Privacy policy

BLOOM SPORT & ENTERTAINMENT, SLU informs users of the website oktoberfestgirona.com, through this privacy policy, about the processing and protection of users' personal data that may be collected through their browsing or the contracting of services they carry out on this portal. Use of this website by the user entails acceptance of this privacy policy.

BLOOM SPORT & ENTERTAINMENT, SLU takes the measures necessary to guarantee the security, integrity and confidentiality of the data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and, in matters not covered by it, with Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights, Royal Decree 1720/2007 of 21 December approving the Regulation implementing the Organic Law on Data Protection, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce. Through the registration forms on this website or by sending an email, personal data is collected and processed from each user which is necessary for the management and maintenance of some of the services provided and whose processing is governed by this privacy policy. Following the application of the General Data Protection Regulation, the obligation to notify files to the Spanish Data Protection Agency for their entry in the General Data Protection Register has been removed, so the file notification systems are no longer operational, either through the NOTA form or by sending notifications in XML format. As of 25 May 2018, this obligation to notify files is replaced by the drawing up of a record of processing activities which must contain the information set out in Article 30 of that Regulation.

The controller of the personal data provided by the user when accessing and using the website is, as its owner, BLOOM SPORT & ENTERTAINMENT, SLU, with tax number B21734017, registered office at carrer de l'Avellana, 6, 17178 Les Preses (Girona), Spain, registered with the Commercial Registry of Girona, section 8, sheet GI-76506, entry 1, and email address info@bloomprodu.com.

BLOOM SPORT & ENTERTAINMENT, SLU undertakes to apply the IT security measures provided for in the legislation cited above, in order to prevent improper access to or use of the data, or its manipulation, deterioration or loss.

BLOOM SPORT & ENTERTAINMENT, SLU, as data controller, undertakes to store and manage the personal data and information collected through this website with due confidentiality for as long as the professional relationship continues and the data subject does not request its deletion and, where applicable, for a period of no more than 5 years from the end of the commercial relationship established between the user and BLOOM SPORT & ENTERTAINMENT, SLU. However, the controller may keep the data, duly blocked, in order to deal with any administrative or legal liabilities.

Technical operations, procedures and processes, whether automated or not, that make it possible to collect, store, modify, transfer and otherwise act upon personal data are considered processing of personal data. BLOOM SPORT & ENTERTAINMENT, SLU processes the personal data provided by users through oktoberfestgirona.com in order to manage the purchase and booking of tickets for Oktoberfest Girona, identify the purchaser and, where necessary, the attendees linked to the tickets purchased; generate and send the tickets and the corresponding QR codes or identifiers; manage and validate entry to the venue; manage the payments associated with purchases; handle enquiries, requests or incidents relating to the tickets, the bookings or the event; and comply with the applicable administrative, accounting, tax and legal obligations.

Card payments are handled through the Redsys payment gateway. BLOOM SPORT & ENTERTAINMENT, SLU neither accesses nor stores the full details of the bank card used to make the payment.

Likewise, where there is a legal basis allowing it, contact details may be used to send commercial communications. Where the user's consent is required, it will be requested expressly and separately.

• The fields in the forms must be completed so that BLOOM SPORT & ENTERTAINMENT, SLU can fulfil the purposes set out above.
• The user may object to receiving commercial communications at any time by sending an email to the address given above.

Depending on the purchase process or service used, BLOOM SPORT & ENTERTAINMENT, SLU may process the following categories of data:

• Identification data: first name and surnames.
• Contact details: email address and, where applicable, telephone number.
• Date of birth.
• Postal address data: street type, street name, number, block, floor, door, postcode, town, province and country.
• Data relating to the purchase or booking: tickets or bookings purchased, date, amount and information associated with the transaction.
• Data associated with the ticket: QR code or equivalent identifier and information relating to its validation.
• Data provided by the user in connection with enquiries, incidents or requests.

The processing of personal data is carried out on the following legal bases:

• Performance of a contract or application of pre-contractual measures: to manage the purchase or booking, issue and send the tickets, generate the QR codes, validate entry to the event and handle matters directly related to the purchase.
• Compliance with legal obligations: to comply with the tax, accounting, administrative and other obligations legally applicable to BLOOM SPORT & ENTERTAINMENT, SLU.
• Consent of the data subject: where it is required in order to send commercial communications or for other processing that requires the user's express authorisation.

The data marked as mandatory during the purchase process is necessary in order to manage the purchase or booking and provide the associated services. Without it, the corresponding process may not be completed.

As a general rule, BLOOM SPORT & ENTERTAINMENT, SLU will not disclose this personal data to third parties, except where the provision of a service requires a contractual relationship with a data processor and this is strictly necessary in order to manage and maintain the relationship between the user and the company, subject to the user's express authorisation. This will be done only for as long as is essential to allow the contracted work to be performed, and under the same conditions and with the same responsibilities as are required of the controller. Once the work is completed, the processor will return the personal data to the controller and delete any copy it holds.

Furthermore, only those third parties to whom BLOOM SPORT & ENTERTAINMENT, SLU has a legal or contractual obligation to provide this personal data will be entitled to access it, including, for example, the Spanish Ombudsman and the judges and courts involved in proceedings relating to any claims brought.

The user may exercise at any time, under the terms laid down in the legislation in force, the rights of access, rectification or erasure of data, request that the processing be restricted, object to it, request the portability of their data, and withdraw the consent given — rights recognised in the aforementioned General Data Protection Regulation or Regulation 2016/679, as well as in Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights. Users may exercise these rights themselves by contacting BLOOM SPORT & ENTERTAINMENT, SLU at the registered office address given above, by sending an email to info@bloomprodu.com, or by post to carrer de l'Avellana, 6, 17178 Les Preses (Girona), Spain.

In order to exercise these rights effectively, the user must prove their identity by providing their first name and surnames, a photocopy of an equivalent identity document proving their identity, a request setting out what is being asked for, an address for notifications, and the date and signature of the applicant.

Users may also lodge a complaint with the Spanish Data Protection Agency (the supervisory authority with competence in this area), particularly where they have not obtained satisfaction in the exercise of their rights, by writing to it at calle de Jorge Juan, 6, 28001 Madrid, or through the AEPD's electronic register. Data protection officer contact details: dpd@aepd.es.