Privacy Policy

1. Data controller

Owner: Fernando Fernández Ariza
Tax ID (NIF): 79017940Z
Address: C/ Río Guadalbarbo 4, 3.ºA, Las Lagunas, Mijas (Málaga), Spain
Email: hola@conciertosmalaga.com
Website: ConciertosMálaga.com

2. Data we collect

User account. When you create an account on ConciertosMalaga we collect the following personal data:

• First and last name
• Email address
• Phone number
• Town/city of residence
• Instagram username (optional)
• Password (stored encrypted with bcrypt; never in plain text)
• IP address and date/time of consent
• Photos, videos and text you voluntarily upload
• Profile photo (optional)

Email alerts. If you subscribe to concert alerts we only collect your email address and the preferences you set (area, music genre, price). You can unsubscribe from the link in any email you receive.

Contact form. If you write to us through the site we collect your name, email and the message you send, solely to reply to you.

Publishing a concert or artist profile. These actions are done from your user account, so they are governed by the same data described above.

Like any web server, we also automatically log IP address, browser and pages visited for security purposes and aggregated statistics (without identifying individuals).

3. Purpose of processing

• Account management: creating and maintaining your profile, validating access and letting you use the platform's features.
• Concert alerts (only if you subscribe): emailing you when a concert matching your preferences is published.
• User support: answering your queries via the contact form.
• Communications and giveaways (only with your consent): sending you concert news, exclusive giveaways and platform-related notices.
• Publishing content (only if you've granted image rights): publishing your photos and videos on the site and on ConciertosMalaga's social media, after moderation and approval.
• Security: preventing unauthorised access and detecting fraudulent use.

4. Legal basis

We process your data on the basis of your consent (GDPR art. 6.1.a), given when you register, subscribe to alerts or submit the contact form. Optional consents (communications and image rights) are independent and do not condition your access to the platform.

5. Data retention

We keep your data while your account is active or, for alerts, until you unsubscribe. If you request account deletion or unsubscribe from alerts, we will block and then delete your data within the periods set by applicable law. Content you've previously published may be kept in anonymised form. Contact-form messages are kept only as long as needed to handle your enquiry.

6. Sharing data with third parties

We do not share your personal data with third parties, except where legally required. Note that content you approve for publishing on social media (Instagram, Facebook) will be published on those platforms, subject to their own privacy policies.

7. Your rights

You can exercise the following rights at any time:

• Access: obtain a copy of your data.
• Rectification: correct inaccurate data.
• Erasure (right to be forgotten): request deletion of your account and data.
• Objection: object to processing in certain circumstances.
• Restriction: request that we suspend processing.
• Portability: receive your data in a structured format.

You can exercise these rights by writing to hola@conciertosmalaga.com or from your account panel at /mi-cuenta (Spanish only).

If you believe your rights have not been met, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Minimum age

Use of ConciertosMalaga is permitted for people aged 14 or over, under Spanish law (LOPDGDD art. 7). By registering you declare that you are at least 14 years old.

9. Security

We apply technical security measures: passwords encrypted with bcrypt, expiring tokens, protected sessions, access control and prior moderation of all published content.

10. Cookies and third-party advertising

ConciertosMalaga uses first- and third-party cookies for the site to work properly, to analyse traffic and to serve ads:

• Essential cookies: needed for the site to function (user session, preferences, favourites).
• Analytics cookies: we use Google Analytics to measure site usage in an aggregated, anonymous way.
• Advertising cookies: we show ads through Google AdSense.

Google, as a third-party vendor, uses cookies to serve ads on this site. Use of the DART cookie and other advertising cookies lets Google and its partners show ads based on your visits to ConciertosMalaga and/or other sites.

You can opt out of personalised advertising via Google Ads Settings, or disable third-party vendor cookies at www.aboutads.info/choices. You can see how Google handles data on its partner sites at policies.google.com/technologies/partner-sites. You can also manage or block cookies from your browser settings.

11. Changes to this policy

We may update this policy. When we do, we'll notify you by email if the change is significant. The current version is always available on this page.