In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, and Organic Law 3/2018 of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, the Privacy Policy must be mandatorily included on a website when it collects any personal data from users.

PROTECTION OF PERSONAL DATA

EDT EVENTOS S.A. informs the users of its website www.mavidadbernabeu.com, through this Privacy Policy, about the processing and protection of the personal data of users that may be collected through browsing or contracting services carried out on this portal. The use of this website by the user implies their acceptance of this Privacy Policy.

EDT EVENTOS S.A. adopts the necessary measures to guarantee the security, integrity and confidentiality of the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data, and, where not regulated by it, Organic Law 3/2018 of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, as well as Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce.

Personal data is collected and processed through the registration forms on this website or via email, in accordance with this Privacy Policy. These data are necessary for the management and maintenance of some of the services provided by EDT EVENTOS S.A.

DATA CONTROLLER

The data controller for the personal data provided by users when accessing and using the website is EDT EVENTOS S.A., as the owner of the website, with Tax Identification Number (CIF) A-82998139, registered office at Calle Santa Leonor, 53, 28037 Madrid, registered with the Madrid Mercantile Registry. Telephone: +(34) 913 274 051 and email address: hola@somosexperiences.com

EDT EVENTOS S.A. undertakes to apply the IT security measures provided for in the aforementioned regulations, in order to prevent unauthorized access or misuse of the data, its manipulation, deterioration, or loss.

DATA RETENTION PERIOD

EDT EVENTOS S.A., as the data controller, undertakes to store and manage the personal data and information collected through this website with due confidentiality for as long as the professional relationship established remains in force and the data subject does not request its deletion, and, in any case, for a maximum period of 5 years from the end of the commercial relationship between the user and EDT EVENTOS S.A. However, the controller may keep the data properly blocked to address potential administrative or judicial liabilities. In the case of commercial communications, the data will be kept until the user revokes their consent.

PURPOSE OF DATA PROCESSING

The operations, procedures, and technical processes, whether automated or not, that enable the collection, storage, modification, transfer, and other actions on personal data are considered personal data processing.

At EDT EVENTOS S.A., we process the personal data that the user provides through hola@somosexperiences.com in order to include it in our contact database, manage the requested commercial relationship, and use such information as a means of contact for the company. Furthermore, processing these data also involves managing the sending of requested information and responding to inquiries or questions submitted by the user through the website.

The registration fields must be completed so that EDT EVENTOS S.A. can fulfill the aforementioned purposes.

The user will give their consent through an affirmative action to receive commercial communications and may object to the sending of such communications at any time by sending an email to the address mentioned above.

LEGAL BASIS FOR DATA PROCESSING

The processing of the personal data provided by the user is based on the following legal grounds:

• The contracting of services from EDT EVENTOS S.A. and the execution of the requested professional assignment, the terms and conditions of which will be made available to the user prior to any potential contracting. To establish this professional relationship, the data subject is required to provide their data.
• The free, specific, informed and unambiguous consent, as, after reading this Privacy Policy, the user is informed and, if in agreement, may accept it through a declaration or a clear affirmative action, such as checking a box provided for this purpose.

If the data subject does not provide the requested data or if they are incorrect or inaccurate, we will not be able to process their request, making it impossible to provide the requested information or carry out the contracting of services. Therefore, the data controller, EDT EVENTOS S.A., will be exempt from any liability arising from the non-execution of the professional assignment or from the consequences resulting from such inaccurate or incorrect information.

DATA DISCLOSURE

As a general rule, EDT EVENTOS S.A. will not disclose personal data to third parties, unless the provision of a service requires a contractual relationship with a data processor and it is strictly necessary for the management and maintenance of the relationship between the user and the company. This will only be done for the time necessary to execute the assignment and under the same conditions and with the same responsibilities required of the data controller. Once the assignment is completed, the data processor shall return the personal data to the controller and delete any copies in their possession.

Additionally, only third parties with whom EDT EVENTOS S.A. has a legal or contractual obligation to share the data will have access to such personal data, including, for example, the Ombudsman and Judges and Courts involved in proceedings related to claims submitted.

Finally, users are informed that their data may be shared with companies within the SOMOS EXPERIENCES group, whose identities will be properly disclosed to the user in the interest of greater transparency, for the purpose of managing ticket sales and payment gateways.

The company managing the ticket purchase platform is Vivaticket Ibérica S.L. – Tax ID (CIF): B84092196

RIGHTS OF DATA SUBJECTS

The user may exercise, at any time and under the terms established by current legislation, the rights of access, rectification, or deletion of data, request the restriction of processing, object to it, request data portability, as well as withdraw the consent given. These rights are recognized in the aforementioned Regulation (EU). Users may exercise these rights by contacting EDT EVENTOS S.A. at its registered office address mentioned above or by sending an email to the following address: hola@somosexperiences.com

To effectively exercise these rights, users must verify their identity through any of the following methods:

• Registered email address
  Send your request from the email address you have registered in the service. This automatically verifies your identity.
• Electronic identification
  Use your digital certificate (FNMT), DNIe, or Cl@ve system to sign and submit your request officially.
• ID (front side), masking all data except full name
  In all cases, once your identity has been verified, we will process your rights request without unnecessary steps or additional forms, and we will inform you clearly and promptly about the status of your request.

Likewise, users may file a complaint with the Spanish Data Protection Agency (the competent supervisory authority in this matter), especially if they have not obtained satisfaction in the exercise of their rights, by writing to: C/ Jorge Juan, No. 6, 28001 – Madrid, or through the website: https://www.agpd.es