Privacy policy

The purpose of this data protection information is to inform you about the processing of your personal data when visiting and using this website and with reference to our marketing measures that we use on this website, as well as on third party websites and social networks, in accordance with the provisions of Article 13 of the General Data Protection Regulation (hereinafter referred to as “GDPR”). 

This data protection information is based on the following data protection terms, which we have defined for your ease of understanding: 

1. The GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC). 

2. A recipient is a natural or legal person, authority, institution or other body to whom personal data are disclosed, whether it is a third party. However, authorities which, within the framework of a specific investigation mandate, may receive personal data under Union or Member State law shall not be considered as recipients; the processing of such data by such authorities is carried out in accordance with the applicable data protection directives depending on the purposes of the processing. 

3. Personal data is any information relating to an identified or identifiable natural person, i.e. the data subject. An identifiable natural person is one who can be identified directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data can be, for example, name, contact details, user behavior or bank details. 

4. The controller is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of the processing of personal data. Where the purposes and means of such processing are laid down by the law of the Union or its Member States, the controller or the specific criteria for its designation may be established in accordance with the law of the Union or its Member States. 

5. Processing means any operation or set of operations, whether or not by automatic means, which is performed upon personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transfer, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. The processing may consist, for example, of the collection and use of your order data for the sale of tickets. 

Below you will find: 

A. PRIVACY POLICY ENTRADAS EVENTIM SAU (EVENTIM.Light) 

1. Basic information 

2. Additional information 

3. Cookie Policy 

B. PRIVACY POLICY OF THE PROMOTER OF THE EVENT 

A. PRIVACY POLICY ENTRADAS EVENTIM SAU (EVENTIM.Light)

1. BASIC INFORMATION 

1.1. Data Controller 

ENTRADAS EVENTIM, S.A.U., with registered office at calle Serrano Anguita 8; 28004, Madrid. You can contact us through the form available here. 

1.2. DPO 

If you wish to contact our Data Protection Officer (DPO): you can do so via the following e-mail address:  dpo@eventim.es, as well as at the postal address indicated. 

We are joint controllers of the processing of personal data in connection with the marketing activities that we carry out on our websites, third-party websites and social networks with the support of Edge Entertainment Digital GmbH, as specified in detail below. 

1.3. Data processed 

Name and surname, postal address, email address, telephone number, banking information, IP address and cookies. Information obtained through cookies or similar technologies relating to connection, use or browsing of the EVENTIM.Light website is also processed. 

1.4. Purposes of processing and bases of legitimacy 

i. Manage web services (ticket sales and responses to queries submitted through each form) - Performance of the contractual relationship. 

ii. Sending of notifications related to the service - Execution of the contractual relationship. 

iii. IT security (identification and defense against threats such as bots or DDoS) - Legitimate interest and compliance with legal obligations. 

iv. Fraud prevention - Legitimate interest and compliance with legal obligations. 

v. Advertising actions in the form of remarketing, display advertising and ads on social networks (Legitimate interest or consent, depending on whether you are a customer or not, but have expressly consented). 

vi. Sending of commercial communications - Legitimate interest or consent, in case you are not a customer, and you have requested it. 

vii. Elaboration of a commercial profile (profiling of your data) - Consent. 

1.5. Recipients of the information 

Promoters and organizers of events, service providers, suppliers, law enforcement agencies, as appropriate. We may also share information about the use of the website with our advertising partners as reported in the “Cookies” section. 

1.6. Rights of the interested parties

You can exercise the rights recognized in the current legislation on data protection by sending a written communication to the Data Controller at the postal address in calle Serrano Anguita 8; 28004 Madrid, as well as through the form available here. You can also exercise these rights by sending us an e-mail to the following address dpo@eventim.es.

1.7. Cookie Usage

We use our own and third party cookies and pixels for analytical purposes and to be able to offer you advertising related to your preferences, as detailed in the "Cookies" section.

