PRIVACY POLICY

DATA CONTROLLER

USHUAÏA ENTERTAINMENT S.L. is especially sensitive to the protection of personal data of the Users of the Web site's services and its customers. Through this Privacy Policy (or Data Protection Policy), the owner of this site USHUAÏA ENTERTAINMENT S.L. informs Users of the website about the uses to which the personal data collected are subjected so that they can decide freely and voluntarily whether they wish to provide the requested information. USHUAÏA ENTERTAINMENT S.L. reserves the right to modify this Policy to adapt it to new legislation, jurisprudential criteria, industry practices, or the entity's interests. Any modification will be announced in advance so that you have perfect knowledge of its content.

The data controller is USHUAÏA ENTERTAINMENT S.L. with an address for these purposes at Avenida Bartolomé Roselló 18, 07800 Ibiza (Balearic Islands). The processing activities carried out on our websites may involve the processing of personal data by another entity linked to USHUAÏA ENTERTAINMENT S.L. through other online platforms (for example, the website of collaborators). You can obtain more information about this entity at the following link.

PURPOSES

The data controller may process your personal data for the following purposes:

Management of ticket purchases and space reservations for shows and events online. This includes:
- Handling your reservation and purchase request made through our website or through a third party.
- Sending confirmation of the purchase or reservation of spaces.
- Handling your contact requests to manage, cancel, or modify your space reservation or ticket purchase.
Management of access to the venue and distribution of tickets managed on behalf of and for the event promoter to offer you our best service and the best possible attention at each event and show. For this purpose, the data controllers may:
- Consider the products and services contracted and enjoyed by you to offer products and services that may be of interest based on statistical data prepared by us.
- Provide or allow third parties to provide you with additional services and/or information about additional services that may be of interest, provided you have given your consent.
Management of information and contact requests through the specific channels and/or forms provided for this purpose. This includes:
- Handling your contact requests with USHUAÏA ENTERTAINMENT S.L.
- Responding to your requests for information about activities, events, and shows offered or carried out by USHUAÏA ENTERTAINMENT S.L.
- Managing the registration and, where applicable, the unsubscribe from the USHUAÏA COMMUNITY Newsletter to send you updated information about the activities, products, and services of USHUAÏA ENTERTAINMENT S.L and THE NIGHT LEAGUE SL., as well as to receive exclusive promotions.
- Sending commercial communications by any means (including electronic ones) to inform you about news, offers, events, and our products or services that may be of interest, always based on your consent.

CATEGORIES OF DATA

The processing activities include the processing of the following categories of data:

Identifying data: Name and surname, personal identification document or passport number, telephone, email.
Data associated with the payment method managed by our providers according to security standards and regulations.
Tracking data and accepted cookies: IP address, browser and operating system information, device identifiers, and Internet connection information.

LEGAL BASIS

The data controller is authorized to process your personal data based on:

The execution of a service contract under Article 6.1.b) of the General Data Protection Regulation and Article 4, paragraph nine of Federal Decree-Law No. (45) of 2021 of the United Arab Emirates for the formalization and execution of the reservation.
The explicit consent given by you in cases where it has been requested for one or more specific purposes as provided in Article 6.1.a) of the General Data Protection Regulation and Article 6 of Federal Decree-Law No. (45) of 2021 of the United Arab Emirates when filling out the forms and checking the box provided for this purpose. In these cases, the data subject has the right to withdraw consent at any time without affecting the lawfulness of the processing based on the consent before its withdrawal.
The fulfillment of a legal obligation imposed on the data controller in accordance with Article 6.1.c) of the General Data Protection Regulation and Article 4, paragraph eight of Federal Decree-Law No. (45) of 2021 of the United Arab Emirates when any rule that obliges a specific personal data processing is applicable.

