1. Controller
Bombas Gens Centre d’Arts, S.L. · CIF B70649074 · Avenida Burjassot 54–56, 46009 Valencia, Spain · info@bombasgens.com. No data protection officer has been reported as appointed.
2. Data, purposes and legal bases
| Activity | Data and purpose | Legal basis |
|---|---|---|
| Contact | Identity/contact details; answer and follow up. | Pre-contractual steps, legitimate interests or consent, depending on the request. |
| Newsletter | Email, name and preferences; send news and measure campaigns. | Consent; withdraw through the unsubscribe link. |
| Tickets | Identity, contact, purchase, payment and attendance; manage sale, access, issues and accounts. | Contract and legal obligations. Clorian may collect payment on its platform. |
| Group bookings | Contact, organisation, group, needs and visit; organise the booking. | Pre-contractual steps/contract; legitimate interests; explicit consent for any health or accessibility data. |
| Analytics/advertising | Online identifiers, device, browsing and interactions; measure use/campaigns and personalise advertising. | Consent through the cookie panel. |
3. Source and required data
We collect data directly from individuals through forms, communications and bookings, as well as technical data generated when using the website. Required fields are needed to process a request or provide a service; without them, we may be unable to proceed.
4. Recipients and processors
Contracted providers may process data on our instructions: Clorian (ticketing), Mailchimp/Intuit (newsletter), hosting, CRM, form, support and analytics providers, and Google and Meta where their technologies are consented to. Data may be disclosed to authorities and courts where legally required. We do not sell personal data.
5. International transfers
Mailchimp/Intuit, Google and Meta may process data outside the EEA. Transfers will rely, as applicable, on an adequacy decision —including the EU–US Data Privacy Framework where the provider is certified—, Standard Contractual Clauses and supplementary measures. Information about safeguards may be requested at info@bombasgens.com.
6. Retention
Enquiries are kept while answered and for applicable limitation periods. Contract and ticket records are kept for the relationship and statutory periods, generally up to six years for commercial records and four years for tax obligations. Newsletter data is kept until consent is withdrawn. Group booking data is kept while managed and for liability periods. Withdrawal does not affect prior lawful processing.
7. Rights
You may request access, rectification, erasure, objection, restriction and portability, and withdraw consent, by emailing info@bombasgens.com. We may verify your identity. You may also complain to the Spanish Data Protection Agency (www.aepd.es).
8. Children
General forms are not aimed at children under 14. If a group booking contains children’s data, the organiser or representative confirms it has authority and will provide only necessary data. Special-category data should not be sent unless essential and an appropriate channel is provided.
9. Automated decisions and security
No automated decisions producing legal or similarly significant effects are planned. We apply reasonable technical and organisational safeguards, although no Internet-connected system is completely secure.
10. Changes
This policy may be updated following legal, technical or service changes. The current version and date will be published on this page.