2. ADDITIONAL INFORMATION

2.1. Data Controller:

Contact details of the Data Controller: ENTRADAS EVENTIM, S.A.U.; calle Serrano Anguita 8; 28004 de Madrid, as well as through the form available here.

Contact details of the Data Protection Delegate : you can contact him/her through the following e-mail address dpo@eventim.es , as well as at our postal address located at calle Serrano Anguita 8, 28004 Madrid.

2.2. Co-responsibility

When the User purchases a ticket for an event through the EVENTIM.Light website, a contractual relationship is established, on the one hand, between the user and ENTRADAS EVENTIM SAU for the purchase of the ticket and, on the other hand, a contractual relationship between the user and the organizer of the event for the provision and attendance of the event.

In the context of its own contractual relationship with users, the ORGANIZER will treat, independently of ENTRADAS EVENTIM SAU, as Data Controller, your personal data as indicated in its own privacy policy. The ORGANIZER shall be solely responsible for the content of that Privacy Policy.

2.3. Data

For the management of web services, identification data (name, surname, postal address, email address, IP address and telephone number), data relating to payment methods and banking information and, where applicable, the history of transactions carried out are processed. The data that we request as mandatory are necessary in order to provide the service you request and consent to at any given time and to perform the contract, or to comply with legal obligations. Otherwise, the contract could not be performed or entered into, or EVENTIM.Light could not comply with its legal obligations. 

We also use cookies and similar technologies that give us information about the connection data, use and navigation that is performed from your device, browser or protocol, as detailed in the Cookies Section. 

On the other hand, in those cases in which you authorize the profiling of your data to send commercial communications tailored to your interests, we will process the data you have provided, allowing us to infer your commercial profile and learn more about the events that may be of interest to you. 

The obtaining of this profile will be carried out according to objective criteria that allow us to infer your interests. In no case will the conclusions reached imply the assessment of behaviors, lifestyles, habits and customs, etc. by EVENTIM.Light, so no conclusions of any kind will be drawn in this regard. 

2.4. Purpose

For what purpose do we process your data, based on what legitimacy and for how long? It will depend on when you provide it to us, but we will give you all the information below: 

i. In the purchase process - Complete management of the ticket sales process, including (i) sending information about incidents at the event; (ii) welcome email; (iii) if a purchase process is left incomplete, we will also inform you of this; (iv) we will use your email address to send you commercial communications by electronic means, but you will always have the option to tell us that you do not wish to receive them; (v) if you so request, those communications will be tailored to your interests, for which we will create a commercial profile that allows us to better understand what interests you, so that we only send you information that we believe may genuinely be of interest to you; (vi) preventing potential fraud or cyberattacks against you or EVENTIM.Light during the purchase process. Fraud prevention will be carried out according to objective criteria that allow certain situations or conduct constituting fraud or a cyberattack to be inferred; under no circumstances will the conclusions reached involve an assessment of behaviours, lifestyles, habits or customs, etc., and no conclusions of this kind will therefore be drawn; (vii) invoicing; and (viii) experiential emails to buyers with recommendations prior to the event. The legal basis for this processing depends on the relevant stage of the purchase process: (i) sending you information about incidents at the event: performance of the contract; (ii) welcome email: performance of the contract; (iii) if a purchase process is left incomplete: legitimate interest in facilitating completion of the purchase; (iv) sending you commercial communications by electronic means: legitimate interest in informing you about our products or services, while providing you with the option to object and configure the customer area accordingly; (v) profiling: explicit consent; (vi) fraud or cyberattack prevention: legitimate interest in ensuring the proper marketing of events, avoiding harm to our users and EVENTIM.Light, as well as compliance with legal obligations; (vii) invoicing: performance of the contract and compliance with legal obligations; and (viii) communications with recommendations prior to the event: our legitimate interest in improving the user experience. We store your data for as long as necessary for the purposes described above. When they are no longer necessary for those purposes, we will store them for the period during which any claims may be brought, depending on the applicable statutory limitation period (for example, 5 years). In addition, we collect and retain your data for as long as we are required to do so (for example, for record-keeping, tax purposes, anti-money laundering regulations, etc.). The maximum retention period will be 10 years. 

