Privacy policy

Data controller

• Owner: Ivan Pascual Pino
• Tax ID (NIF): 02597148B
• Address: [To be completed]
• Email for privacy matters: aveshowperformance@gmail.com

What data we process

The data you give us in the contact form: name, email, phone (optional), type and date of the event and your message. For security, we also keep an encrypted identifier (hash) of your IP address to prevent abuse; your IP address is never stored in plain text.

We do not ask for special categories of data. If you write on behalf of someone else, you must have their permission.

What we use it for

To answer your request, prepare a quote and keep in touch about your event. We do not use it to send you advertising and we do not make automated decisions.

Legal basis

Your consent, given by ticking the box in the form (article 6.1.a of the General Data Protection Regulation, GDPR), and taking pre-contractual steps at your request (article 6.1.b GDPR). You can withdraw your consent at any time without affecting the lawfulness of prior processing.

How long we keep it

Requests are kept for a maximum of 24 months from receipt and are then deleted automatically, unless a contract is signed, in which case they will be kept for the periods required by law. The IP identifier is deleted after 24 hours.

Recipients

We do not share your data with third parties unless required by law. We use providers that process it on our behalf under a data processing agreement:

• Supabase: the database where requests are stored, hosted in the European Union.
• Resend: sends us an email notice of each new request. Based in the United States; the transfer relies on the safeguards provided by the GDPR (such as the European Commission standard contractual clauses).
• Cloudflare: website hosting and anti-spam verification (Turnstile), with the same safeguards for international transfers.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to aveshowperformance@gmail.com and stating which right you wish to exercise.

If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

We apply appropriate technical and organisational measures: the website uses an encrypted connection (HTTPS) and only the owner can access requests, with a username and password and access controls in the database.