PRIVACY POLICY

• Controller: Bartolomé Muñoz Pons (ONHOUSE)
• Tax ID (NIF): [NIF PENDIENTE]
• Address: [DOMICILIO PENDIENTE], Ibiza (Illes Balears), España
• Email: Marvicol2010@hotmail.com

The site has no forms, no user accounts and no analytics or advertising tools. Personal data is only processed in these cases:

• Contact: when you email us, call us or reach us on Instagram, we process your name, your contact details and whatever you tell us.
• Technical browsing data: when you visit the site, the server receives your IP address, browser and the page requested. This is used only to serve the site, keep it secure and prevent abuse (for example, by limiting the number of requests).
• Administration: authorised people who use the admin panel sign in with a username and password. We log sign-in attempts (username, IP and time) to stop attacks.

• Answering your enquiries, bookings, collaborations or press requests: your consent when you contact us and, where relevant, taking steps before or under a contract (GDPR art. 6.1.a and 6.1.b).
• Keeping the site secure and working: our legitimate interest in protecting the service (GDPR art. 6.1.f).
• Managing access to the admin panel: our relationship with authorised people and our legitimate interest in security (GDPR art. 6.1.b and 6.1.f).

We do not make automated decisions or build profiles from your data.

• Contact messages: as long as needed to deal with your request, then for the limitation periods of any resulting liabilities.
• Technical data and sign-in attempts: a short period, only as long as security requires; they are then deleted automatically.
• Admin sessions: they expire after a period of inactivity and, in any case, after 12 hours.

We do not share your data with third parties unless the law requires it. To run the service we use providers acting as data processors:

• Vercel Inc. (site hosting and image storage).
• The site’s database provider, for admin panel data.
• The email provider through which we receive your messages.

Some of these providers may process data outside the European Economic Area, in particular in the United States. Those transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to Marvicol2010@hotmail.com. Say which right you are exercising and, if needed to identify you, include proof of identity.

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

This site is not aimed at children under 14 and we do not knowingly process their data. Entry to events is subject to the minimum age set by each venue.

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), passwords stored irreversibly, protected session cookies and limits on sign-in attempts.

We may update this policy when the site or the law changes. The date of the last update is shown at the bottom of this page.