Privacy Policy

1. Data controller

• Controller: [Full legal name or company] (“CICIBI”)
• Tax ID (NIF/VAT): [NIF / VAT number]
• Contact: [email protected]

2. What data we collect

We only process personal data in limited situations:

• Contact & booking. The Site's contact and booking actions open your own email client to write to us. When you email us, we receive your email address, your name (if provided) and the content of your message.
• Technical data. Our hosting provider may process basic technical information (such as IP address and browser type) in server logs for security and to deliver the Site.

We do not run our own advertising trackers or sell your data.

3. Purposes and legal basis

• To respond to your enquiries and manage booking requests — legal basis: your request / pre-contractual steps and our legitimate interest in replying.
• To operate, secure and maintain the Site — legal basis: our legitimate interest.
• To load optional third-party content (see the Cookie Policy) — legal basis: your consent, where required.

4. Third parties and processors

We rely on trusted third parties to run the Site. These may act as data processors or independent controllers under their own policies:

• Hosting / delivery: [Hosting provider, e.g. Vercel].
• Music playback: Spotify embeds, when you play a track — see Spotify's own privacy policy.
• Email: Proton Mail, used to receive your messages.

5. International transfers

Some providers may process data outside your country. Where that happens, transfers are covered by appropriate safeguards (such as Standard Contractual Clauses or an adequacy decision).

6. Retention

We keep email correspondence only for as long as needed to handle your request and any follow-up, and then delete or archive it in line with applicable limitation periods.

7. Your rights

You may exercise the following rights over your personal data: access, rectification, erasure, restriction, objection, and portability, and you may withdraw consent at any time. To do so, write to [email protected]. You also have the right to lodge a complaint with your competent data protection authority (in Spain, the AEPD).

8. Security

We apply reasonable technical and organisational measures to protect personal data against loss, misuse or unauthorised access. No method of transmission over the internet is, however, completely secure.

9. Changes

We may update this policy to reflect legal or technical changes. The “last updated” date above shows the current version.