At SUMMER OF MUSIC FESTIVAL CASTELLO AIE, we value your personal information and, in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), we are committed to protecting your privacy. This Privacy Policy explains how we handle the personal information we collect when you use our website www.somfestival.es.

1. Data Controller

The data controller for your personal data is SUMMER OF MUSIC FESTIVAL CASTELLO AIE, a company with Tax Identification Number (NIF) V72767072 and registered in the Commercial Registry of Castellón, Volume 1803, Book, Section, Folio 95, Sheet CS-42658, Entry 1a. The registered address of the company is located at c/Obispo Salinas, 71, 12003 Castelló de la Plana, Castelló.

If you have any questions or concerns about how we handle your personal information, you can contact us via email at privacidad@somfestival.es or by calling our contact number 964184077.

2. Purposes of Data Processing

The main purposes of data processing on this online platform are advertising and selling tickets to the SUMMER OF MUSIC FESTIVAL CASTELLÓ, as well as providing access to related information about the festival’s activities and products.

The primary purpose of data processing is to provide the service, for which we need to:

1. Manage and process ticket sales and possible add-ons.
2. Provide up-to-date information about festival activities and available products.
3. Conduct analysis and statistics on website usage to improve the user experience.

We also use your data for promotional purposes if you consent to it at the time of data collection, to send you electronic communications with information about other concerts or similar events.

3. Legitimacy for Data Processing

The legal basis for processing your personal data is the need to use your data to provide our services, in accordance with the terms and conditions set forth on our platform and in your ticket purchase agreement. By providing us with your personal data, you agree that we may use them to manage your purchase and provide you with all the information related to the event for which you have purchased tickets. Without this data, we would not be able to provide our ticket sales and add-on services or manage the related information.

Regarding the sending of electronic communications, we send them based on your consent to keep you informed about our updates and upcoming events. In each communication you receive, we will provide you with the option to object to the processing for promotional purposes.

4. Collected Data and Duration of Processing

We collect and store your information when you:

• Create an account.
• Purchase tickets or have someone purchase them for you.
• Contact us.

We only process identifying data and do not process any special categories of data as defined in Article 9 of the GDPR.

Specifically, the information we collect includes: name, last name, email address, phone number, ID number, address, gender, and date of birth.

In cases where we collect personal information from minors, we always request parental consent, and we will only collect that information for the specified purposes stated at the time of collection.

As a general rule, all your data will be automatically deleted from all the purposes for which you have consented to the processing, five years after their last use.

5. Data of Minors

In compliance with current legislation, only individuals aged 14 or older can provide lawful consent for the processing of their personal data. If the individual is under 14 years old, parental consent or consent from legal guardians is required for the processing to be considered lawful, authorized, and valid.

6. Recipients of Personal Data

Once you access our website and/or app, register, and/or purchase tickets, you acknowledge and agree that SUMMER OF MUSIC FESTIVAL CASTELLÓ, AIE may disclose your data:

• Internally within our organization.
• To the concert/event/activity organizer and service providers who require the information for the provision of their services. This may include access control companies, security personnel, venue staff, the artist’s team (for Meet & Greet control), and other third parties associated with the service provided.
• We may share your personal information with service providers who assist us in delivering our services and improving our website. These service providers may have access to your personal information to perform services on our behalf, such as payment processing, sending commercial communications, or conducting data analysis. Our service providers are required to comply with applicable data protection laws and regulations, and they only use your personal information in accordance with our instructions and for the specific purposes for which they were engaged. Some of our service providers may be located outside the European Economic Area (EEA), which may involve the international transfer of data. In such cases, we ensure that appropriate security measures are in place to protect your personal data and that compliance with applicable data protection laws and regulations is maintained.
• To government agencies or other authorized entities when legally required.
• To any successor of all or part of our business.

7. Security

We are committed to implementing the necessary technical and organizational measures, appropriate to the level of risk associated with the collected data, to ensure the security of personal data and prevent the accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed.

We will promptly notify the user in the event of any security breach that may pose a high risk to the rights and freedoms of individuals.

In any case, the data will be processed by the Data Controller, who is committed to ensuring that confidentiality is respected by its employees, associates, and any person to whom the information is made accessible.

8. Rights

You have the right to:

• Access the information we hold about you.
• Opt-in or opt-out of receiving our marketing communications.
• Access your personal data.
• Request its rectification.
• Request its erasure.
• Object to its processing.
• Request the restriction of its processing.
• Data portability.

If you have any questions or concerns or wish to exercise any of your rights, you can contact us by email at privacidad@somfestival.es or by calling our contact number 964184077.

9. Contact Us

You can exercise your rights by contacting us directly and free of charge by writing to us at privacidad@somfestival.es or by calling our contact number 964184077. Your request should include the date, your full name, a specific description of your request, and your mailing address for notifications. In order to verify your identity and address any reasonable doubts, we may request a copy of your identification document.

If you believe that we have not properly addressed your request, you have the right to lodge a complaint with the supervisory authority, which is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD). You can contact the AEPD through its website (www.aepd.es) or other means provided by the agency.