TICKETANDROLL,S.L. is committed to compliance with Spanish and European personal data protection regulations, and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures established in the Reglamento General de Protección de Datos (RGPD) (UE) 2016/679, de 27 de abril, and in the Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (LOPD y GDD, hereinafter LOPD).
This Privacy Policy governs the collection and processing of personal data provided by Users when they access, browse, or make use of the functionalities on the Website.
When the use or request of any service requires the provision of personal data, users shall guarantee its truthfulness, accuracy, authenticity, and validity. In this regard, it shall be the users' obligation to keep their data updated so that it corresponds to reality at all times.
Identification of the Data Controller
Please be informed that any personal data collected directly from the data subject will be treated confidentially and will be incorporated into the corresponding processing activity under the responsibility of:
Website owner: TICKETANDROLL,S.L., registered in the Registro Mercantil de Madrid Volume 42,828, Folio 14, Sheet 757263, Entry 1
NIF: B67815746
Address Avda Cristobal Colón, 15 28770 Colmenar Viejo (Madrid)
Email: admin@ticketandroll.com
This company has a Data Protection Officer whose contact details are as follows:
Legalidat (Lawyers & Consultants)
Alejandro Prada Momán
C/ Sartaña nº 39, bajo. Ferrol (A Coruña)
Email: dpd.clientes@legalidat.com
This portal may contain links to third-party websites, whose privacy policies are outside the control of TICKETANDROLL,S.L.. By accessing such websites, you can decide whether to accept their privacy and cookie policies. In general, if you browse the internet, you can accept or reject third-party cookies from your browser's settings.
Data collection, purposes, legal basis, and retention periods:
Acceptance of this Privacy Policy means that the User authorizes TICKETANDROLL,S.L., as the owner of the Website, to process their data and include it in a processing register under its responsibility, for the purposes stipulated below:
CONTACT FORMS/EMAIL: The User may contact the Owner through the form established for this purpose on the Website, or through the contact means indicated on the Website (phone, email, postal and/or electronic address). To do so, the User must provide the requested data, along with the message, query, suggestion, or comment. TICKETANDROLL,S.L. will process the merely identifying data consisting of name, surname, phone number, and commercial information about the products and services provided, in order to assist you, respond to your queries, and contact you for this purpose. Likewise, the data provided by the user will be stored in the potential customer databases of TICKETANDROLL,S.L..
The legal basis for the processing of such data is based on the User's consent, which may be revoked at any time.
Personal data will be processed through servers managed by Sitegrown, which will be considered the Data Processor.
The data retention period for this purpose will be maintained as long as you do not request its deletion.
COLLABORATOR AND ORGANIZER REGISTRATION: the data provided by the collaborator in the registration forms on the Website will be processed by TICKETANDROLL,S.L. for the purpose of registering them as a collaborator on the Website and carrying out the contracted service. In the event that the User requests the contracting of TICKETANDROLL,S.L. services, the data provided for the contracting will be processed under the terms provided in the contract.
The legal basis for the processing of such data is based on the User's consent. The data will be retained for as long as the User is a registered user with an active account. Once the User's personal account is deactivated, the data will be deleted or retained in a blocked state for the periods provided by law regarding legal prescriptions and other liabilities.
TICKET PURCHASE (CLIENTS): when the User purchases a ticket, they must complete the designated forms. Through these forms, the User must provide the personal data and information requested to carry out the service, such as email address; otherwise, the User's request cannot be processed. The data will be processed by TICKETANDROLL,S.L. for the purpose of managing the purchase requested by the User and sending the ticket by email, as well as offering information related to the services and products marketed in compliance with Ley 34/2002 de servicios de la sociedad de la información y de comercio electrónico, in addition to the administrative, tax, and accounting management derived therefrom.
The legal basis for this processing shall be the proper execution of a contract and the consent of the data subject.
In the event of contracting the services of TICKETANDROLL,S.L., we inform you that, based on our legitimate interest, we may send you our own information about our products and services, and you may object to such processing by sending an email to admin@ticketandroll.com or indicating so at the time of purchase. Your data will be retained for this purpose as long as your contractual relationship with TICKETANDROLL,S.L. continues or you request to unsubscribe. Once the contract is terminated or unsubscription is requested, the data will be deleted or kept blocked for the periods provided by law regarding legal prescriptions and other liabilities.
NEWSLETTER: The User may, if they wish, provide their identifying data and email address to subscribe to the news, promotions, and updates from TICKETANDROLL,S.L., to periodically receive communications via email, postal address, or mobile device (where applicable).
To subscribe to the Newsletter, only the NAME and EMAIL of the INTERESTED person are requested. These data identify each subscriber and involve personal data processing, to be incorporated into the file owned by TICKETANDROLL,S.L. and managed through Mailchimp, providing automated and/or manual welcome and introduction responses, as well as the periodic sending of informational news, commercial updates, and/or various commercial communications, mainly the launch and relaunch of free and paid products and/or services, duly identified in each email.
Our email provider Mailchimp is located in the USA and is covered by the EU-US Privacy Shield agreement, information about which is available aquí, approved by the European Data Protection Committee. (Ver política de privacidad de Mail Chimp).
The legal basis for the processing of such data is based on the User's consent. The data retention period will be for as long as the User remains registered in our commercial communication systems and does not request unsubscription by sending UNSUBSCRIBE to admin@ticketandroll.com.
The legal basis for the processing of such data is based on the User's consent. The data retention period will be for as long as the User remains registered in our commercial communication systems.
COOKIES: The Website uses technology for the implementation of files called cookies on the device used to access and browse the Website. Cookies can be blocked or disabled at any time through browser settings, and are used to improve your browsing experience on our website, analyse user navigation, and offer you personalised content. For more information, please see our Cookie Policy.
