This privacy policy describes the personal data collected or generated (processed) as a client or a provider of the different companies for CONGRESOS Y TURISMO DE SEVILLA, S.A. It also spells out how your personal data are used, shared and protected, what are the options as for your personal data, and how you can get in contact with us.

WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

The personal data controller is CONGRESOS Y TURISMO DE SEVILLA, S.A. (hereinafter “the COMPANY) with Tax Id. Number A-90109729 and whose contact details are:

Address: Avda. Alcalde Luis Uruñuela, 1, 41020 Sevilla

Email: dpg@fibes.es

WHAT PERSONAL DATA DO WE COLLECT AND WHEN?

• Clientes y Proveedores: para proporcionarle los servicios y/o productos que solicite, le pediremos ciertos datos personales como cliente o representante legal del cliente. Como proveedor de servicio de la EMPRESA, le pediremos ciertos datos personales como proveedor o representante legal de este.
• Clients and Providers: in order to provide you with the services and/or products required, we will ask you for certain personal data as a client or a client’s legal representative. As a service provider for the COMPANY, we will ask you for certain personal data as a provider or a provider’s legal representative.
• Mautic marketing campaign contacts: marketing activities in connection with events organized in CONGRESOS Y TURISMO DE SEVILLA, S.A., so certain data as a client will be required.
• Video surveillance: video recording to ensure security.

These personal data can be:

• Contact details, including name, e-mail, telephone number, and delivery and invoicing address.
• Access and account information, including username, password and single user ID.
• Personal data, including sex, birthplace, birth date and purchase history.
• Payment information or credit card.
• Images, photos and video.
• Marketing campaigns.

If you are a current client of the COMPANY, we are entitled to use the contact details that you provided to send you marketing communications about the COMPANY’s similar products or services, as long as the applicable laws allow it (unless you have renounced it). In other cases, we will request your consent to send you marketing information.

OTHER PURPOSES

We can also use your personal data for other purposes and, to this effect, we will provide you with specific notice when collecting them and we will request your consent when necessary.

LEGITIMACY

For your personal data management, our legal framework depends on how you interact with the COMPANY.

• Clients and providers: in the service contract.
• Fibestickets clients: ticket sale service provision.
• Mautic marketing campaign contacts: information about events.
• Video surveillance: video recording.

TRANSFER OF YOUR PERSONAL DATA

The COMPANY can communicate your personal data to:

• Companies of CONGRESOS Y TURISMO DE SEVILLA, S.A. and related companies for other purposes and under the conditions described above.
• Third parties that provide personal data processing service on behalf of the COMPANY, for instance, operating a part of the contracted service, as well as managing certain services and functions. When services provided by third parties are used, we will agree on their obligation to establish technical and organizational measures to protect your personal data.
• Other third parties to the extent necessary in order to: (i) comply with a request from the government, a court order or applicable law; (ii) prevent illegal use of our Web Pages; (iii) defend ourselves against third parties’ claims; and (iv) help fraud prevention and investigation (for example, falsification).

We can also transfer the personal data that we keep about you if we sell or transfer all or part of our business or assets (including the case of reorganization, division, dissolution or liquidation).

PROTECTION AND MANAGEMENT OF YOUR PERSONAL DATA

We use a range of technical and organizational measures, including authentication tools, to keep your personal data secure.

INTERNATIONAL TRANSFER OF YOUR PERSONAL DATA

The personal data that we collect (or process) in the framework of our processing and Web Page systems can be stored in countries outside of the European Economic Area (EEA). The laws in those countries may not offer the same data protection level as the laws applicable in the country in which you initially provided your data. Nevertheless, when we transfer your personal data to recipients in other countries, including the USA, we will protect those personal data as described in this Privacy Policy and in compliance with the applicable laws.

TIME WE KEEP YOUR PERSONAL DATA

Your personal information will be kept during the time necessary to carry out the fulfillment of the purposes established in this privacy policy (unless the law demands a longer period to keep it). In general, this involves us keeping your personal data while you hold a relationship with the COMPANY. For the personal data related to the responsibility of the service provided, we will keep the data longer in order to comply with legal obligations.

YOUR RIGHTS REGARDING YOUR PERSONAL DATA

You have the right to: (i) access your personal data; (ii) get an electronic copy of your personal data (portability); (iii) correct your personal data if they are incomplete or are wrong; (iv) eliminate or restrict your personal data under certain circumstances offered by law. These rights are not absolute. After obtaining your consent to process your personal data, you have the right to withdraw such consent at any time.

If you wish to request a copy of your personal data or exercise any of your other rights, please get in contact with the COMPANY by:

• Writing to the COMPANY, Avda. Alcalde Luis Uruñuela, 1, 41020 Seville with the subject “DATA WITHDRAWAL” or “BAJA DE DATOS”.
• E-mail to dpg@fibes.es with the subject “Privacy Policy” or “Política de Privacidad”.