Privacy policy
How personal data is handled when you buy a ticket or contact NAVE 12, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.
Data controller
Nave Doce Producciones S.L., tax ID B-00000000, registered at Calle del Torno, 12, 28021 Madrid.
Contact for data protection matters: hola@nave12.example.
What data is processed, and why
Ticket purchase: name, surname, email address and any data requested by the checkout form. Purpose: managing the sale, issuing the ticket and granting entry to the venue.
Entry control: scanning the ticket QR code at the door, to verify validity and prevent duplicates.
Contact: the data you provide when you email us, in order to answer your query.
This website collects no data by itself: it has no forms, uses no cookies and includes no analytics tools.
Legal basis
Performance of a contract (art. 6.1.b GDPR), for the ticket purchase and entry to the event.
Compliance with legal obligations (art. 6.1.c GDPR), in tax and accounting matters.
Legitimate interest (art. 6.1.f GDPR), for venue security and prevention of entry fraud.
Consent (art. 6.1.a GDPR), only if you voluntarily subscribe to marketing communications. You may withdraw it at any time.
Who else accesses the data
The ticketing platform and technical hosting provider, acting as data processor under a contract signed in accordance with article 28 GDPR.
The payment provider, which processes card data as an independent controller. The site owner never stores card data.
The email provider, for delivering the ticket and purchase-related communications.
Public authorities and law enforcement, where legally required.
No other disclosures are made, and no international transfers outside the European Economic Area take place without adequate safeguards.
How long data is kept
Purchase data is kept for the duration of the relationship and then blocked for the applicable limitation periods: six years for accounting and commercial purposes, four for tax purposes.
Entry data is kept only as long as needed to evidence admission to the event.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hola@nave12.example, stating the right you are exercising and enclosing a copy of a document proving your identity.
If you believe the processing does not comply with the regulation, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
Appropriate technical and organisational measures are applied to protect the data, including encrypted transmission over HTTPS throughout the purchase process.