Privacy policy

Below, we inform you about the privacy policy that will apply in those cases in which the data subject, through browsing the website https://www.abonoteatro.com (the “Website”), provides us with their personal data. This policy will inform you of the purpose of the personal data you provide to us, including the data we collect as a result of browsing our Website.

1. IDENTIFICATION OF THE DATA CONTROLLER

Owner: ABONOTEATRO, S.L. (“Abonoteatro” or the “Controller”);
Registered office: Cuesta de San Vicente 44, Postcode 28008 Madrid, Spain;
Tax ID No.: B-02961886;
E-mail: atencionalabonado@abonoteatro.com;
Telephone: +34 911 33 13 50.

2. INFORMATION AND CONSENT

In accordance with the provisions of EU General Regulation 679/2016 on Data Protection (“GDPR”) and Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights (“LOPDGDD”), by accepting this Privacy Policy, the website data subject (the “Data Subject”) GIVES THEIR CONSENT, in an informed, express, free and unequivocal manner, for the processing of the personal data collected through the Website, whether through forms enabled for this purpose or through the information collected by cookies.

Likewise, the Data Subject consents to such data being processed by the Controller in order to provide its services, applying the organizational and security measures required by the GDPR.

All personal data requested from the Data Subject on the Website is mandatory, and it is not possible to provide the service without the corresponding data processing by the Controller. Notwithstanding the foregoing, browsing the Website is free of charge.

The Data Subject guarantees that the personal data provided to the Controller is true and accurate, and therefore Abono Teatro shall not be liable for any incident arising from the inaccuracy or falsity of the information provided by the Data Subjects, beyond the Data Subject’s right to exercise their right of rectification.

In the event that the Data Subject provides us with data belonging to third parties, as controller or processor, they shall be responsible for complying with all applicable data protection regulations. Furthermore, the Data Subject guarantees that they have obtained all legally required consents, authorizations and/or approvals before including third-party personal data on the Website.

3. SOURCE, PURPOSE AND LEGAL BASIS

The personal data of the Data Subject, or of third parties provided by the Data Subject, shall be processed confidentially and incorporated into the corresponding processing activity of the Controller.

The processing activities carried out by the Controller are the following:

ACTIVITY: ONLINE CONTACT OR INQUIRIES
SOURCE	From the Data Subject themselves through the sending of communications by e-mail, through the channels enabled on the Website (contact form) or on the Controller’s social networks, as well as through its telephone support line.
LEGAL BASIS	General Data Protection Regulation, in particular: • Art. 6.1 b): request for pre-contractual measures.
PROCESSING PURPOSES	To attend to and respond to the inquiries requested by the Data Subject.
GROUP	Natural or legal persons.
DATA CATEGORY	First name and surname; Telephone; E-mail address; Connection metadata.
RECIPIENTS	The data may be communicated to group companies based on the Controller’s legitimate interest.
INTERNATIONAL TRANSFER	No international transfer of data is planned.
RETENTION PERIODS	The data shall be retained for the time strictly necessary to fulfill the purpose for which it was collected. In any case, the maximum retention period shall be one (1) year.

ACTIVITY: WEBSITE REGISTRATION AND LOGIN
SOURCE	From the Data Subject themselves through the website itself.
LEGAL BASIS	General Data Protection Regulation, in particular: • Art. 6.1 b): performance of a contract to which the Data Subject is a party.
PROCESSING PURPOSES	Identification of the Data Subject in order to obtain access to the Website services and manage their registration and deregistration. Website registration and login allow access to the data of the previously purchased abonoteatro subscription.
GROUP	Natural persons, including representatives of legal persons, Data Subjects of the Website.
DATA CATEGORY	First name and surname; Telephone; E-mail address; Postal code; Town/City; Province; Password; Subscription number; Gender; Date of birth; Connection metadata.
RECIPIENTS	The data may be communicated to group companies based on the Controller’s legitimate interest.
INTERNATIONAL TRANSFER	No international transfer is planned.
RETENTION PERIODS	The data shall be retained until the Data Subject withdraws their consent or the purpose for which it was collected has ended, unless the data must be retained due to a legal obligation. When the Data Subject has registered on the Website and has accepted the general terms of use, they will have become a customer. Therefore, given that the limitation period for contractual liability expires after five (5) years, the Data Subject’s data may be retained for a period of five (5) years from the end of the contractual relationship between them. If the Data Subject decides to exercise their right to erasure of this data, Abono Teatro will block it, but will not delete it until the five (5) years have elapsed.

