Legal information

1. Privacy Policy

 

In order to provide its services, [COMPANY NAME] needs to collect some personal data from its customers.

 

On the other hand, the increasingly frequent interaction with users of our website (hereinafter referred to as the "Page") also requires, in some cases, the collection of personal information from the user in order to take advantage of services provided by [COMPANY NAME], or the collection of data from their device (through files called cookies), in order to improve the performance of the Page.

 

Accordingly, this privacy and personal data protection policy ("Privacy Policy") aims to help our clients and users of the Website (hereinafter jointly referred to as "Client(s)") understand what personal data we collect, how and why we use it, to whom we disclose it and how we protect their privacy when they browse our Website.

 

The company [COMPANY NAME] is committed to protecting the security and privacy of its Customers. In this context, it has drawn up this Privacy Policy in order to affirm its commitment to and respect for the rules on privacy and the protection of personal data.
This Privacy Policy applies even if you have booked your ticket through a third party (namely an agent) and is part of the Terms of Use and General Conditions.

 

We want our Customers to be aware of the general rules on privacy and the terms for processing the data we collect, in strict compliance with the applicable legislation in this area, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 ("General Data Protection Regulation" or "GDPR").

 

The company [COMPANY NAME] strives to respect the best practices in terms of security and protection of personal data, promoting actions and improving systems in order to safeguard the protection of the data made available to us by our Customers.

 

By using and browsing our website, filling in our forms and providing data directly or indirectly, you acknowledge and accept the terms of the Privacy Policy, the Terms of Use and General Conditions and any other specific terms, policies and conditions. By providing your personal data, you consent to the collection, processing, use and disclosure of such data in accordance with the rules set out herein.

 

 

1.2 Who is responsible for processing your personal data?

References in this Privacy Policy to "[WEBSITE URL]", "we" or "our" mean the company [COMPANY NAME], and for this purpose it is considered to be the entity responsible for processing, under the terms of the General Data Protection Regulation.

 

 

1.3 Personal data - What is it?

Personal data means any information of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person (data subject). An identifiable person is one who can be identified directly or indirectly, in particular by reference to an identification number or to other factors specific to his or her physical, physiological, mental, economic, cultural or social identity.

 

 

1.4 Personal Data - What data do we collect?

 

The company [COMPANY NAME] collects and processes the personal data necessary to provide its services or to manage your contacts with us. We may also receive your personal data from our suppliers who provide services to you on our behalf, from our partners or from third parties who act on our behalf (for example, travel agents or other entities who book a ticket for you).

 

For more information on sharing your data with other entities, please see the section "UNDER WHAT CIRCUMSTANCES IS DATA COMMUNICATED TO OTHER ENTITIES?" below.

 

In this sense, your personal data may include, in particular, your name, your identification and contact details or other data (for example, your booking number) or information about how you use our Site, or how you interact with us.

 

The company [COMPANY NAME] also collects location data, with the prior consent of the Customer, without prejudice to compliance with applicable legal regulations.

 

The company [COMPANY NAME] is particularly concerned about protecting the rights of minors, so the collection of personal data from minors under the age of 18 is dependent on the consent of their parents/guardians. To this end, when collecting data from minors, the email address of the parents/guardians will be requested in order to confirm that they consent to the processing of the personal data of the minors in question.

 

 

1.4.1 Categories of personal data we process

 

Your name and contact details (e-mail address, telephone number and postal address).
Some personal data must be provided, so if this data is missing or insufficient, [COMPANY NAME] will not be able to provide the product or service in question. In these cases, the customer or user will be duly informed of the obligation to provide this data in order to continue the process. 

 

- When you book a ticket

 

- When you make purchases in the online store

 

- Information about your reservations, if you need specific assistance. This information may include any changes to your ticket reservations.
 

- When you book your ticket or manage your experience at [COMPANY NAME].

 

- When you store in the online store

 

- Information about your health, if you have a medical condition that may affect your experience (see "Special Categories of Data" below for more information on this) when you provide us with this information.

