Privacy policy

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD), please be informed that the controller of the personal data collected through this website is:

Personal data provided by the user through website forms, email or other contact channels will be processed for the following purposes: to handle requests for information, enquiries or requests; to manage the commercial or professional relationship with clients, suppliers or collaborators; to provide the requested services; and to improve customer service and the operation of the website.

The company's activity is linked to the organisation and management of private events in Mallorca.

In addition, data submitted through forms will be used to manage requests related to event organisation, including service coordination and the booking of third-party venues.

The data may also be used to send communications strictly related to the requested service, such as confirmations or relevant event information.

Under no circumstances will personal data be used to send commercial communications or advertising.

Depending on the form or contact channel used, PALMA EVENTS may process the following categories of data: identification data such as first and last name; contact details such as email address, phone number or other details provided; data included in the message or enquiry sent by the user; and browsing data, where applicable, in accordance with the Cookies Policy.

As a general rule, special categories of personal data are not processed unless the user expressly provides them and they are necessary to manage the request.

The legal basis that legitimises the processing of data is the data subject's consent, the performance of pre-contractual or contractual measures, compliance with applicable legal obligations and the controller's legitimate interest in the proper management of the website and the security of its systems.

Personal data will be kept for the time necessary to fulfil the purpose for which it was collected and, afterwards, for the legally required periods in order to deal with any potential liabilities.

Where processing is based on consent, the data will be kept until the user withdraws that consent or requests its deletion, provided there is no legal obligation to retain it.

As a general rule, data will not be disclosed to third parties unless required by law or where necessary for the provision of services linked to PALMA EVENTS' activity.

In particular, data may be disclosed to technology providers acting as data processors, such as data storage services (Supabase) and email delivery tools (Resend), as well as to suppliers, collaborators or venue owners involved in the organisation of the event when necessary for the proper provision of the service.

In all cases, the necessary measures will be adopted to guarantee the confidentiality and security of the data.

If the technology providers used are located outside the European Economic Area, international data transfers will be carried out in accordance with the appropriate safeguards provided for in the GDPR, such as standard contractual clauses approved by the European Commission.

The user may exercise the following rights at any time: access to personal data; rectification of inaccurate or incomplete data; erasure where the data is no longer necessary; objection to processing; restriction of processing; data portability; and withdrawal of consent at any time.

To exercise these rights, a request may be sent to info@palmaeventsgroup.com or by post to C/ Jaume Ferrrer, Nº 18, 07012 Palma (Illes Balears, Spain).

The request must state the first name and surname, the right to be exercised and, where necessary, proof of identity.

If you believe that the processing of your data does not comply with the applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

This website is not directed at children under 14 years of age. If a minor provides personal data without the authorisation of their parents or guardians, the controller may take the necessary steps to delete such data as soon as it becomes aware of it.

The controller adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risk, preventing the loss, misuse, alteration, unauthorised access to or theft of personal data.

The website may contain links to third-party pages. The controller is not responsible for their privacy policies or for the data processing they carry out.

The controller reserves the right to modify this Privacy Policy in order to adapt it to legislative changes or to changes in the operation of the website. In such cases, the changes will be announced on this page.