ii. Contact form - the purpose of the processing is (i) to be able to answer your query (ii) Customer service (iii) To answer a request to exercise a data protection right. For this purpose, the basis of legitimacy will be (i) Consent of the data subject (ii) Legitimate interest of defense in case of a claim (iii) Compliance with legal obligations. Depending on the type of query, we review and delete queries already answered and will endeavor to delete them periodically. In other cases, we retain queries for as long as a claim may arise (e.g., 5 years). 

iii. Connection, usage and navigation (cookies) - When you visit our websites or as part of marketing measures on third party websites and social networks, we use information regarding the connection, usage and navigation performed from your device, browser or protocol. Such information is collected through Cookies or similar technologies for the following purposes: (i) for technical reasons (ii) for functional purposes (iii) for marketing, advertising and social media advertising purposes. We conduct marketing campaigns using tags (pixels) and cookies from our retargeting providers. When you visit our websites, tags and cookies are set that are associated with the content you have accessed. This allows us to document whether you have accessed our website through our advertising campaigns. In addition, we play advertising banners and display ads to users of Meta platforms (e.g. Facebook and Instagram) who have a similar profile to our customers and website visitors. If you have an account on these social networks and agree to the display of advertisements through your account settings on those social networks, you will be shown recommendations about our products and services on those social networks. The recommendations are generated based on your interests (e.g. “likes” of artists) stored in your public profile on these social networks. For this, we process your public profile data. In connection with the use of Google Ads and Meta Platforms, Inc. (e.g., Facebook and Instagram), the data we process is your IP address, your device ID/cookie, the activity on your page/wall, the pages you visit or the interactions made with advertising, services and products displayed on those social networks. In these cases of use of Google Ads and Meta Platforms Inc. your personal data is transferred to the U.S. This data transfer takes place based on EU standard contractual clauses. This ensures adequate protection of your personal data. 

For further details on data processing by retargeting providers, please refer to the relevant data protection information: 

Google:

- General Information: https://policies.google.com/privacy?hl=es&fg=1

- Explanation on the use of third-party data: https://policies.google.com/technologies/partner-sites

Meta: https://www.facebook.com/privacy/policy/?entry_point=about_fb

Instagram: https://help.instagram.com/155833707900388

In any case, this information does not allow us to identify the user by name and is not linked to your personal data, so it is not possible to draw conclusions about the person. However, the information collected through cookies and similar technologies may include online identifiers, information about the device, browsing activity and interactions carried out on our websites, and therefore your consent is requested for the installation of cookies (see more information in the 'Cookies' section). 

The legal basis for the processing of this information is the consent of the user, except for technical cookies based on the execution of a contract. 

In these cases, your personal data will be transferred to the United States. This data transfer takes place based on EU standard contractual clauses. This ensures adequate protection of your personal data. 

2.5. Revocation of consent

In the event that the legal basis for the processing of your data is your consent, you can revoke your consent to the processing of your data at any time. In case you want to unsubscribe from our commercial communications you can do so by logging in as a user or by contacting us at our postal address (C/Serrano Anguita 8, 28004, Madrid), email address (dpo@eventim.es) or through the form you can find here .

2.6. Legitimation

The legal basis for processing your data varies depending on when we collect your personal data.

2.7. Addressees

Your personal data may be transferred to technical and IT service providers who provide and maintain the platforms, databases and tools for providing our services (e.g. our website and sending newsletters), analyzing user behavior on our websites, conducting marketing campaigns and processing your personal data on our behalf as part of the performance of the contract we have with you. In this case the purpose of the processing is our legitimate interest in improving and promoting our services and ensuring IT and network security or, where applicable, if you are not a customer, that you have given us your consent. 