 

- Geolocation data when you use the search/booking services on our website, if you have such functionality enabled on your devices and with your consent, in order to speed up the process of searching and booking tickets or in the online store.

 

- Information about other visitors to your booking, including the ages of any children accompanying you. 

 

- When you make a booking on behalf of other visitors (if you book a ticket on behalf of someone else, you must have that person's consent to use their personal data. In the case of visitors under the age of 18, consent must be given by their parental guardians). 

 

- Information about your transaction, including your payment card details 

 

- When you purchase products or services from [COMPANY NAME]

 

- The communications you exchange with us (for example, your e-mails, letters or calls to [COMPANY NAME]) 

 

- When you contact [COMPANY NAME] or are contacted by [COMPANY NAME]

 

- Your posts and messages on social media directed at [COMPANY NAME] 

 

- When you interact with us on social media

 

- Your opinion of us when you take part in our surveys/satisfaction questionnaires

 

- Information about how you use the website, apps or other platforms 

 

- When you use our website

 

 

1.4.2 Special Categories of Personal Data

 

In providing our services, we may collect information that may reveal your racial or ethnic origin, data concerning your health, religious beliefs or criminal offenses, as well as biometric data. Such information is considered "special categories of data" under the General Data Protection Regulation.
We only collect this information if you have given us your explicit consent, if it is necessary due to a legal obligation imposed on [COMPANY NAME], or if you have made it manifestly public.

 

For example: we may collect this information for your safety when you have a specific health condition that you need to inform us about; if you need special assistance during a visit, which may reveal information about your health (for example, if you use a wheelchair); if you inform us about specific dietary requirements, this could potentially indicate that you have certain religious beliefs.

 

 

1.4.3 Data collected by third parties

 

Browsing data (e.g. browser type, operating system, website domain of origin, pages viewed, geographical origin of the session) is collected automatically (i.e. without registration) by third parties (e.g. Google Analytics).

 

 

1.4.4 Images taken at public events

 

We may sometimes collect non-individualized images of our visitors in the context of public events, pursuant to Article 79(2) of the Civil Code and Article 6(1)(f) of the GDPR. 

 

The image will not be reproduced or used if this results in damage to the honor, reputation or simple decorum of any of the people portrayed.
 

If you do not wish your image to be taken in this context, you should inform your nearest employee.

 

 

1.5 What are the purposes for collecting your personal data?

 

The personal data of [COMPANY NAME]'s clients is generally used in the context of the provision and management of the services contracted or booked, as well as for the study, improvement and adaptation of the services to the Client's needs and interests, namely to speed up the processes of booking tickets or purchasing [COMPANY NAME]'s products.

 

The Customer may, however, provide their personal data for other purposes, such as to receive institutional information from [COMPANY NAME], to take part in competitions and market research, to receive marketing communications (namely campaigns and promotions about our services and products), as well as in the context of sending complaints and suggestions.

 

In this sense, we use your personal data for the following purposes:

 

 

1.5.1 To manage your reservations and provide our services

 

When you visit us, we use the above information to provide our services in relation to your ticket, for example, to issue tickets and manage your experience.

 

 

1.5.2 To communicate and manage our relationship with you

 

Occasionally, we may contact you by email and/or SMS for administrative or operational reasons, for example in order to send you confirmation of your reservations, purchases and your payments or to inform you of changes to your visit and tickets or products.

 

As these communications are not carried out for marketing purposes, you will continue to receive them even if you have opted out of receiving marketing communications.
We will also use your personal data to respond to your requests, suggestions or contacts, to improve our services and your experience as a customer of [COMPANY NAME].

 

 

1.5.3 To inform you about news and offers of interest to you

 

We may send you marketing communications if you have indicated that you wish to receive them, for example when you make a reservation with us at [WEBSITE URL]/tickets if you choose to receive these communications.

