PRIVACY AND DATA PROTECTION POLICY

1. Who is the Data Controller of your data?

In accordance with the current Regulation (EU) 2016/679, and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, the data controller is identified in section 1 of the Legal Notice.

Type of data we have about you and how we obtained them:

The categories of personal data that we process relating to clients and suppliers are:

  1. Identification data

  2. Postal or electronic addresses

  3. Commercial information

  4. Economic and transaction data

2. Do we in any case process specially protected data?

All the data mentioned above have been obtained either directly from you through the submission of a commercial offer, contractual proposal, etc., or through your company by providing us with the identification data and other information necessary to carry out the purpose of the contractual relationship between the parties. It will be your obligation or that of your company to provide us with updated data in the event of any modification.

3. For what purpose do we process your data?

We process the data provided by interested parties in order to manage different activities derived from specific procedures carried out in the field of sales, after-sales service, supplier management, service quality, etc. In this way, we will use your data to carry out any of the following actions:

I. Sending the information requested through the contact form on our website or any other means of contact with our company,

II. Providing both potential clients and our clients with offers of products and services of interest to them,

III. Carrying out ticket purchase management, as well as administrative, tax and accounting management of our clients and/or suppliers,

IV. Carrying out satisfaction surveys, market studies, etc., in order to be able to offer you the most appropriate offers and optimized service quality, etc.

4. How long will we keep your data?

The personal data relating to natural persons linked to potential clients, clients and suppliers that we collect through the different contact forms and/or information collection will be kept as long as their deletion is not requested by the interested party. The data provided by our clients and suppliers will be kept as long as the commercial relationship between the parties is maintained, respecting in any case the minimum legal retention periods according to the subject matter.

In any case, we will keep your personal data for the period of time that is reasonably necessary taking into account our needs to respond to issues that arise or resolve problems, make improvements, activate new services and comply with the requirements demanded by applicable legislation. This means that we may retain your personal data for a reasonable period of time even after you have stopped using our products or stopped using this website. After this period, your personal data will be deleted from all our systems.

5. What is the legal basis for processing your data?

Depending on the type of data processing, the legal basis is as follows:

Firstly, accounting management will be carried out, which includes invoicing and ticket purchases, as well as the relationship with clients and suppliers. This processing is based on the maintenance, development and control of the existing contractual relationship between the parties.

Likewise, the data may be used for tax management, including the application of withholdings, bonuses or other tax obligations. The legal basis for this processing is both the maintenance of the contractual relationship and compliance with the applicable legal obligations.

On the other hand, administrative management will be carried out, which includes logistics tasks, storage, delivery of products to the client and receipt of goods. This processing is also legitimized by the maintenance, development and control of the contractual relationship.

Finally, the data may be processed for marketing purposes, consisting of sending commercial actions regarding products or services, addressed to members or those persons who have previously requested information, including the carrying out of satisfaction surveys and the communication of cultural activities belonging to Poble Espanyol de Montjuïc SAU. This processing is based on the free, specific and unequivocal consent of the interested party.

It is expressly informed that the withdrawal of consent for marketing actions will not in any case condition the execution of the contract that may exist between the parties. Likewise, the processing may be based on the legitimate interest of the company for the promotion and marketing of products or services similar to those previously obtained or requested by interested parties.

In the event that you do not provide your personal data, your contract cannot be executed, legal obligations or those derived from public authorities cannot be fulfilled.

6. To which recipients will your data be communicated?

We will not transfer your personal data to any third company that intends to use them for direct marketing actions, except in the event that you have expressly authorized us to do so.

We inform you that we may provide your personal data to Public Administration bodies and competent Authorities in those cases in which they legally require it from us or in cases in which, acting in good faith, we consider that such action is reasonably necessary to comply with a judicial process; to respond to any claim or legal demand; or to protect the rights of the company or its clients and the general public.

We inform you that your data will not be transferred or communicated to third parties; the company is the sole party responsible for their processing and custody.

We will provide your personal data to third parties (e.g. service and Internet providers who help us manage our website or carry out the contracted services, IT support and maintenance companies, logistics companies, management companies and tax and accounting advisors, etc.). In any case, these third parties must maintain, at all times, the same levels of security as us in relation to your personal data and, when necessary, will be bound by legal commitments in order to keep your personal data private and secure, and also to use the information only following specific instructions from the company.

7. Transfers of data to third countries?

No transfers of data to third countries are foreseen except upon express request of the interested party.

8. What are your rights as an interested party?

Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them.

Specifically, interested parties may request the right of access to their personal data, as well as receive them in a common and machine-readable format if the processing is carried out by electronic means (right to data portability).

Likewise, interested parties may request the right to rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

Additionally, in certain circumstances, interested parties may request the limitation of the processing of their data, or in certain circumstances and for reasons related to their particular situation, interested parties may exercise their right to object to the processing of their data. We will stop processing the data, except for compelling legitimate reasons, or for the exercise or defense of possible claims or in those exceptions established in the applicable regulations.

Likewise, we inform you that you have the right to withdraw the consents granted at any time, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

Likewise, the User is informed that at any time they may exercise the aforementioned rights by writing to us using the contact details that appear in section 1 of this Legal Notice, attaching a copy of their ID document.

You will also have the right to submit a complaint to the Spanish Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights.

http://www.agpd.es/portalwebAGPD/index-ides-idphp.php

On the other hand, in accordance with the provisions of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, we undertake not to send advertising via email without having previously obtained the express authorization of the recipient. The User may oppose the sending of advertising by checking the corresponding box.