Privacy Policy

Last Updated: 23 March 2025

This Privacy Policy (“Policy”) describes how Montevino SL (Tax ID: B35569482) (“Company,” “we,” “us,” or “our”) collects, uses, and discloses personal data when you visit and use the website www.maspalomaspride.com (the “Website”) or purchase tickets or services through it. This Policy is intended to comply with the applicable data protection legislation in Spain and the European Union, including Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”).

Please read this Policy carefully. By accessing or using the Website, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree with the data practices described here, please do not use the Website.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Montevino SL
CIF/NIF: B35569482
Email: info@maspalomaspride.com

2. Personal Data We Collect

We may collect and process the following categories of personal data about you:

  1. Identification and Contact Details: Name, surname, email address, telephone number, and postal address, which you provide when purchasing tickets or contacting us.
  2. Payment Information: Payment card details or bank account information (as necessary to process ticket purchases). Payment details are typically handled by third-party payment processors in a secure manner.
  3. Transaction Information: Information about your transactions on the Website, including purchases and order details.
  4. Website Usage Data: Information about how you access and use the Website (e.g., IP address, browser type, operating system, referring URLs, page views, and interaction information). We may collect this data using cookies or similar technologies. See our Cookies Policy section for more details.
  5. Communications: Information you provide when you contact us (via email, contact forms, or customer support channels).

3. Purposes and Legal Basis for Processing

We process your personal data for the purposes and under the legal bases described below:

  1. To Provide Services and Process Orders
    • Purpose: To process and manage your ticket purchases, reservations, and any other transactions made through the Website.
    • Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR).
  2. Customer Service and Communications
    • Purpose: To respond to your inquiries, requests, or complaints and provide support.
    • Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) and/or performance of a contract (Art. 6(1)(b) GDPR) when the communication relates to the fulfillment of a purchase.
  3. Marketing and Promotional Communications
    • Purpose: To send you information about our events, promotions, or offers that may be of interest to you, subject to obtaining your prior consent where required by law.
    • Legal Basis: Your consent (Art. 6(1)(a) GDPR) or our legitimate interest (Art. 6(1)(f) GDPR) where applicable. You may opt out of receiving marketing messages at any time.
  4. Analytics and Website Improvement
    • Purpose: To analyze usage of our Website, improve our services, and personalize user experience.
    • Legal Basis: Our legitimate interest (Art. 6(1)(f) GDPR) in improving and personalizing our Website and services.
  5. Compliance with Legal Obligations
    • Purpose: To comply with legal requirements, court orders, or other legal obligations; and to respond to lawful requests by public authorities.
    • Legal Basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR).

4. Retention Period

We will retain your personal data only for as long as is necessary for the purposes set out in this Policy, and in accordance with our legal obligations, legitimate business interests, or as otherwise required by law. Once the retention period has expired, your personal data will be securely erased or anonymized.

5. Disclosure of Personal Data

We do not sell or rent your personal data. However, we may disclose your personal data to the following categories of recipients as necessary:

  1. Service Providers: Third-party service providers who perform services on our behalf (e.g., payment processors, IT service providers, ticketing platforms, hosting providers, email marketing services). These service providers only process your personal data under our instructions and strictly for the purposes mentioned in this Policy.
  2. Business Transfers: If we undergo a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity.
  3. Legal and Regulatory Authorities: Where required to do so by law or in response to valid requests (e.g., subpoenas or court orders), or if necessary to protect our rights or the rights of third parties.
  4. Professional Advisors: Our professional advisors (e.g., lawyers, accountants, auditors) for the purpose of obtaining legal, accounting, or other professional advice.

6. International Data Transfers

We primarily process your personal data within the European Economic Area (EEA). If it is necessary to transfer your data to recipients located outside the EEA (for example, if one of our service providers is located in a country that does not provide an adequate level of data protection), we will ensure that such transfers comply with the GDPR by implementing appropriate safeguards, such as Standard Contractual Clauses or binding corporate rules.

7. Your Rights

Subject to applicable data protection laws, you have the following rights regarding your personal data:

  1. Access: You have the right to request confirmation about whether your personal data is being processed and to obtain a copy of your personal data we hold about you.
  2. Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
  3. Erasure (Right to be Forgotten): You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or where processing is unlawful or you have withdrawn your consent.
  4. Restriction of Processing: You may request that we restrict the processing of your personal data if you contest its accuracy, if the processing is unlawful, or if you have objected to the processing.
  5. Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request the transfer of this data to another controller.
  6. Object to Processing: You have the right to object to the processing of your personal data where such processing is based on our legitimate interests or for direct marketing purposes.
  7. Withdraw Consent: If you have provided consent for any specific processing of your personal data, you have the right to withdraw your consent at any time. This will not affect the lawfulness of any processing conducted prior to your withdrawal.

You can exercise any of these rights by contacting us at [Insert Contact Email]. Additionally, if you believe that we have not adequately addressed your concerns, you have the right to file a complaint with a supervisory authority in the European Union member state of your habitual residence, place of work, or place of the alleged infringement. In Spain, that authority is the Agencia Española de Protección de Datos (AEPD) (www.aepd.es).

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized or unlawful processing and against accidental loss, destruction, or damage. However, please be aware that no security measure is perfect or impenetrable, and we cannot guarantee the absolute security of your personal data.

9. Children’s Privacy

Our Website is not intended for children under the age of 16, and we do not knowingly collect personal data from children. If you become aware that your child has provided us with personal data without your consent, please contact us at [Insert Contact Email]. We will take steps to delete such data promptly.

10. Links to Third-Party Websites

Our Website may contain links to third-party websites or services. We do not control the content, privacy policies, or practices of these third-party sites. We encourage you to review the privacy policies of these websites before disclosing any personal data to them.

11. Cookies

We use cookies and similar tracking technologies to collect and store information when you visit the Website, in order to enhance your browsing experience, analyze Website usage, and tailor our content. For more information about the cookies we use and how you can manage your cookie preferences, please see our [Cookies Policy] or contact us at [Insert Contact Email].

12. Changes to This Policy

We may update this Policy from time to time in response to changing legal, technical, or business developments. When we update this Policy, we will post the new version on the Website and update the “Last Updated” date above. Your continued use of the Website following the posting of any changes constitutes acceptance of those changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Montevino SL
CIF/NIF: B35569482
Email: info@maspalomaspride.com

Disclaimer: This Privacy Policy is provided for general informational purposes only and does not constitute legal advice. While it has been drafted to assist in compliance with Spanish and EU data protection laws (GDPR and LOPDGDD), you should consult with a qualified legal professional to ensure that it meets all your specific legal requirements and practices.