 

If you agree to receive marketing communications, we will send you newsletters with news from us or offers you may like. Such offers may include information about our tickets and other associated products.

 

Email tracking data is collected in order to monitor action performance and tailor content. This email data will only be stored for as long as you keep your subscription active. Please note that we do not share your personal data with other companies for marketing purposes, unless we have your consent to do so.

 

 

1.5.4 To improve our services and fulfill our administrative and commercial objectives

 

The business purposes for which we use your information include accounting, billing and auditing, fraud analysis, security, legal and procedural purposes, statistical studies, as well as systems development and maintenance

 

1.5.5 To comply with our legal obligations

 

 

1.5.6 For statistical analysis

 

The page navigation data collected is used for statistical analysis and is studied using associated companies (e.g. Google Analytics) in order to monitor the level of interest in our Site and to improve its performance and adjust content. This same browsing data can be used to create target audiences to show your content, sponsored or not, through Google Ads, making the right match and of interest to the user, based on previous interests, location, language or demographics.

 

 

1.5.7 To offer online services

To simplify the use of our online services or applications, we may analyze the data we collect regarding the use of digital media and combine it with information collected through cookies and similar technologies. The data collected serves, for example, to find out which digital channel (email, social media) or device (desktop, tablet or mobile) you prefer, so that we can focus our communication on that channel or device.

 

 

1.6. How long will your personal data be kept?

 

The personal data collected is processed in strict compliance with the applicable legislation and stored in specific databases created for this purpose.

 

The length of time for which the data is stored varies according to the purpose for which the information is used. There are, however, legal requirements that oblige data to be kept for a certain period of time. Therefore, and whenever there is no specific legal requirement, the data will only be stored and kept for the period necessary for the purposes for which it was collected, as identified above.

 

The retention periods for each type of data are as follows:

 

Video surveillance images 
- 30 days

 

Images from "Photo and Video" services
- 30 days

 

Data collected for booking management 
- For as long as the data is needed

 

Group booking data
- 1 year

 

Billing data
- 10 years

 

E-mail address for sending commercial information
- 50 years, or until consent is revoked

 

1.7 What rights do data subjects have?

 

Under the terms of the applicable legislation, the data subject may request, at any time, access to personal data concerning them, as well as their rectification, erasure or restriction of processing, the portability of their data, or object to their processing (with the exception of data strictly necessary for the provision of the service), by means of a written request addressed to the company [COMPANY NAME] to the email address [EMAIL] or to the address: [ADDRESS].

 

You will be able to obtain confirmation of which personal data concerning you is being processed, as well as access to it, and a copy of the data processed by [COMPANY NAME] will be made available to you if you request it.

 

Under the terms of the law, you are also guaranteed the right to withdraw your consent to the processing of the data whose consent constitutes the basis for the legitimacy of the respective processing. To this end, you have the right to withdraw your consent at any time, which does not, however, invalidate the processing carried out up to that date on the basis of the consent previously given. The customer or user may also request the deletion of their personal data at any time, under the terms of the law.

 

They also have the right, under the terms of the applicable legislation, to request the restriction of processing or the portability of their data, provided the legal conditions are met. To this end, you should submit a request to the contacts mentioned above. Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with the CNPD or another competent supervisory authority under the terms of the law, if they consider that their data is not being processed legitimately by [COMPANY NAME], under the terms of the applicable legislation and this Policy.

 

 

1.8. Users of the [WEBSITE URL] page

 

This Privacy Policy applies in full to all users of the [WEBSITE URL] Page. However, given the specificity inherent in the use of a web page, it is important to regulate some particularly relevant issues in this area.

 

Notwithstanding the security measures adopted by [COMPANY NAME], we would like to warn all our Customers and users that when accessing the Internet they should regularly take precautions and adopt additional security measures in this area, namely by using an up-to-date computer and browser, and safeguarding the use of shared computers, as well as access to their personal Customer accounts, by not sharing their access data with third parties.

