EN | ES | DE | IT | FR
TITOS Logo

WEBSITE PRIVACY POLICY

Please read this policy carefully. In it you will find important information about the processing of your personal data and the rights granted to you under current applicable regulations.

We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with any legislative or case-law changes. If you have any questions or need clarification regarding our Privacy Policy or your rights, you can contact us through the channels indicated below.

In general, the fields on our forms marked as mandatory must necessarily be completed in order to process your requests.

1. Who is responsible for processing your data?

The controller responsible for processing the personal data collected on this website is B.C.M. DISCO EMPIRE S.A., (hereinafter, BCM), with registered address at Carrer de Calçat 4, 2nd Floor, Door 1. 07011 Palma de Mallorca (Balearic Islands).

You can contact our Data Protection Officer at gdpr@grupocursach.com

2. For what purposes will we process your data and on what legal basis?

Management of the relationship with clients and users, ticket sales and VIP reservations

We process the data that our clients and users provide in their inquiries and in the reservation or booking forms in order to handle their requests, provide the contracted services, or manage the sale and delivery of purchased products.

Data from transactions carried out on the website will also be processed for accounting and administrative management purposes and to comply with our legal obligations regarding accounting and tax matters.

These processing activities are necessary for the performance of the contract or for the implementation of pre-contractual measures at the request of the data subjects.

You can find more information about the terms and conditions for ticket sales on our Legal Notice and Terms page. The personal data related to ticket sales comes from the transfer made by the ticket sales service. You can find additional information in the service provider's Privacy Policy.

Images or videos

Images and/or voices captured during videos and photographic reports made at our facilities will be processed for promotional and advertising purposes related to the services we offer and the activities we carry out.

This processing is legitimized on the following legal bases:

  • Focused videos/photos (Consent): In videos and photographic reports that focus on a specific person or group of people, the legal basis for the processing is their consent, expressed through the act of being recorded by the camera. You may withdraw your consent by contacting us at gdpr@grupocursach.com.
  • General shots (Legitimate Interest):In the case of videos and images that capture general or ambient shots, in which the image of individuals appears merely incidental, the legal basis for the processing is BCM's legitimate interest in informing the general public about its activity.
    • The processing is carried out under Art. 8.2.c) of Organic Law 1/1982.
    • It is compatible with the reasonable expectations of the data subjects (public spaces, informational signage).
    • It is proportionate and the intrusion is limited (incidental image, no sensitive data).

Administration and management of website security

We process browsing data (IP addresses or logs) to administer and manage the security of the website. This processing is based on our legitimate interest in ensuring the security of the website (Recital 49 of the GDPR), corresponding to widely accepted security practices.

Statistical and quality management purposes

We produce statistics based on aggregated data obtained from transaction data and from browsing data on the website (e.g. IP address, weblogs, pages visited). This processing is based on our legitimate interest in evaluating and managing the quality of our services and products.

Sending commercial communications

We process identifying and contact data in order to send communications relating to our activities, products, and services. We carry out simple segmentation (market or language) without creating complex commercial profiles.

This processing is based on the consent requested from you. Not giving your consent, or withdrawing it, does not affect the processing of your order.

You may unsubscribe from processing for commercial purposes at any time by clicking the link provided for that purpose in our communications or by sending an email to: tickets@grupocursach.com

Job application forms

We process candidates' data to manage their participation in our selection processes and to build a talent pool. If you do not wish to be part of our talent pool, you can let us know at gdpr@grupocursach.com.

The categories of data processed are:

  • Identifying and contact data (national ID/foreigner ID number, name, address, photo, etc.).
  • Personal aspects (skills).
  • Personal characteristics (nationality).
  • Academic and professional data.
  • Hobbies or interests.
  • Existence of a disability and its degree (if applicable).
  • Data generated by the process (interviews, tests).

The inclusion and retention of your CV in our talent pool is based on our legitimate interest in optimizing our selection processes. CVs will be deleted one year after their inclusion.

3. Who may we share your data with?

Your data will only be shared with third parties where there is a legal obligation to do so, with your consent, or when your request necessarily entails such disclosure.

4. How long will we keep your data?

In general, we will retain your data for the duration of the relationship you maintain with us, and in any case for the periods established under applicable legal provisions (e.g. accounting and tax regulations) and to address any potential liabilities.

We will delete your data once it is no longer necessary or relevant. Data used for commercial communications will be kept for as long as you do not request its deletion.

5. What are your rights?

You have the right to obtain confirmation as to whether we are processing your data, to access it, and to request its rectification or deletion when it is no longer necessary.

Under certain circumstances, you may request the restriction of processing, object to it (for reasons related to your particular situation), or request the portability of your data.

You may withdraw the consent given without affecting the lawfulness of processing prior to its withdrawal, and file a complaint with the Spanish Data Protection Agency (www.aepd.es).

To exercise your rights: