ESEN

Privacy policy

1. Data controller

  • Controller: Virginia López Millán

  • Tax ID: 74873675-G

  • Address: C/ Rio Olivenza, 1, (29002) Málaga

  • Privacy contact email: ticketscostadelsol.com

2. What data we process, why and on what legal basis

Processing

Data

Purpose

Legal basis

Retention

Advertisers and customers

Name, email, advert and payment details of the company or its representative

Manage advertising orders and invoicing

Performance of the contract and legal obligation

Contract duration and legal periods (6 years for accounting records)

Data protection requests

Name, email and the request

Handle your request and be able to prove it

Legal obligation

3 years

Web analytics

Browsing data, device and approximate location

Understand how the website is used and improve it

Your consent (analytics cookies)

14 months

Clicks on affiliate links and adverts

Source page, date, approximate country and device; the IP is only stored irreversibly encrypted

Measure link and advert performance and prevent fraud

Legitimate interest

13 months

Consent log

Anonymous code, date, options chosen and policy version

Prove the consent you gave

Legal obligation

36 months

Security

IP and access logs

Protect the website against attacks

Legitimate interest

12 months

3. Recipients

We do not share your data with third parties unless legally required. Some providers process data on our behalf under a data processing agreement:

  • Web hosting: Webempresa

  • Delivery network and security: Cloudflare

  • Analytics: Google Analytics (Google)

  • Advertiser payments: Stripe

  • Tax and accounting: ACCOUNTANT

4. International transfers

Some providers (such as Google, Cloudflare or Stripe) may process data outside the European Economic Area, particularly in the United States. These transfers are covered by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, using email: [email protected] We will reply within one month.

If you believe we have not handled your rights correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.

7. Minors

This website is not aimed at children under 14 and we do not knowingly collect their data.

8. Changes to this policy

We may update this policy. We always publish the current version with its date, and previous versions can be consulted at the end of this page.