Privacy and data protection policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, repealing Directive 95/46/EC (hereinafter RGPD), Law 34/2002 of 11 July, on information society services and electronic commerce (hereinafter, LSSI-CE) and the Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights, NIGHTEVOLUTION SA guarantees the protection and confidentiality of personal data of any kind provided by our customers, in accordance with the provisions of the General Regulation on the Protection of Personal Data. The Data Protection Policy of NIGHTEVOLUTION SA is based on the principle of proactive responsibility, according to which the Data Controller is responsible for compliance with the regulatory and jurisprudential framework, being able to prove it to the corresponding control authorities. The data provided will be treated in the terms established in the RGPD; in this sense, NIGHTEVOLUTION SA has adopted the legally required levels of protection, and has installed all the technical measures within its reach to avoid the loss, misuse, alteration, unauthorised access by third parties, exposed below. However, the user must be aware that Internet security measures are not impregnable.

Data controller: Who are we?

Name: NIGHTEVOLUTION SA
VAT NO: A67267831
Address: Calle Balmes, no 65 2o1a, 08007, Barcelona Telephone: 971198041
E-mail: informatica@amnesia.es

Data processing: What data do we process and what is their origin?

Depending on the relationship you may have with us, the following categories of personal data may be processed and data may be obtained from different sources:
Forms and contact calls: The data come from the data subject himself, or his legal representative. The categories of data to be processed are "Identifying data" (name, email and telephone). Request for quotations: The data originates from the data subject himself/herself, or his/her legal representative. The categories of data to be processed are "Identifying data" (name, e-mail, telephone). Provision of services or sale of products: The data comes from the data subject himself, or his legal representative. The categories of data to be processed are "Identity data" (name, e-mail, telephone, postal address) and "Financial data" (bank details).
Sending of commercial communications: The data comes from the data subject himself, or his legal representative. The categories of data to be processed are "Identity data" (name, e-mail, telephone, image). Express consent will be requested for this purpose.

Purpose of processing: What will we use your data for?

Contact forms: All the data provided by our visitors to the NIGHTEVOLUTION SA website will be included in the register of personal data processing activities, created and maintained under the responsibility of NIGHTEVOLUTION SA, essential to resolve any doubts or requests for information sent by our visitors.

Customer service: All data provided by our customers will be included in the register of personal data processing activities, created and maintained under the responsibility of NIGHTEVOLUTION SA, essential to provide the services contracted by our customers, as well as to resolve any doubts or questions they may have through our customer service channels. Web visitors: We carry out an anonymised monitoring of visitors to the NIGHTEVOLUTION SA website, in order to know which pages and services are most relevant to our potential customers. Bulletin products and services (newsletter): To customers who check the box of consent to send commercial communications / advertising, we will send information related to the products / services we offer. We will request your consent to be the recipient of promotions of our events by sending emails or newsletters according to your interests.
Your data may also be processed from time to time for other purposes, such as sending you targeted marketing materials or promoting Amnesia and our parties.

Legitimacy of processing: Why do we need your data?

a) Contractual relationship: This is the one that applies when you contract any of our services/products.
b) Legitimate interest: To deal with the queries and claims that you submit to us and to manage the collection of the amounts owed.
c) Your consent: If you are a user of our website, by ticking the box on the contact form, you authorise us to send you the necessary communications to respond to your query or request for information and to send you advertising with your prior consent.

Recipients: With whom do we share your data?

We disclose your personal data to those parties necessary for the purposes of the processing and to those parties to whom we are obliged to do so in order to comply with the law. In the event that, apart from the aforementioned cases, we need to disclose your personal information to other entities, we will ask for your prior permission through clear options that will allow you to decide in this regard.

Communication: Where can we send your data?

We will not make international transfers of your personal data for any of the above purposes.

Retention: How long will we keep your data?

We will only keep your personal data for as long as is necessary to achieve the purposes for which it was collected. In determining the appropriate retention period, we consider the risks involved in the processing, as well as our contractual, legal and regulatory obligations, internal data retention policies and our legitimate business interests as described in this Privacy Notice and Cookie Policy.
In this sense, NIGHTEVOLUTION SA will keep the personal data once its relationship with you has ended, duly blocked, during the period of prescription of the actions that could derive from the relationship maintained with the interested party.
Once blocked, your data will be inaccessible to NIGHTEVOLUTION SA, and will not be processed except to make them available to the Public Administrations, Judges and Courts, for the attention of possible responsibilities arising from the processing, as well as for the exercise and defence of claims before the Spanish Data Protection Agency.

Security: How will we protect your data?

We use all reasonable efforts to maintain the confidentiality of personal information processed on our systems. We maintain strict levels of security to protect the personal data we process against accidental loss and against unauthorised access, processing or disclosure, taking into account the state of technology and the nature and risks to which the data is exposed. However, we cannot be responsible for your use of the data (including your username and password) you use on our website. Our staff follow strict privacy standards and where we engage third parties to provide support services, we require them to abide by the same standards and to allow us to audit them for compliance.

Your rights: What rights can you exercise as a data subject?

We inform you that you may exercise the following rights:
a) Right of access to their personal data, to know which personal data are being processed and the processing operations carried out on them;
(b) the right to rectify any inaccurate personal data;
(c) the right to erasure of their personal data, where this is possible (e.g. by law);
(d) the right to restrict the processing of your personal data where the accuracy, lawfulness or necessity of the processing is in doubt, in which case we may retain the data for the purpose of pursuing or defending claims.
e) The right to object to the processing of your personal data, when the legal basis that enables us to process them is our legitimate interest. NIGHTEVOLUTION SA will stop processing your data unless it has a legitimate interest or it is necessary for the defence of claims, when this right applies.
f) The right to data portability, when the legal basis that enables us to process your data is the existence of a contractual relationship or your consent.
g) The right to revoke the consent given to NIGHTEVOLUTION SA.

To exercise your rights, you can do so free of charge and at any time by contacting us at the address Calle Balmes, no 65 2o1a, 08007, Barcelona, or by writing to informatica@amnesia.es.

Protection of rights: Where can you make a complaint?

In the event that you feel that your rights have been disregarded by our entity, you may file a complaint with the Spanish Data Protection Agency, by any of the following means:
E-Office: https://www.aepd.es
Postal address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid. Telephone: 901.100.099 and 912.663.517.
Making a complaint to the Spanish Data Protection Agency does not entail any cost and the assistance of a lawyer or solicitor is not necessary.

Updates: What changes may there be to this Privacy Policy?

NIGHTEVOLUTION SA reserves the right to modify this policy to adapt it to new legislation or jurisprudence that may affect its compliance.
In order to ensure compliance with the regulations on personal data protection, NIGHTEVOLUTION SA has received consultancy and advisory services from ClickDatos.

Audience Profile

Our policy is not to create a profile about you. However, in some specific cases, such as providing you with the best products and services, advertising-related cases or others, we will need to create data profiles about you. In those cases, we will use your shopping behaviours, your history of enjoyment of our services and our e-commerce to provide products, services and experiences that best meet the tastes and needs of our customers.
We will ensure that effective security measures are in place to protect your data from unauthorised use.