We also transfer your personal data to other suppliers and service providers such as, for example, payment gateways and financial institutions, venue access control companies, courier companies, customer service providers, marketing and advertising service providers and partners to fulfill our contractual obligations to you. 

If you visit the websites of ENTRADAS EVENTIM SAU and/or register to use our services, whenever possible, we will also transmit your personal data to Edge Entertainment Digital GmbH for advertising purposes if you give us your explicit consent. 

At times, law enforcement agencies request transaction and user information for investigative purposes, or judicial or administrative authorities may require it in inspection processes. 

2.8. Rights

You can exercise the rights recognized under the current data protection legislation (access, rectification, erasure, objection, restriction of processing, and portability, as applicable) by sending a written request to the Data Controller at the postal address Calle Serrano Anguita 8, 28004 Madrid, by email to dpo@eventim.es, or through the form available here. 

Where there are reasonable doubts concerning your identity, we may request the additional information necessary to confirm your identity before responding to the request. 

Additionally, you have the right to file a complaint with the Spanish Data Protection Agency: https://www.aepd.es/agencia/contacto.html

2.9. Third party data

If you provide us with personal data of third parties, for example, in the context of customer service queries, you guarantee that you have obtained the consent of the owners of the personal data for the communication of their data to EVENTIM.Light, as well as having informed them about the purposes and the way in which we need to process their personal data. If you provide us with such data in the field of Social Networks remember not to disclose personal data of third parties in public messages, always do it by private message.

3. COOKIES POLICY

This EVENTIM.Light website uses its own and third party cookies for analytical purposes and to be able to offer you, based on your browsing profile, advertising related to your preferences. We also share information about the use of the website with our advertising partners.

In EVENTIM.Light we have implemented a tool that allows you to modify the default settings and choose what type of cookies you want to enable / disable. Therefore, when you access our website you can accept the installation of cookies or you can change the default settings. Please note that, depending on the category of cookies you disable, it is possible that some services or functionalities that we offer may be affected.

You can also, at any time, revoke your consent to the use of cookies by configuring your own permissions. If you wish to change the settings to enable/disable cookies, you can do so in the Privacy Preference Center.

What are cookies?

Cookies are text files containing small amounts of information related to your user, preferences or device that are downloaded to your computer when you access certain websites, such as this one. The cookies are then sent back to the originating website (first-party cookies) or to other websites (third-party cookies). The information generally does not identify you directly and can provide you with a more personalised web experience.

Cookies allow these websites, among other things, the proper functioning of the website, personalize your user experience, improve the functionality of the website, store and retrieve information about your browsing habits or those of your computer, show you advertising based on your browsing profile and, in certain cases, recognize your device.

The term "cookies" can include other similar technologies such as "pixels". A pixel is a piece of code that is placed on the website to activate a cookie that provides information about the visit.

What types of cookies does this website use?

Cookies on this website may be used for technical, functional or advertising purposes.

Technical cookies:These cookies are necessary for the website to function properly and cannot be disabled from our systems. Therefore, they are mandatory. They are usually only set in response to your actions when you request services, such as setting your privacy preferences, logging in or completing forms. You can set your browser to block or alert you to these cookies, but some areas of the site will not function. These cookies do not store any personally identifiable information.

The technical cookies used are listed below:

- Consent Manager: A tool for regulatory compliance and cookie consent management. With this tool, you can configure your cookies and enable/disable them by category.

- Google Tag Manager: A cookie container that allows you to manage tags and quickly update tracking codes on the website. Without it, tracking cookies would not function, making it an essential or technical cookie.

Functional cookies:This category includes personalization and analytical cookies. These cookies allow us to improve the functionality of the website, improve your user experience, adapt content and advertisements to your browsing profile, capture and remember your user preferences, enable social interactions, analyse traffic and browsing habits, as well as perform statistics. They may be set by our company or by external providers whose services we have added to our pages. If you do not allow the use of these cookies, it is possible that some of these services may not work properly (e.g. shopping baskets, access to secure areas, online billing).

