Legal information
Privacy policy
A clear explanation of what data we process, why, for how long, and your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Last updated: 30 September 2026
1. Data controller
- Controller: [Nombre o razón social del titular] (Tax ID [NIF / CIF])
- Address: [Dirección postal completa]
- Privacy contact: [email protected]
2. What data we process
Only the data you voluntarily provide when contacting us: name, email, phone, contact preference and information about your event (type, date, place, number of guests, services of interest and comments). We do not ask for special categories of data: please do not include them in free-text fields.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your request, checking availability and sending a proposal. | Pre-contractual steps at your request (art. 6.1.b GDPR). |
| Providing the contracted service, invoicing and meeting tax obligations. | Performance of a contract and legal obligation (art. 6.1.b and 6.1.c GDPR). |
| Measuring website usage in aggregate, only if you accept. | Consent (art. 6.1.a GDPR), which you may withdraw at any time. |
We do not profile you, make automated decisions or send marketing communications without your express consent.
4. Retention
Requests that do not lead to a contract are deleted within 12 months at the latest. If you book, we keep the data for the duration of the relationship and afterwards for as long as legally required (generally 6 years for accounting and tax records).
5. Recipients and processors
We do not share your data with third parties unless legally required. To provide the service we use processors bound by contracts under art. 28 GDPR: web hosting and database (Cloudflare, Inc.; form data is stored on servers located in the European Union), confirmation emails (Sendinblue SAS, “Brevo”, France) and spam protection (Cloudflare Turnstile) and, if you choose to contact us via WhatsApp, WhatsApp Ireland Ltd. under its own terms.
Some of these providers may process data outside the European Economic Area. In that case, the transfer relies on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.
6. Event confidentiality
In addition, we apply our discretion protocol: we never publish images, names or details of any event without prior written consent, and we sign non-disclosure agreements on request.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to [email protected]. We will reply within one month.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.
8. Security
The site is served exclusively over an encrypted connection (HTTPS) and we apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.