Privacy Policy

In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and with Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), we inform you that:

DATA CONTROLLER

Controller: LA CUEVA DE LOLA MADRID, S.L.
Tax ID (CIF): B88532072
Registered office: Calle Mancebos, 2 — 28005 Madrid (Spain)
Email: info@lacuevadelola.com
Telephone: +34 913 640 726
Data Protection Officer: not appointed, as the circumstances set out in article 37 GDPR do not apply.

La Cueva de Lola Madrid, S.L. states that it will process data lawfully, fairly, transparently, adequately, relevantly, in a limited manner, accurately and keeping it up to date. It therefore undertakes to take all reasonable steps to have data erased or rectified without delay where it is inaccurate.

PROCESSING ACTIVITIES WE CARRY OUT

Booking and purchase of tickets

Data processed: first name and surname, email address, telephone number, number of guests, date and time of the performance, option booked, payment details (handled by the gateway, not stored by us) and any allergies or intolerances that the user voluntarily reports.
Purpose: to manage the booking, issue the ticket, provide the service booked, deal with incidents and process changes and refunds.
Legal basis: performance of a contract (art. 6.1.b GDPR). For health data relating to allergies, the explicit consent of the data subject (art. 9.2.a GDPR).
Retention: for the duration of the contractual relationship and, thereafter, for the applicable statutory limitation periods: 6 years (art. 30 of the Spanish Commercial Code) and 4 years for tax matters (art. 66 of the General Tax Act).

Enquiries and customer service

Data processed: name, email address, telephone number and the content of the enquiry.
Purpose: to deal with your enquiries and send you related information that may be of interest to you.
Legal basis: consent of the data subject (art. 6.1.a GDPR) or the taking of pre-contractual steps at the data subject's request (art. 6.1.b GDPR).
Retention: one year from the last communication, unless the enquiry leads to a contractual relationship.

Web analytics and advertising

Data processed: cookie identifiers, IP address, pages visited, source of the visit and interactions with advertisements.
Purpose: to measure use of the website and to evaluate and personalise advertising campaigns.
Legal basis: consent given through the cookie banner (art. 6.1.a GDPR and art. 22.2 LSSI).
Retention: as per the periods indicated in the Cookie Policy.

You can withdraw your consent at any time from the "Cookie settings" link in the footer.

RECIPIENTS OF THE DATA

We disclose data to the following providers, which act as processors and with which the contract required by article 28 GDPR has been signed:

Wix.com Ltd. — Website hosting and forms. Israel (European Commission adequacy decision); infrastructure in the USA covered by Standard Contractual Clauses.
FareHarbor Holdings, Inc. — Booking engine and ticket sales. USA (Standard Contractual Clauses).
Google Ireland Ltd. — Web analytics and advertising. Ireland (EU); transfers to the USA covered by the EU-U.S. Data Privacy Framework.
CookieYes Ltd. — Cookie consent management. United Kingdom (European Commission adequacy decision).
Payment institution / gateway — Collection of ticket payments. European Union.

In addition, data may be disclosed to public authorities, law enforcement bodies and the courts where there is a legal obligation to do so.

No automated decisions producing legal effects on the data subject are taken, nor is profiling with significant effects carried out.

INTERNATIONAL TRANSFERS

Some of the providers indicated process data outside the European Economic Area. Such transfers are covered by European Commission adequacy decisions, by the EU-U.S. Data Privacy Framework or by Standard Contractual Clauses, together with any applicable supplementary measures. You may request a copy of these safeguards by writing to info@lacuevadelola.com.

YOUR RIGHTS

In accordance with the rights conferred on you by the data protection legislation in force, you may exercise the following at any time:

Access — to find out what data of yours we process.
Rectification — to correct inaccurate or incomplete data.
Erasure — to request its deletion when it is no longer necessary.
Objection — to object to processing based on legitimate interest.
Restriction of processing — to request that we suspend processing in the cases provided for.
Portability — to receive your data in a structured, commonly used format.
Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.

How to exercise them: send your request to info@lacuevadelola.com or to the postal address Calle Mancebos, 2 — 28005 Madrid, stating the right you are exercising and enclosing a copy of your national ID card or equivalent identity document. We will reply within a maximum of one month.

Complaint to the supervisory authority: if you consider that the processing does not comply with the regulations, you may contact the Spanish Data Protection Agency (C/ Jorge Juan, 6 — 28001 Madrid — www.aepd.es) to lodge any complaint you consider appropriate.

ACCURACY OF DATA AND SECURITY

The user warrants that the data provided is truthful and undertakes to report any change. Until you tell us otherwise, we will understand that your data has not been modified. Third-party data provided by the user must have been collected with the prior consent of those third parties.

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with article 32 GDPR.

MINORS

The booking services on this site are not intended for children under 14. Bookings that include minors must be made by their parent or legal guardian.

AMENDMENTS

This policy may be updated to reflect regulatory changes or changes in the services provided. The version in force will always be the one published on this page, showing its update date.

By submitting any data collection form, the user accepts this Privacy Policy of LA CUEVA DE LOLA MADRID, S.L.

In the event of any discrepancy between the different language versions of this privacy policy, the Spanish version shall prevail.