The legal basis for the processing of such data is based on the User's consent. The retention period will depend on the type of cookie in question.
SOCIAL MEDIA AND BLOG: TICKETANDROLL,S.L. is present on Social Media, therefore personal data available on the social media profiles of users who interact with the controller's profiles, as well as data provided by the user when contacting the Controller through this channel, will be processed for the purpose of answering your queries, requests, or petitions, as well as engaging with you and creating a community of followers.
The legitimacy for the processing of your data will be that of a contractual relationship within the corresponding social network environment, and in accordance with its Privacy policies, which is why TICKETANDROLL,S.L. recommends reading them.
POST A MESSAGE ON THE BLOG. The message, name, and email are required; sharing your website is optional. The data requested on the blog is to filter and prevent SPAM. The identifying data will be deleted after a minimum period of 72 months, unless the data subject requests early deletion.
Data origin:
The personal data processed by TICKETANDROLL,S.L. comes from the data subject themselves or their legal representative.
In the event that you provide us with third-party Personal Data, you are responsible for having informed and obtained their consent to provide such data for the purposes indicated in the corresponding sections of this Privacy and Cookie Policy.
Data accuracy:
The User declares that all data provided by them is true and correct and undertakes to keep it updated. The User shall be responsible for the accuracy of their data and shall be solely liable for any conflicts or disputes that may arise from the falsity thereof. It is important that, in order for us to keep personal data updated, the User informs TICKETANDROLL,S.L. whenever there has been any modification to said data.
Data retention:
The personal data provided will be retained for the time necessary to fulfill the purpose for which it is collected and to determine any possible liabilities that may arise from said purpose, in addition to the periods established in archiving and documentation regulations.
As a general rule, the retention period for personal data may be maintained for the following terms:
4 years: Ley sobre Infracciones y Sanciones en el Orden Social (obligations regarding affiliation, registrations, deregistrations, contributions, salary payments…); Arts. 66 et seq. Ley General Tributaria (accounting books…)
5 years: Art. 1964 Código Civil (personal actions without a special time limit)
6 years: Art. 30 Código de Comercio (accounting books, invoices…)
10 years: Art. 25 Ley de Prevención del Blanqueo de Capitales y Financiación del Terrorismo.
No time limit: disaggregated and anonymized data.
Data disclosure:
TICKETANDROLL,S.L. will not transfer data to third parties except in legally established cases or when the provision of the service necessarily implies a contractual relationship with a Data Processor. The user accepts that some of their data may be provided to these data processors (accounting firm, hosting services, auditing and compliance consulting services, collaborators, etc.) as long as they are necessary for the correct provision and/or fulfillment of the contract, accepting that they may be subcontracted to third parties who will be considered data processors. All Data Processors have signed the corresponding Confidentiality agreement or adhered to the privacy policies of their respective websites.
By legal obligation and only in those cases where it is necessary, data may be transferred to the Agencia Tributaria, public bodies with competence in the matter, and banking entities.
Data category:
The categories of data processed by TICKETANDROLL,S.L. are merely identifying data necessary for the fulfillment of the contracted service. In no case will specially protected or sensitive data categories be processed.
Minors:
Only persons over 14 years of age may provide personal data on this website, as required by Spanish personal data protection regulations; otherwise, they must have the consent of their parents or guardians.
Only persons over 18 years of age may contract our services. In the case of minors, the consent of their parents or guardians will be a mandatory condition in order for us to provide the contracted services or process the purchase.
Rights of data subjects:
Any person has the right to obtain confirmation as to whether TICKETANDROLL,S.L. is processing personal data concerning them or not.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, TICKETANDROLL,S.L. will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of potential claims.
You may exercise your rights by sending an email with a copy of your NIF or official identification document to our email address admin@ticketandroll.com. The entity has appropriate forms for this purpose. You only need to request them or you can submit your own written request.
If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal, as well as to request the cancellation of your platform account
If you feel your rights have been violated with regard to the protection of your personal data, especially when you have not obtained satisfaction in exercising your rights, you may file a complaint with the competent Data Protection Supervisory Authority through their website: www.agpd.es.
Security and update of your personal data
In order to safeguard the security of your personal data, we inform you that TICKETANDROLL,S.L. will process your data with the utmost care by all our staff at every stage of the services provided, having adopted all necessary technical and organisational measures to guarantee the security of the personal data provided. Thus preventing its alteration, loss, and unauthorised processing or access to stored data, as required by European regulations.
This website includes an SSL certificate for payments. It is a security protocol that ensures your data travels securely and intact, meaning the data transmission between a server and web user, and back, is fully encrypted.
The website and email are hosted on Siteground under the company name Siteground Spain, S.L. with registered office in Spain. More information at: https://sitegrownd.es where you can view their privacy policies. Our secure server provides our visitors and customers with the highest levels of security, stability, functionality, and privacy available on the Internet. The security of your data is guaranteed, as they take all necessary security measures. You can consult their privacy policy for more information.
Regarding the confidentiality of processing, TICKETANDROLL,S.L. will ensure that any person authorised to process client data (including its staff, collaborators, and providers) will be under an appropriate obligation of confidentiality (whether a contractual or legal duty).
When a security incident occurs, TICKETANDROLL,S.L. will notify the Client without undue delay and shall provide timely information related to the Security Incident as it becomes known or when the Client reasonably requests it.
It is important that, in order for us to keep your personal data updated, you inform us whenever there is any change to it.
Validity
This privacy and data protection policy was drafted on December 16, 2021 by Legalidat (Abogados & Consultores), a law firm specialized in data protection, and may change according to regulatory and case law developments, it being the responsibility of the data subject to read the updated document in order to know their rights and obligations in this regard at all times.