ACTIVITY: CUSTOMERS
SOURCE	From the Data Subject themselves through the sending of e-mails to the indicated address or through the form provided on the Website.
LEGAL BASIS	General Data Protection Regulation, in particular: • 6.1.b.) Performance of a contract.
PROCESSING PURPOSES	Customer management by Abono Teatro, such as for ticket sales.
GROUP	Natural persons, including representatives of legal persons, Data Subjects of the Website.
DATA CATEGORY	First name and surname; Tax ID/National ID; Telephone; Postal address; E-mail address; Date of birth.
RECIPIENTS	The data may be communicated to group companies based on the Controller’s legitimate interest.
INTERNATIONAL TRANSFER	No international transfer is planned.
RETENTION PERIODS	The data shall be retained until the Data Subject withdraws their consent or the purpose for which it was collected has ended, unless the data must be retained due to a legal obligation. Tax Law establishes a retention period of four (4) years for tax documents or tax information. Therefore, Abono Teatro will retain such documents for that period of time, during which they may be requested by the competent authorities. In the case of invoices, these shall be retained for a period of five (5) years.

ACTIVITY: SENDING COMMERCIAL COMMUNICATIONS
SOURCE	From the Data Subject themselves after their express acceptance through the registration form available on the Website.
LEGAL BASIS	Art. 6.1. a) and f) GDPR: consent of the data subject for one or more specific purposes and legitimate interest (Art. 21.2 LSSI).
PROCESSING PURPOSES	Subscription to receive promotions and information, through any channel, including electronic means (SMS, e-mail, telephone calls, etc.), about products.
GROUP	Natural persons, including representatives of legal persons, Data Subjects of the Website.
DATA CATEGORY	First name, surname, e-mail address and telephone.
RECIPIENTS	The data may be communicated to group companies based on the Controller’s legitimate interest.
INTERNATIONAL TRANSFER	No international transfer of data is planned.
RETENTION PERIODS	The data shall be retained until the Data Subject withdraws their consent or the purpose for which it was collected has ended, unless the data must be retained due to a legal obligation.

4. RESPONSIBILITY OF THE DATA SUBJECT

The Data Subject guarantees that they are over eighteen (18) years of age and that the data provided is true, accurate, complete and up to date, and they are responsible for any direct or indirect damage or loss that may arise as a result of the breach of such obligation, beyond the Data Subject’s right to exercise their right of rectification.

In the event that the data provided belongs to a third party, the Data Subject guarantees that they have informed said third party of the aspects contained in this document and obtained their authorization to provide their data to the controller for the purposes indicated above.

The Controller cannot guarantee the absolute invulnerability of the systems and, therefore, assumes no liability for any damage or loss resulting from alterations that third parties may cause to computer systems, electronic documents or files.

5. COOKIE POLICY

In accordance with the provisions of the GDPR and Law 34/2002 on Information Society Services, all personal data obtained through cookies during the use of the Website shall be processed in accordance with the provisions of the Cookie Policy.

6. EXERCISE OF RIGHTS

In accordance with the provisions of the GDPR, we inform you that you may exercise your rights of access, rectification, erasure, objection, data portability and restriction of processing directly before the Controller.

To exercise these rights, the Data Subject may send a message for this purpose, indicating their first name, surname and e-mail address, to the following e-mail address: rgpd@abonoteatro.com.

The Data Subject may also exercise their rights by filing a complaint with the Spanish Data Protection Agency.

7. ACCEPTANCE OF THE PRIVACY POLICY

The Data Subject ACKNOWLEDGES AND ACCEPTS THAT THEY HAVE READ AND UNDERSTOOD this Privacy Policy, the content of which constitutes the entire agreement between the Data Subject and the Controller with respect to the use and processing of their personal information. The Data Subject expressly agrees to be bound by the terms of this Privacy Policy, in its entirety and scope, without excluding any of its provisions.

Express acceptance of this document shall be essential when the Data Subject registers through the Website by completing the corresponding registration form.