Privacy Policy
1. Data Controller
Owner: [NOMBRE_TITULAR]
Tax ID (NIF): [NIF_TITULAR]
Registered address: [DIRECCION_FISCAL]
Email: proyectoinerciamusic@gmail.com
WhatsApp: +34 680 500 706
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the following information is provided regarding the processing of personal data provided by the user or generated through use of this website.
2. Personal Data Collected
This website has no registration forms, user accounts or web analytics tools.
The following personal data may be processed:
- Contact data voluntarily provided: When a user contacts us via email at proyectoinerciamusic@gmail.com or by WhatsApp (+34 680 500 706), the data provided by the user is collected, which may include name, email address, phone number and the content of the message.
- Browsing data (IP address): Cloudflare, Inc., provider of the web hosting and content delivery network (CDN) service used by this website, may record the IP address of the user's device for security purposes, protection against distributed denial of service (DDoS) attacks and anti-bot verification, pursuant to its legitimate interest and the terms of the contracted service.
3. Purposes of Processing
Personal data provided by the user is processed for the following purposes:
- Responding to enquiries sent by the user via email or WhatsApp.
- Pre-contractual management: assessing the feasibility and conditions of a potential booking of live music services for weddings or events.
- Website security: Cloudflare processes the user's IP address to ensure the availability, integrity and security of the website, detect threats and prevent unauthorised access.
4. Legal Basis for Processing
The processing of personal data is based on the following legal grounds set out in Article 6 of the GDPR:
- Art. 6(1)(b) GDPR: Processing is necessary for the performance of pre-contractual measures taken at the request of the data subject, in cases where the user requests information about the services offered with a view to a potential booking.
- Art. 6(1)(f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (Cloudflare, Inc.), in particular the legitimate interest in ensuring the security, availability and integrity of the website and in preventing fraud and cyberattacks.
5. Recipients of Data
Personal data may be disclosed to the following recipients:
- Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA): Provider of web hosting and CDN services. Cloudflare acts as a data processor pursuant to the data processing agreement (DPA) entered into with the controller, and processes data only in accordance with the controller's instructions and to ensure the security and availability of the service.
- Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA): Provider of the Gmail email service. Communications sent to the controller by email are processed through Google's servers.
No other disclosures of data to third parties are envisaged, except where required by law.
6. International Data Transfers
Both Cloudflare, Inc. and Google LLC are entities headquartered in the United States of America. Transfers of personal data to these providers are carried out with the following safeguards:
- Cloudflare, Inc.: Is covered by the EU-US Data Privacy Framework, approved by the European Commission Adequacy Decision of 10 July 2023, and has Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Article 46(2)(c) of the GDPR.
- Google LLC: Is also covered by the EU-US Data Privacy Framework and has Standard Contractual Clauses approved by the European Commission.
Further information about the applicable safeguards can be obtained by contacting the data controller via the email address provided.
7. Data Retention Periods
Personal data will be retained for the periods strictly necessary to fulfil the purposes for which they were collected:
- Contact data (enquiries and communications): Retained for as long as necessary to deal with the user's request and, where applicable, for the duration of the pre-contractual or contractual relationship. Once the relationship has ended, data will be retained for the applicable civil and commercial limitation periods (generally up to 5 years under Article 1,964 of the Spanish Civil Code).
- Security data (IP address via Cloudflare): In accordance with Cloudflare's retention policy, security logs are retained for a limited period of time, not exceeding what is necessary for the security purposes described.
8. Data Subject Rights
Users have the right to exercise, at any time and free of charge, the following rights recognised by the GDPR and the LOPDGDD:
- Right of access (Art. 15 GDPR): To obtain confirmation as to whether personal data is being processed and, if so, to access it.
- Right to rectification (Art. 16 GDPR): To request the correction of inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR): To request the deletion of personal data when, among other grounds, it is no longer necessary for the purposes for which it was collected.
- Right to object (Art. 21 GDPR): To object to the processing of personal data in certain circumstances.
- Right to restriction of processing (Art. 18 GDPR): To request that the processing of personal data be restricted in certain cases.
- Right to data portability (Art. 20 GDPR): To receive personal data in a structured, commonly used and machine-readable format, where processing is based on consent or a contract and is carried out by automated means.
- Right not to be subject to automated decision-making (Art. 22 GDPR): Not to be subject to a decision based solely on automated processing that produces significant legal effects.
- Right to withdraw consent, at any time and without affecting the lawfulness of processing carried out prior to withdrawal, where processing is based on the data subject's consent.
To exercise any of these rights, the user may contact the data controller by email at proyectoinerciamusic@gmail.com, indicating «GDPR Rights Request» in the subject line and attaching a copy of their identity document or any other means of identification.
9. Complaint to the Supervisory Authority
Users have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain, if they consider that the processing of their personal data does not comply with applicable regulations.
This can be done through the AEPD's electronic office: www.aepd.es
Before lodging a complaint, the user may contact the data controller directly to seek resolution of the matter.
10. Voluntary Provision of Data
The provision of personal data to the controller is always voluntary. However, refusal to provide certain data may make it impossible to respond to an enquiry or provide the requested service.
*Last updated: April 2026*