The functional cookies used are listed below:

- Google Analytics: This is a tool owned by Google Inc. that helps us measure how users interact with the website's content. When you browse our website, Google Analytics provides us with JavaScript tags (libraries) to record information about the pages you have viewed, such as the page URL. These libraries use HTTP cookies to "remember" your actions on the pages or your interactions with our website. You can find more information about the use of cookies in Google Analytics here.

- Mixpanel: Product analytics tool that allows us to understand user behaviour, replay pseudonymised sessions, conduct A/B tests and feature experiments, connect data with our internal systems, and analyse metrics relating to product performance. For this purpose, technical data about the device and browser, interactions with the website, session flows, derived statistics and pseudonymised identifiers may be processed. This processing is carried out on the basis of your consent. As Mixpanel Inc. is established in the United States, data may be transferred to that country, subject to the safeguards provided for under data protection legislation. 

Marketing Cookies: These cookies may be set through our site by our advertising partners. They may be used by these companies to create a profile of your interests and show you relevant ads on other sites. They do not directly store personal information but are based on the unique identification of your browser and internet device. If you do not allow these cookies, you will see less targeted advertising.

In some cases, the ticket sales process is part of a website owned by: (1) The company that owns a venue, (2) The promoter, organizer, or distributor of an event, or (3) An authorized distributor by entradas.com for ticket sales. In these cases, whether the ticket sale is integrated into the navigation or opens in a new window, certain pixels may be used to share information with the website owner. The purpose of this is to optimize their marketing investments for ticket sales.

- Google: Tracks the pages visited by the user and purchases made through the tool. Includes YouTube as a company owned by Google LLC.

- Google Ads: An advertising platform owned by Google Ireland Ltd. ("Google") that allows advertisers to create, manage, and optimize ad campaigns on Google and its partner networks. Its main goal is to help businesses attract traffic, generate conversions, and increase online visibility through paid ads. For more information, you can check [here].

- Facebook and Instagram (META): Tracks the pages visited by the user and purchases made through the tool.

Recipients and international transfer of personal data

Personal data collected through the use of first-party cookies will not be transferred by ENTRADAS EVENTIM SAU outside the European Union, nor will they be disclosed to third parties except to public authorities and bodies where required to comply with a legal obligation. Some of our providers of cookies and similar technologies may process data outside the European Economic Area. Where international data transfers take place, the safeguards provided for under the GDPR will apply. For the identified third-party cookies, you can find additional information about the processing of your data in the respective providers' privacy policies. 

In any event, where applicable, international transfers will be carried out on the basis of an adequacy decision, such as the EU-U.S. Data Privacy Framework, or by means of other appropriate safeguards in accordance with the GDPR. 

What is the cookie retention period?

Some cookies are only stored during a session (session cookies), while others remain stored for a specific period or indefinitely (persistent cookies). 

The retention period will depend on the purpose of each cookie and on the settings established by EVENTIM.Light or the relevant provider. If you wish to disable cookies or withdraw your consent to their use, you can do so through your browser as explained in the next section. 

How can I disable cookies from my browser?

Users can exercise their rights of access, rectification, erasure, portability, restriction, or objection, as well as withdraw the consent given, by submitting a written request to our DPO at dpo@eventim.es.

Additionally, with the Cookie Settings tool, you have the option to accept or reject cookies that require your consent and to withdraw your consent for optional cookies at any time. The withdrawal of consent will not affect the lawfulness of processing based on prior consent before its withdrawal.

You can also block and delete cookies by modifying your internet browser settings. Most browsers allow you to reject or accept all cookies or accept only certain types of cookies. The process for managing and deleting cookies can be found in the “settings” function of your browser. If you choose to limit cookies generally, you may not be able to use all the interactive features of our website.

Here are links to manage cookies in the most used browsers:

- For more information on Internet Explorer, click aquí .

- For more information on Google Chrome, click aquí .

- For more information on Opera, click aquí .

