Legal information

Privacy policy

In accordance with current legislation, PONIENTE LIVE SL (hereinafter, “Poniente Live”), owner of the website https://ponientelive.com (hereinafter, the “Website”), undertakes to adopt the technical and organisational measures required, according to the level of security appropriate to the risk of the data collected.

Laws reflected in this privacy policy

This privacy policy complies with current Spanish and European legislation on the protection of personal data online. Specifically, it complies with the following:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  • Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
  • Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Data controller

The controller of the personal data collected on the Website is PONIENTE LIVE SL (hereinafter, the “Controller”), organiser of the Poniente Live concert series in Benidorm. Its contact details are:

  • Company name: PONIENTE LIVE SL
  • Tax ID (NIF): B05682497
  • Address: Calle Goya 55, 5.º izquierda, 28001 Madrid (Spain)
  • Contact email: info@ponientelive.com

Record of personal data

In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by Poniente Live through the Website’s forms will be included and processed in our records in order to deal with the User’s requests and enquiries and to maintain the relationship established in the forms they complete. Likewise, unless the exception in Article 30.5 GDPR applies, a record of processing activities is kept, specifying, by purpose, the processing activities carried out and the other circumstances established in the GDPR.

Principles applicable to the processing of personal data

The processing of the User’s personal data will be subject to the principles set out in Article 5 GDPR and Articles 4 et seq. of the LOPD-GDD:

  • Lawfulness, fairness and transparency: data will always be processed on a valid legal basis and after transparent information about the purposes for which they are collected.
  • Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes.
  • Data minimisation: only the data strictly necessary for the purposes for which they are processed will be collected.
  • Accuracy: personal data must be accurate and kept up to date.
  • Storage limitation: data will only be kept in a form that permits identification of the User for as long as necessary for the purposes of processing.
  • Integrity and confidentiality: data will be processed in a way that ensures their security and confidentiality.
  • Accountability: the Controller will be responsible for ensuring compliance with the above principles.

Data we process and purposes

Poniente Live only processes identification and contact data (such as name, email or telephone number) and any data the User includes in their messages. Special categories of personal data within the meaning of Article 9 GDPR are never processed. Data are processed for the following purposes:

  • Contact form: to answer the enquiries, requests or proposals (for example, press, sponsorship or partnership) sent by the User.
  • Newsletter: to send by email news about the series, announcements of new concerts, ticket sale openings and Poniente Live updates, if the User has subscribed.
  • Concert alerts: to notify the User when ticket sales open, new dates are announced or there is news about a specific concert for which they have requested an alert.
  • Information about concerts the User attends: where Poniente Live receives buyers’ contact details from the ticketing platform, to use them only to report relevant changes to the concert (times, postponements, cancellations, access).
  • Statistics and Website improvement: to understand, in aggregate form, how the Website is used in order to improve its quality, operation and navigation, through analytics cookies where the User has accepted them. More information in the cookie policy.

When personal data are obtained, the User will be informed of the specific purpose or purposes of processing, that is, of the use or uses to which the information collected will be put.

Ticket purchases

Concert tickets are sold through external ticketing platforms. The data the User provides during the purchase are processed by the ticketing platform as an independent controller, in accordance with its own privacy policy, which we recommend reading before buying. Poniente Live does not receive or store payment data.

Legal basis for processing personal data

The main legal basis for processing personal data is the User’s consent (Article 6(1)(a) GDPR), which Poniente Live will obtain expressly and verifiably for one or more specific purposes, for example when the User submits the contact form or subscribes to the newsletter or concert alerts. Communicating changes to a concert to its attendees is based on the performance of the ticket purchase contract (Article 6(1)(b) GDPR). In addition, Poniente Live may process data to comply with legal obligations (Article 6(1)(c) GDPR).

The User may withdraw their consent at any time. Withdrawing consent will be as easy as giving it: for example, every newsletter email includes an unsubscribe link. As a general rule, withdrawing consent will not affect the use of the Website.

Whenever the User must or may provide their data through forms to make enquiries, request information or for reasons related to the content of the Website, they will be told which fields are mandatory because they are essential to handle the request.

Recipients of the data

Data will not be disclosed to third parties unless required by law. To provide its services, Poniente Live uses providers acting as processors, who only access the data following its instructions and under a contract in accordance with Article 28 GDPR; for example, the Website’s hosting provider and the newsletter email platform (Brevo, based in the European Union). If any provider were to process data outside the European Economic Area, this would be done with the appropriate safeguards provided for in the GDPR, such as the European Commission’s standard contractual clauses.

Data retention periods

Personal data will only be kept for the minimum time necessary for the purposes of processing:

  • Contact form enquiries: as long as necessary to handle the enquiry and, at most, 36 months, unless the User requests deletion earlier.
  • Newsletter and concert alerts: until the User unsubscribes or withdraws their consent.
  • Attendee data received from the ticketing platform: until the relevant concert has taken place and any related issues have been resolved.