SOURCE OF DATA

The personal data come from the reservation of spaces and online ticket purchases made by the data subject or from the forms filled out by them provided by the data controller or from the user experience collected during their stay at events or shows managed by USHUAÏA ENTERTAINMENT S.L. In case the data do not come directly from the data subject, they will originate from the reservation or ticket purchase made by the data subject through a third party.

RETENTION PERIOD

The personal data provided will be kept for the corresponding period to fulfill legal obligations or respond to possible claims during the statute of limitations for civil actions, adopting security measures for their preservation. Additionally, to improve your experience at future events or shows, we will keep the data related to your visit history for seven years unless you notify us otherwise, in which case the legally provided periods will be maintained and during the time required by a judge or court. To know the full retention periods, you can contact our Data Protection Officer.

SECURITY MEASURES

USHUAÏA ENTERTAINMENT S.L. has adopted security measures to protect the confidentiality, integrity, and availability of information with both organizational and technical measures. The entity, among others, has the following measures:

a) Data blocking procedures. According to Article 32 of Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights, the entity blocks data to prevent its processing.
b) Security breach management procedures. The entity has technical measures to detect security incidents that may affect the data processing carried out. Once a security incident is detected, USHUAÏA ENTERTAINMENT S.L. has established measures to solve the incident and, if necessary, proceed to notify the competent authorities and/or the data subjects.
c) Pseudonymization and encryption of personal data procedures. With this measure, USHUAÏA ENTERTAINMENT S.L. ensures that the data subject's data is in a maximum confidentiality sphere.
d) Procedures to restore the availability and access of personal data in case of a technical or physical incident. USHUAÏA ENTERTAINMENT S.L. regularly evaluates the effectiveness of technical and organizational measures to ensure the security of processing.

No decisions are made based on automated processing, including profiling.

DATA RECIPIENTS

The personal data you provide to the data controller may be communicated to the following categories of recipients:

Third parties to which the entity is obliged to transmit information, such as public authorities, such as the Dubai Police and other Dubai Government departments, to comply with the requirements of these authorities and the applicable regulations, where applicable (Art. 6.1.c) GDPR and Art. 4, paragraph eight of Federal Decree-Law No. (45) of 2021 of UAE).
Other companies that need to process your personal data to provide our services based on the execution of a contract or pre-contractual measures (Art. 6.1.b) GDPR and Art. 4, paragraph nine of Federal Decree-Law No. (45) of 2021 of UAE) and to show you personal preferences, interests, and requests from the information collected during previous stays to provide a personalized service based on the consent given by the data subject.

The entities acting as data controllers do not market, sell, or carry out any similar activity with your personal data; they only process your personal data for the indicated purposes. These entities have service providers with access to personal data (Data Processors). Among these service providers are companies located outside the European Economic Area, so international data transfers may be made, in any case complying with appropriate guarantees according to Articles 44 and following of the GDPR and Articles 22 and 23 of Federal Decree-Law No. (45) of 2021 of UAE. For international transfers with USHUAÏA ENTERTAINMENT S.L. providers located in the United Arab Emirates or other countries, data protection clauses adopted by the European Commission are provided as a guarantee.

USERS' RIGHTS

However, the data subject can always exercise their rights in accordance with the General Data Protection Regulation, which are:

Right to request information and access to personal data concerning the data subject.
Right to request rectification or deletion.
Right to request the limitation of processing.
Right to object to processing.
Right to data portability.
Right to withdraw consent.
Right to object to decisions resulting from automated processing.
Right to file complaints with a supervisory authority.

The data subject can exercise these rights by request specifying which of these rights they wish to be satisfied, sent to the data controller at the address: Avenida Bartolomé Roselló 18, 07800 Ibiza (Balearic Islands) or via email at data.protection@ushuaiadubai.com. If the entity has doubts about your identity, it may require you to provide your passport or official identification document. If you consider your right to personal data protection has been violated, you can file a complaint with the corresponding control authority: the Spanish Data Protection Agency (www.aepd.es) or the Dubai Data Protection Authority.