 

The company [COMPANY NAME] does not assume any liability arising from the use of personal data that is uncertain, incomplete or not up to date, made available by users and provided that it is not informed of its correction or updating The company [COMPANY NAME] will, however, take the appropriate measures within its reach so that inaccurate data, taking into account the purposes for which it is processed, is erased or rectified without delay.

 

As the Internet is an open network, the data circulating on it may be seen and used by third parties, so [COMPANY NAME] can only guarantee the security of the data stored internally and owned by it.

 

We offer security in the use of our Platforms through SSL (Secure Socket Layer) technology, which consists of encrypting the communications produced between your personal computer and the server, so that they cannot be intercepted.

 

The payment pages provided on our [WEBSITE URL]/tickets page are the responsibility of the respective entity: Ifthenpay, so the processing of your credit or debit card data is collected by them. The company [COMPANY NAME] does not have access to your credit/debit card data.

 

 

1.9 Cookies and other tracking technologies

 

For more information about cookies and how [COMPANY NAME] uses them on its website, see the Cookies Policy tab.

 

 

1.10. What security measures does [COMPANY NAME] take?

 

COMPANY NAME] is committed to ensuring the confidentiality, protection and security of its Customers' personal data by implementing appropriate technical and organizational measures to protect their data against any form of improper or unlawful processing and against any accidental loss or destruction of this data. To this end, we have systems in place to guarantee the security of the personal data processed, creating and updating procedures to prevent unauthorized access, accidental loss and/or destruction of personal data, undertaking to comply with the legislation on the protection of Customers' personal data and to process this data only for the purposes for which it was collected, as well as guaranteeing that this data is processed with appropriate levels of security and confidentiality.

 

Because we recognize the sensitivity of this information, we have drawn up and disseminated a Personal Data Protection Policy to all our employees, in order to ensure that they are aware of their obligations in this area. In order to ensure that our employees are constantly made aware, we have also carried out training sessions for them, and they undertake not to disclose to third parties or use for purposes contrary to the law any personal information about [COMPANY NAME] customers which they become aware of in the course of their duties.

 

 

1.11. Under what circumstances is data communicated to other entities?

 

[COMPANY NAME] uses other entities to provide certain services. The provision of these services may involve access by these entities to the personal data of their Clients.

 

Therefore, any subcontractor of [COMPANY NAME] will process the personal data of our Clients, in the name and on behalf of [COMPANY NAME], following our instructions. COMPANY NAME] ensures that such processors provide sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing meets the requirements of applicable law and ensures the security and protection of the rights of data subjects, in accordance with the terms of the processing agreement concluded with said processors.

 

[COMPANY NAME] may also transmit its Clients' personal data to third parties when it considers such data communications to be necessary or appropriate:

 

(i) in the light of applicable law,
(ii) in compliance with legal obligations/court orders, or
(iii) to respond to requests from public or governmental authorities.

 

In any of the above situations, [COMPANY NAME] undertakes to take all reasonable steps to ensure the effective protection of the personal data it processes.

 

 

1.12. Under what circumstances may your data be subject to International Transfers?

 

The provision of services by [COMPANY NAME] may involve the transfer of your personal data to third countries (which do not belong to the European Union or the European Economic Area).

 

In such cases, [COMPANY NAME] will implement the necessary and appropriate measures under applicable law to ensure the protection of personal data subject to such a transfer, strictly complying with the legal provisions regarding the requirements applicable to such transfers, including informing Customers in this regard.

 

 

1.13. Links to other websites

 

The [WEBSITE URL] Page may contain links to other websites on the Web. COMPANY NAME] is not responsible for the privacy practices or the content of other websites.

 

 

1.14. Contact us

 

You may contact [COMPANY NAME] for further information on the processing of your personal data, as well as any questions relating to the exercise of the rights granted to you by applicable legislation and, in particular, those referred to in this Privacy Policy, through the following contacts:

e-mail: [EMAIL]
Address: [ADDRESS]