- For more information on Mozilla Firefox, click aquí .

- For more information on Safari, click aquí .

B. PRIVACY POLICY OF THE PROMOTER OF THE EVENT

1. Data Controller

The entity responsible for processing your personal data is Montón de Trigo SL (hereinafter, the "Promoter Entity"), with its registered address at Alburquerque 14, 28010 Madrid and VAT ID number B28753390.

2. Data processed

For the management of web services, identification data (name, surname, postal address, email address and telephone number), data relating to means of payment and the history of purchases made are processed. The data that we ask you for as compulsory is necessary to provide you with the service you always request and to execute the contract, or to comply with legal obligations.

The Promoter Entity analyses and documents visits to the online shop, e.g. by identifying the number of visitors to the online shop , their browsing patterns, which events and parts of the online shop interest them, the origin of the online shop visitors and, if they purchase a ticket, their order and shopping cart data.

For this purpose, the Promoter Entity processes the following personal data:

- IP address

- UU-ID

- WEB-ID

- Device fingerprints

- Browser fingerprints

- Cookies (see cookie information)

- Geo IP-location

All fields requested in the collection forms are mandatory. Optional fields are marked as such.

In those events where it is necessary to collect data from minors under 14 years of age, we understand that the person providing the data is the holder of parental authority or legal guardian, directly responsible for providing the information and consent on behalf of the minor, and also has the authorization of the other holder.

3. Purpose and legitimacy

The Promoter Entity will process your personal data for the following purposes and on the legal bases indicated below: 

· Management of the sale of tickets for the event on the basis of the performance of the contract. 

· Event management, including access control to the event, resolving any incident, relocation of seats, event cancellation, etc. on the basis of the performance of the contract. 

· Sending notifications related to the event, such as schedule information or updates on the basis of the performance of the contract and, where they are not necessary for the provision of the service, on the basis of your consent. 

· Sending commercial communications about events, products or services of the Promoter Entity that are similar to those contracted, on the basis of the Promoter Entity's legitimate interest and in accordance with applicable law. In all other cases, commercial communications will be sent on the basis of your consent. You may object to receiving commercial communications or withdraw the consent given at any time, as applicable, through the mechanisms provided in each communication. 

4. Recipients

The buyers' identification data may be provided to companies involved in the management of the event, based on the execution of the contract.

In case of request, personal data of transactions and users may be shared with the State Security Forces and Corps for investigation purposes, or with judicial or administrative authorities in inspection processes.

Personal data are also provided to service providers of the Promoting Entity, who will process them in the name and on behalf of the Promoting Entity, in the context of contracting or subcontracting services such as, for example, IT or technology service providers, access control companies, or courier companies.

5. Conservation period

The Promoter Entity will keep your personal data for the period necessary to comply with the purposes stated, and even afterwards, duly blocked, for the period of limitation of any possible liabilities derived.

6. Cookies and Analytics

The Promoter Entity uses Google Analytics, a web analytics service provided by Google, to analyse the use of the online shop and obtain statistics that help improve its services. For this purpose, Google Analytics may process information about the device, browsing and the user's interactions with the online shop. 

Google Analytics will only be used where you have given your consent. You may withdraw that consent at any time through the cookie settings available on the website. 

More information about the terms of use and data protection of Google can be found at https://policies.google.com/privacy?hl=en  

Due to the use of Google Analytics, your personal data may, in certain cases, be transferred to the United States. Where applicable, such international transfers will be carried out on the basis of an adequacy decision of the European Commission, including the EU-U.S. Data Privacy Framework, or by means of other appropriate safeguards in accordance with the GDPR. 

7. Rights

You can exercise the rights recognized in current legislation on data protection (access, rectification, deletion, opposition, limitation of processing and portability, as appropriate), by sending a written communication to the Data Controller to the email address facturacion.clamores@gmail.com, proving your identity.

You can also file a complaint with the Spanish Data Protection.

Last update: 19/08/2026