🕵️‍♂️ Privacy Policy

We are glad you are here and choose to stay informed. The text you have here explains what, how, and why we use your information when you visit this website or hire any of our services or products. Your privacy is very important to us, and we will never misuse the personal information you entrust to us. We invite you to carefully read these terms first, understanding that you give your express consent to these terms by using this site.

Your privacy and rights are respected on this website

On this website, we respect and take care of the users' personal data. As a user, you should know that your rights are guaranteed. We have strived to create a safe and reliable space, and that is why we want to share our principles regarding your privacy:

• We never ask for personal information unless it is really necessary to provide you with the services you require.
• We never share users' personal information with anyone, except to comply with the law or if we have your express authorization.
• We never use your personal data for a purpose other than that expressed in this privacy policy.

We have adapted this website to the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR), as well as Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE or LSSI). It also complies with Organic Law 15/1999, of 13 December, on the Protection of Personal Data (LOPD), and Royal Decree 1720/2007, of 21 December, known as the LOPD Development Regulation. It should be noted that this Privacy Policy could vary according to legislative or self-regulation requirements, so users are advised to visit it periodically.

---

Responsible for the processing of your personal data:

OCIOTUR DIGITAL, SL (hereinafter, "The Owner")
Barcelona, Spain
CIF: B66529900
Registered in the Mercantile Registry of Barcelona Volume 44803, Folio 215 and owner of the Website.
Email address: [email protected]

Principles we will apply to your personal information:

In the processing of your personal data, we will apply the following principles that comply with the new European data protection regulation:

1. Principle of lawfulness, fairness, and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes that we will inform you about in advance with absolute transparency.
2. Principle of data minimization: We will only request data strictly necessary in relation to the purposes for which they are required. The minimum possible.
3. Principle of limitation of the storage period: Data will be kept for no longer than necessary for the purposes of the processing, depending on the purpose, we will inform you of the corresponding retention period. In the case of subscriptions, we will periodically delete those inactive records for a considerable time.
4. Principle of integrity and confidentiality: Your data will be treated in such a way as to ensure adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures. You should know that we take all necessary precautions to prevent unauthorized access or misuse of our users' data by third parties.

How is data obtained on this website?

• Through Forms
• Through Cookies
• Through web browsing
• Through interactions

What are your rights when you provide us with your data?

• Request access to personal data relating to the data subject
• Request its rectification or deletion. Right to be forgotten
• Request the limitation of its processing
• Object to the processing
• Request data portability

Interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, interested parties may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. The Owner will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. They may also request the portability of their data.

For what purpose do we process your personal data?

When a user connects to this website, for example, to make a purchase or contract, they are providing personal information for which The Owner is responsible.

This information may include personal data such as your IP address, name, email address, phone number, or other information. By providing this information, the user gives their consent for their information to be collected, used, managed, and stored by The Owner, only as described in this Privacy Policy and in other ways clearly and explicitly announced when entering data.

• Purchase form: The data provided is done in order to provide the service, issue tickets or reservations, and process payment in an encrypted and secure manner. Under no circumstances does The Owner store any of your bank card data. This form has specific conditions that apply additionally and are exposed and consented to at the time of purchase.
• Other forms: The email, phone, or other data requested are used for the purpose described in the same form. It is always possible to cancel at any time.

Other purposes of the data:

• To ensure compliance with the terms of use and applicable law. This may include the development of tools and algorithms that help this website ensure the confidentiality of the personal data it collects.
• To support and improve the services offered by this website.
• Other non-identifiable data is also collected, which is obtained through some cookies that are downloaded to the user's computer when browsing this website, which we will detail further below in the Cookies section.
• To limit and segment The Owner's marketing campaigns to specific people on the web or on external media and platforms such as Meta, TikTok, or Google.
• To manage social networks. The Owner may have a presence on social networks. The treatment of the data carried out by the people who become followers on the social networks of the official pages of The Owner will be governed by this section. As well as by those terms of use, privacy policies, and access regulations that belong to the social network that applies in each case and previously accepted by the user. It will treat their data with the purposes of correctly managing their presence on the social network, informing about activities, products, or services of The Owner. As well as for any other purpose that the social network regulations allow.

More information about the use of cookies available in the corresponding section

You should know that The Owner does not sell, rent, or transfer personal data that can identify the user, without prior consent. However, in some cases, collaborations can be carried out with other professionals, in such cases, consent will be required from users informing them about the identity of the collaborator and the purpose of the collaboration. It will always be carried out with the strictest security standards.

Legal basis for processing:

The legal basis for the processing of your data is: consent.

Participating and interacting with this website or subscribing to our emails implies the express consent of this privacy policy.

The purchase or contracting of products or services implies the express consent of this privacy policy and the specific policies and terms at the time of purchase duly specified.

Category of data:

The categories of data that can be processed if you provide them are:

• Identifying data: Email, ID, name, phone
• Non-identifiable data: Own and third-party cookies

The Owner does not store or process payment data. If required in purchase processes, these are processed by secure banking or financial entities and under strictly encrypted processes.

How long will we keep your data?

Until the deletion is requested by the data subject.

Browsing:

Non-identifiable data can be collected when browsing, which may include, IP addresses, approximate geographical location, a record of how services and sites are used, and other data that cannot be used to identify the user. Non-identifiable data also includes those related to your browsing habits through third-party services.

We use this information to display ads outside our site, analyze trends, administer or customize services or the site, track users' movements around the site, and to collect demographic information about our user base as a whole.

Confidentiality and Security of your data:

The Owner is committed to the use and treatment of the data, including personal data, respecting their confidentiality and using them according to the purpose of the same, as well as complying with its obligation to keep them and adopt all measures to avoid alteration, loss, treatment, or unauthorized access (such as the Https protocols we use throughout the web), in accordance with the provisions of current data protection regulations.

The Owner cannot guarantee the absolute impregnability of the Internet network and therefore the violation of data through fraudulent access to them by third parties, despite having all the necessary security measures and making every effort possible to ensure that it never happens. In case of any unauthorized breach, The Owner undertakes to inform all affected users as soon as possible within a maximum period of 72 hours.

Accuracy and veracity of data:

As a user, you are solely responsible for the veracity and correctness of the data you submit, exonerating The Owner from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and they undertake to keep them duly updated. The user agrees to provide complete and correct information in any data collection method.

Acceptance and consent:

The user declares, expressly upon accessing this site, to be informed of the conditions regarding the protection of personal data, accepting and consenting to the treatment thereof by The Owner in the form and for the purposes indicated in this privacy policy.

Likewise, the user expressly consents to the possibility that their shared photographs, opinions, and other content contributions may be processed. At the moment they voluntarily make a photo public, they assume all responsibility as the author of it, and accept the risks involved in making such data public.

Sending emails:

In accordance with the LSSICE, Law 34/2002, we want to be very clear about the principles we apply with emails and commercial electronic communications

• We do not engage in SPAM practices and are committed to transparency
• We only send emails related to the service, purchase, or commercial emails to those who request and consent to it, either by subscribing, logging in, or making a purchase
• The user can always cancel or change the frequency of all our emails easily and transparently from the same email

Changes to the privacy policy:

The Owner reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, the Provider will announce on this page the changes introduced with reasonable advance notice of their implementation.

Questions about this policy or your rights?