Privacy Policy of the Website www.bandontherunproductions.com

I. Privacy and Data Protection Policy

In compliance with current legislation, Band on the Run Productions (hereinafter referred to as the Website) commits to adopting the necessary technical and organizational measures, in accordance with the appropriate level of security for the risk associated with the collected data.

Laws incorporated into this privacy policy

This privacy policy adheres to Spanish and European regulations concerning the protection of personal data on the internet. Specifically, it complies with the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of individuals concerning the processing of personal data and the free movement of such data (GDPR).
• Organic Law 3/2018, dated December 5, on the Protection of Personal Data and the guarantee of digital rights (LOPD-GDD).
• Royal Decree 1720/2007, dated December 21, approving the Regulations for the development of Organic Law 15/1999, dated December 13, on the Protection of Personal Data (RDLOPD).
• Law 34/2002, dated July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the controller of personal data

The controller of the personal data collected on the Band on the Run Productions website is: [Controller’s Name], with Tax ID: [Controller’s Tax ID]. The contact details are as follows:

Address: [Controller’s Address]

Collection of Personal Data

In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by Band on the Run Productions through the forms on its pages will be incorporated into our file. This data will be processed in order to facilitate, expedite, and fulfill the commitments established between Band on the Run Productions and the User, or to maintain the relationship established in the forms that the User fills out, or to respond to a request or inquiry from the User.

Principles Applicable to the Processing of Personal Data

The processing of User’s personal data shall adhere to the principles outlined in Article 5 of the GDPR and in Article 4 and subsequent articles of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights:

• Lawfulness, fairness, and transparency: User consent will be required, with prior transparent information regarding the purposes for which personal data is collected.
• Purpose limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
• Data minimization: The personal data collected will be strictly necessary for the purposes for which they are processed.
• Accuracy: Personal data must be accurate and kept up to date.
• Storage limitation: Personal data will only be retained for as long as necessary for the purposes of processing.
• Integrity and confidentiality: Personal data will be processed in a way that ensures security and confidentiality.
• Proactive responsibility: The controller of personal data is responsible for ensuring compliance with the above principles.

Categories of Personal Data

The categories of data processed by Band on the Run Productions are limited to identifying data. No special categories of personal data, as defined in Article 9 of the GDPR, are processed.

Legal Basis for Personal Data Processing

The legal basis for processing personal data is the User’s consent. Band on the Run Productions commits to obtaining the explicit and verifiable consent of the User for the processing of their personal data for one or more specific purposes.

Data Retention Period

Personal data will be retained only for the minimum period necessary for the purposes of processing, and in any case, only for the following period: [Retention Period], or until the User requests its deletion.

Recipients of Personal Data

The User’s personal data may be shared with the following recipients or categories of recipients:

In the event that the controller intends to transfer personal data to a third country or international organization, the User will be informed at the time the personal data is collected about the third country or international organization to which the data is intended to be transferred, as well as the existence or absence of an adequacy decision by the Commission.

Personal Data of Minors

In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, only individuals over the age of 14 may provide their lawful consent for the processing of their personal data by Band on the Run Productions. If the individual is under the age of 14, parental or guardian consent is required, and such consent will only be considered lawful to the extent that it is authorized by the parents or guardians.

Security of Personal Data

Band on the Run Productions is committed to adopting the necessary technical and organizational measures to ensure the security of personal data and to prevent its destruction, loss, alteration, unauthorized access, or disclosure.

The Website has an SSL certificate (Secure Socket Layer) to ensure that personal data is transmitted securely and confidentially between the server and the User, using encryption.

However, due to the inherent risks of the internet and the potential for unauthorized access, Band on the Run Productions will promptly notify the User of any personal data security breach that may pose a high risk to the rights and freedoms of individuals.

User Rights

The User has the following rights, as recognized by the GDPR and Organic Law 3/2018:

• Right of access: The User has the right to obtain confirmation from Band on the Run Productions as to whether personal data concerning them is being processed and, if so, to access specific personal data and information about the processing.
• Right to rectification: The User has the right to have inaccurate or incomplete personal data corrected by Band on the Run Productions.
• Right to erasure (“right to be forgotten”): The User has the right to request the deletion of their personal data when it is no longer necessary for the purposes for which it was collected, or when the User withdraws their consent, among other grounds.
• Right to restriction of processing: The User has the right to limit the processing of their personal data in certain circumstances.
• Right to data portability: In cases where processing is carried out by automated means, the User has the right to receive their personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller, where technically feasible.
• Right to object: The User has the right to object to the processing of their personal data by Band on the Run Productions.
• Right not to be subject to automated decision-making: The User has the right not to be subject to automated individual decision-making, including profiling, unless there is a legal basis for such processing.

The User may exercise their rights by sending a written communication to the controller with the reference “GDPR-www.bandontherunproductions.com,” specifying:

• Name and surname of the User, along with a copy of their ID. In cases where representation is accepted, the same means of identification for the person representing the User, as well as the document proving the representation, will be required.
• Request detailing the specific reasons for the request or information to be accessed.
• Address for notifications.
• Date and signature of the applicant.
• Any documents supporting the request.

This request and any accompanying documents may be sent to the following address and/or email:

Address: Email:

Links to Third-Party Websites

The Website may include hyperlinks or links that provide access to third-party websites that are not operated by Band on the Run Productions. These third-party websites have their own privacy policies and are responsible for their own data files and privacy practices.

Complaints to the Supervisory Authority

If the User believes that there is a problem or a violation of current regulations regarding the processing of their personal data, they have the right to seek effective judicial protection and to lodge a complaint with a supervisory authority, in particular, in the State in which they have their habitual residence, place of work, or the place where the alleged violation occurred. In Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must have read and agreed to the conditions regarding the protection of personal data contained in this Privacy Policy and accepted the processing of their personal data for the purposes stated. The use of the Website implies acceptance of its Privacy Policy.

Band on the Run Productions reserves the right to modify its Privacy Policy at its own discretion, or due to changes in legislation, jurisprudence, or guidance from the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. It is recommended that the User periodically consult this page to stay informed about the latest changes or updates.

This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals concerning the processing of personal data and the free movement of such data (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights.

This Privacy Policy document for a website was created using a free online website privacy policy template generator on September 27, 2023.