical problems).

The incident desk

At every event there is a percentage of people with problems:

  • They are not on the list (but swear they registered)
  • They changed their email address and the QR code went to the old one
  • They are accompanying someone who is registered
  • They are press, VIPs or speakers and should not join the normal queue
  • They have a special badge that nobody knows how to handle

If these cases are dealt with in the normal queue, they block the flow. A 3-minute incident means 4–6 people who are not moving.

The solution is an incident desk physically separate from the main flow, staffed by someone with access to the full system and the authority to make decisions.

At events with more than 150 people, this desk is essential.

Signage, obvious but forgotten

People arriving at an event do not know where to go, even if you have sent them an email with instructions or they came last year.

What works:

  • A sign visible from the entrance showing where accreditation is
  • Clearly separated queues if there are several (by surname, by ticket type, incidents)
  • Staff within the flow, not just at the desks, who spot anyone who looks lost and point them in the right direction before they ask

What does not work:

  • A4 sheets stuck up with tape
  • Signs at eye level when there are 50 people in front blocking them
  • Assuming people will read anything

The most expensive mistake

Opening accreditation at 8:55 when the event starts at 9:00.

If you do that, you will have a queue, whatever system you use and however many people you put on it.

Open at least 30 minutes before the actual start and, if you can, 45–60 minutes before. That way, early arrivals get in without waiting and those who arrive just in time find the flow already moving.

It costs nothing. It only requires you and your team to be ready earlier.

Quick checklist

Before your next event, go through these questions:

  • Have I calculated the arrival peak and do I have enough staff to absorb it?
  • Is there an incident point separate from the main flow?
  • Can the signage be seen from the entrance, even with people in front of it?
  • Do I open accreditation at least 30 minutes ahead?
  • Do I have a plan B if the main system fails (a back-up list, a phone with data)?

If any answer is no, fix it before the event, not once it has already started.

We have managed access at congresses of 400 people at the Palacio de Congresos de Santiago, at corporate days at IFEVI and at institutional events in Vigo. If you have an event in Galicia and want to make sure the entrance does not become a bottleneck, we can take care of it.

Quote

Did you find this article useful?

If you have an event in mind, tell us and we'll help you prepare it.

  1. Today

    Write to us with whatever you know, even if some details are missing.

  2. 24 h

    We send you profiles, schedules and a fixed price.

  3. Until the end

    The same contact person until the event is over.

Your contact. A senior coordinator reads your message, prepares the proposal and is at the venue on the day of the event.

This site is protected by reCAPTCHA and the Google privacy policy and terms of service apply.