This English version is a translation provided for information only. In the event of any discrepancy, the Spanish version shall prevail.
Data protection
Privacy policy
Your privacy matters to us. Here you will find all the information on how we process the data you provide through this website, in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
1. Data controller
- Company name: La Fiesta Escénica SL
- Tax ID (CIF): B36963577
- Address: Lugar Rocamar, 17, Baiona (Pontevedra)
- Contact email for data protection: contacto@lafiestaescenica.com
2. Data Protection Officer (DPO)
The company has not appointed a Data Protection Officer on a mandatory basis, as none of the circumstances set out in Art. 37 of the GDPR apply. For any query regarding the processing of your personal data, you may contact the data controller directly at the email address given in the previous section.
3. Purposes of processing
We process your personal data for the following purposes:
3.1 Handling enquiries (contact form)
The data provided through the contact form is processed in order to manage, answer and follow up your enquiry about the services of La Fiesta Escénica SL.
3.2 Web analytics
With your consent, we may use traffic analysis tools to measure use of the website anonymously and improve the user experience. The processing of analytics data requires your express consent via the cookie banner.
4. Legal basis for processing
- Handling enquiries: Consent of the data subject (Art. 6.1.a GDPR). You may withdraw your consent at any time.
- Web analytics with cookies: Consent of the data subject (Art. 6.1.a GDPR). Only activated if you accept analytics cookies.
- Management of contracts and business relationships: Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
- Security and fraud prevention: Legitimate interest of the controller (Art. 6.1.f GDPR) in ensuring the security of the service.
5. Data retention period
- Contact enquiries: Kept for 5 years from the date of the enquiry, or until you exercise your right to erasure, in order to deal with any possible claims.
- Anonymised analytics data: Analytics data collected without consent (anonymous statistics) is kept for 30 days. Data collected with consent is kept as determined by the analytics provider.
- IP hash for spam control: Maximum 1 hour (rate-limit transient). We do not store the raw IP address.
6. Recipients and disclosure of data
Your data is not disclosed to third parties for commercial purposes. However, in order to provide the service we rely on the following data processors:
- Abadesa Export Center S.L. (Xpandex Hosting): Tax ID B86507936, Carretera General del Sur, nº 5, piso 1, puerta 78, 38107 Santa Cruz de Tenerife (Spain). Web hosting provider (xpandexhosting.es) and mail server that sends the messages from the contact form. Acts as data processor.
- Fluent Forms (WPManageNinja): Contact form plugin (if active). Form data is stored exclusively in our database.
7. Your rights
Under the GDPR and the LOPD-GDD, you may exercise the following rights:
- Access: To obtain confirmation as to whether we process your data and to access it.
- Rectification: To correct inaccurate or incomplete data.
- Erasure: "Right to be forgotten" when the data is no longer necessary for the purpose for which it was collected.
- Objection: To object to processing, including processing based on legitimate interest.
- Portability: To receive your data in a structured, commonly used format.
- Restriction: To request that we suspend processing in certain circumstances.
- Not to be subject to automated decisions: Not to be subject to decisions based solely on automated processing.
To exercise any of these rights, send us an email at the address given in section 1 with the subject "[GDPR Rights]", clearly stating the right you wish to exercise. You may use the AEPD's rights request form.
We will respond to your request within a maximum of one month of receipt, which may be extended to three months in complex cases (Art. 12 GDPR).
8. Complaints to the AEPD
If you consider that the processing of your data does not comply with the regulations in force, or you have not received a satisfactory response to your request, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain, via its website: www.aepd.es.
9. Cookies
This website uses its own and third-party cookies. You can find full information about the cookies we use, their purposes and how to manage them in our cookie policy.
10. Changes to this policy
We may update this privacy policy to reflect changes in legislation, in our practices or in the services we offer. We will notify you of any relevant change by publishing the new version on this page with the updated revision date. We recommend that you check this page periodically.