After these periods, data will be kept blocked only for the limitation periods of any legal liability that may arise from the processing.

Personal data of minors

In accordance with Article 8 GDPR and Article 7 LOPD-GDD, only persons over 14 years of age may lawfully consent to Poniente Live processing their personal data. For children under 14, the consent of their parents or guardians is required, and processing will only be lawful to the extent that they have authorised it.

Confidentiality and security of personal data

Poniente Live undertakes to adopt the technical and organisational measures required, according to the level of security appropriate to the risk of the data collected, so as to ensure the security of personal data and prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised disclosure of or access to such data.

The Website has an SSL/TLS certificate, which ensures that personal data are transmitted securely and confidentially, as the transmission of data between the server and the User is fully encrypted.

However, since Poniente Live cannot guarantee that the internet is impregnable or that there will be no fraudulent access to personal data, the Controller undertakes to notify the supervisory authority and to inform the User without undue delay of any personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons. Under Article 4 GDPR, a personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Personal data will be treated as confidential by the Controller, who undertakes to inform its employees, partners and anyone to whom it makes the information available of this confidentiality and to ensure, through a legal or contractual obligation, that they respect it.

Rights regarding the processing of personal data

The User may exercise the following rights recognised in the GDPR and the LOPD-GDD against the Controller:

  • Right of access: to obtain confirmation as to whether or not Poniente Live is processing their personal data and, if so, to obtain information about the specific data and the processing carried out, as well as, among other things, available information on the source of the data and the recipients of any disclosures made or planned.
  • Right to rectification: to have inaccurate personal data corrected or, taking into account the purposes of processing, incomplete data completed.
  • Right to erasure (“right to be forgotten”): unless current legislation provides otherwise, to obtain the erasure of their personal data where they are no longer necessary for the purposes for which they were collected; the User has withdrawn consent and there is no other legal basis for processing; the User objects to processing and there are no other legitimate grounds to continue; the data have been unlawfully processed; they must be erased to comply with a legal obligation; or they were collected in relation to the direct offer of information society services to a child under 14. In addition to erasing the data, the Controller, taking into account available technology and the cost of implementation, will take reasonable steps to inform controllers processing the data of the request to erase any links to them.
  • Right to restriction of processing: to obtain restriction of processing where the User contests the accuracy of their data; processing is unlawful; the Controller no longer needs the data but the User needs them to bring legal claims; or the User has objected to processing.
  • Right to data portability: where processing is carried out by automated means, to receive their personal data in a structured, commonly used and machine-readable format and to transmit them to another controller. Where technically feasible, the Controller will transmit them directly to that other controller.
  • Right to object: to object to Poniente Live processing their personal data or to request that processing stop.
  • Right not to be subject to automated decisions: not to be subject to a decision based solely on automated processing of their data, including profiling, unless current legislation provides otherwise.

The User may exercise their rights by written communication addressed to the Controller with the reference “GDPR – Poniente Live”, stating:

  • The User’s full name and a copy of their ID card, passport or other legally valid document proving their identity. Where representation is permitted, the identification of the person representing the User, by the same means, and the document proving the representation will also be required.
  • The request, with the specific reasons for it or the information to which access is sought.
  • An address for notifications.
  • Date and signature of the applicant.
  • Any document supporting the request.

The request and any accompanying documents may be sent to the following postal address or email:

  • Postal address: PONIENTE LIVE SL, Calle Goya 55, 5.º izquierda, 28001 Madrid (Spain)
  • Email: info@ponientelive.com

Links to third-party websites

The Website may include links to third-party websites other than Poniente Live, such as ticketing platforms, sponsors, artists or social networks, which are therefore not operated by Poniente Live. The owners of those websites have their own data protection policies and are, in each case, responsible for their own processing and privacy practices.

Complaints to the supervisory authority

If the User considers that there is a problem or an infringement of current legislation in the way their personal data are being processed, they have the right to an effective judicial remedy and to lodge a complaint with a supervisory authority, in particular in the State of their habitual residence, place of work or place of the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Acceptance and changes to this privacy policy

The User must have read and agreed to the personal data protection conditions in this Privacy Policy before providing their data through the Website’s forms.

Poniente Live reserves the right to amend this Privacy Policy at its own discretion or as a result of changes in legislation, case law or the guidance of the Spanish Data Protection Agency. The User is advised to check this page periodically to keep up to date with the latest changes. Where changes significantly affect the processing of data already provided, data subjects will be informed.

For more information about the owner of the Website, please see the legal notice.

This text is a translation of the Spanish original. In case of discrepancy, the Spanish version shall prevail.