1. Controller (Responsable del tratamiento)
Camino Group – Agencia de Comunicación (“we”). Editor-in-chief: Friederike Diestel (MA). Address: Paseo Vara de Rey 4, Telebox 113, 07800 Ibiza, Spain. NIF: X5236849W (VAT: ESX5236849W). Email: rica@ibiza-bible.com. Telephone: +34 675 407 494.
No Data Protection Officer has been appointed.
2. What we do with your data
We process personal data for the purposes below. For each we state the data, purpose, legal basis, recipients/processors and retention.
a) Newsletter and free magazine
- Data: name, email; record of your consent (date, time, technical data).
- Purpose: to send you our newsletter, our free magazine and related offers.
- Legal basis: your consent — Art. 6(1)(a) GDPR. The opt-in is a clear affirmative act (no pre-ticked box).
- Processor: KlickTipp (Klick-Tipp Limited), our email-marketing provider, which processes the data on EU/German servers under an Art. 28 data processing agreement.
- Retention: until you unsubscribe/withdraw consent; afterwards only a minimal record of the withdrawal to document compliance.
b) Ticket purchases
- Data: name, email, phone, ticket/order and transaction data, billing data.
- Purpose: to process and deliver your ticket and event, and to issue invoices.
- Legal basis: performance of the contract — Art. 6(1)(b); legal obligation (accounting/tax) — Art. 6(1)(c).
- Recipients/processors: the ticketing platform fourvenues and its payment provider. We do not store card details.
- Retention: the periods required by Spanish commercial and tax law (approx. 4–6 years).
- Source of data (Art. 14): where we receive buyer data, it is provided by the ticketing platform fourvenues.
c) Contact and advertising/partnership enquiries
- Data: name, email, message; for advertisers/partners, also business contact and billing data.
- Purpose: to answer your enquiry and to manage advertising/partnership orders and invoicing.
- Legal basis: your consent, pre-contractual steps and performance of a contract, and our legitimate interest in replying — Art. 6(1)(a)/(b)/(f); legal obligation for invoicing — Art. 6(1)(c).
- Processor: our email-delivery service (configured via WP Mail SMTP).
- Retention: for the duration of the business relationship and the periods required by accounting/tax law; contact-only enquiries are kept only as long as needed to handle them.
d) Website operation and security
- Data: server logs, IP address, technical data.
- Purpose: to provide, secure and maintain the Website.
- Legal basis: our legitimate interest — Art. 6(1)(f).
- Processor: our hosting provider, Hetzner Online GmbH (Germany).
- Retention: limited log-retention periods.
e) Spam and abuse protection on our forms
- Data: IP address and interaction/technical data collected when you use our newsletter or contact forms.
- Purpose: to protect our forms against spam and automated (bot) abuse.
- Legal basis: our legitimate interest in the security and integrity of our forms — Art. 6(1)(f).
- Recipient/processor: Google reCAPTCHA (Google Ireland Limited, with Google LLC, USA). Its use is subject to the Google Privacy Policy and Terms of Service.
- Retention: as defined by Google; see Google’s privacy policy.
3. Recipients and processors
We share data only with processors acting on our behalf under Art. 28 agreements: KlickTipp (Klick-Tipp Limited) for email marketing, the ticketing platform fourvenues and its payment provider, Hetzner Online GmbH for hosting, our email-delivery service, and Google (reCAPTCHA, to protect our forms from spam and bots). We do not sell, rent or transfer your personal data to third parties for their own purposes without your permission.
4. International transfers
Our newsletter provider (KlickTipp) processes data on EU servers. Where any processor or sub-processor transfers data outside the EEA, this is safeguarded by an adequacy decision (e.g. the EU–US Data Privacy Framework) or Standard Contractual Clauses (Art. 46 GDPR). Google (reCAPTCHA) may process data on servers in the USA under the EU–US Data Privacy Framework. You can request a copy of the safeguards at rica@ibiza-bible.com.
5. Your rights
You have the right to access, rectify, erase, restrict and object to processing, and to data portability. You may withdraw consent at any time (without affecting prior processing) via the unsubscribe link or by writing to rica@ibiza-bible.com. To exercise your rights, contact rica@ibiza-bible.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.
6. Is providing data mandatory?
Providing certain data is necessary to buy a ticket or receive the newsletter; without it we cannot provide those services.
7. Automated decisions / profiling
We do not take decisions producing legal or similarly significant effects solely by automated means. We tag and segment newsletter contacts to send more relevant content; this has no legal effect for you.
8. Security
We apply appropriate technical and organisational measures to protect your data (Art. 32 GDPR).
9. Cookies
See our Cookie Policy.
10. Changes
We may update this policy; the version in force is the one published here.