Security measures against covid-19

cerrar

The use of masks is mandatory at all times, at the entrance, exit and during the show.

At the entrance it will be mandatory to wash your hands with hydroalcoholic gel that will be made available to the public.

Respect the safety distance and follow the instructions of the staff to enter and exit the building.

Attend the event well in advance to avoid congestion.

Los asistentes deben permanecer sentados en sus butacas durante todo el espectáculo.

menu

Privacy policy

Who is responsible for the processing of your personal data?

Company name: CENTRO KURSAAL-KURSAAL ELKARGUNEA, S.A. (hereinafter, “KURSAAL”)
Company number: A20501185
Registered Office: Avenida Zurriola nº 1, 20002, San Sebastián (Gipuzkoa)
Registered at the Commercial Register of Gipuzkoa at Volume 2626, page SS 9292
Telephone number: 943003000
E-mail: kursaal@kursaal.eus

KURSAAL has its appointed Data Protection Officer. For contact, you could use the postal and e-mail addresses foreseen above or the following address: dpd@sayma.es. 

For what purposes do we process your personal data?

In accordance with the provisions of EU Regulation 679/2016, of the European Parliament and of the Council, of the 27th of April 2016 (hereinafter “GDPR”) and in accordance with the provisions of Law 3/2018, of the 5th of December, on the protection of Personal Data and guarantee of digital rights, we inform you that the personal data that you provide us with and any data generated during the development of KURSAAL‘s relationship with you will be processed for the following purposes:

  • Deal with requests made to KURSAAL.
  • Request a quote or apply for a congress or another type of event.
  • Provide you with information about the services provided by KURSAAL.
  • Sending communications by any means you have provided us with, related to the activities carried out by KURSAAL and which may be of your interest.
  • Respond to queries, complaints, and suggestions, and carrying out all kinds of communicative actions.
  • Establishment, development, fulfilment, and execution of a contract of sale or provision of service, or any other contract between you and KURSAAL.
  • Accounting, fiscal, and administrative management by KURSAAL.

For how long do we keep your personal data?

The personal data provided to KURSAAL will be kept for as long as their deletion is not requested by the person concerned, or whoever legally acts as their legal representative, and it is appropriate, and for as long as it is necessary – including the need to keep data during the legally applicable retention periods – or pertinent for the purpose for which the data was collected or recorded.

The conservation of the data will be conditional upon KURSAAL‘s legal obligation to conserve them. Once these periods have elapsed, the data will be destroyed or erased, proceeding to the deletion, elimination, or destruction of the data, so that the information contained in the media cannot be recovered. 

Legitimation

The legal basis for the processing of the data is the consent given by the data subject. This is obtained expressly and unequivocally by filling in and, where appropriate, sending the paper or electronic documents and forms in which your data is collected.

In all documents of KURSAAL used to collect data for the different purposes foreseen, there are informative clauses in accordance with the provisions of data protection regulations, and consent is expressly given by means of the signature of the person concerned, or by sending the existing forms on KURSAAL’s website.

Data processing is also legitimate when it is necessary for the performance of a contract, or for the provision of a service to be provided to the data subjects, to which they are party, or for the application, at their request, of pre-contractual measures (article 6.1. a) and b) RGPD).

KURSAAL is also entitled to process your data to comply with the legal obligations to which it is subject and for the satisfaction of legitimate interests, given that the interests or fundamental rights of the data subjects do not prevail over these.

Whatever the reason for legitimisation, consent may be revoked at any time.

To which recipients will your personal data be disclosed?

Your personal data will not be disclosed to any entity or third party without your consent, except for legally stipulated disclosures. To this regard, your express consent will be requested for the transfer of your personal data to any entity or third party.

For the management of the authorised purposes, your data may be communicated to entities or persons directly related to KURSAAL and with the services provided by it. Likewise, your personal information will be at the disposal of the Public Administrations, Judges and Courts, for the attention of possible responsibilities derived from the data processing and provided that these transfers are protected by law.

Your data may also be transferred to companies that provide KURSAAL with consultancy, computer maintenance, marketing, training, or auditing services. These entities only have access to the personal information that is necessary to carry out these services, being required by means of a “data processing order” contract to maintain confidentiality, not to use the information for other purposes and to adopt measures that guarantee the integrity and availability of this information.

No international transfers of data outside the European Union or to entities that do not comply with data protection standards in accordance with the provisions of the GDPR are foreseen.

How do we obtain your personal data?

The personal data processed by KURSAAL is provided by the data subject or by another person or entity. In the latter two cases, we remind you that it will be the person who provides the data to KURSAAL who must inform the person concerned of this transfer of data.

What categories of data does KURSAAL process?

KURSAAL will process the personal data provided by you, which may be of the following categories:

  • Identification and contact data.
  • Economic, financial and insurance data.
  • Commercial information.
  • Employment details.

What are your rights?

Any person shall have the right to obtain confirmation as to whether KURSAAL processes personal data concerning them or not.

Data subjects have the right to access their personal data and to obtain a copy of the personal data processed, to update it, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances and for reasons related to their situation, data subjects may object to the processing of their data.  In this case, KURSAAL will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.

Likewise, in certain circumstances foreseen in Article 18 of the GDPR, data subjects may request the limitation of the processing of their data, in which case KURSAAL will process them, except for their conservation, with the consent of the data subject, or for the formulation, exercise or defence of claims, or for the protection of the rights of another natural or legal person, or for important public interest reasons of the Union or of a specific Member State.

If applicable, because of the application of the right to object to the processing of personal data in the online environment, data subjects have the right to be forgotten according to the case law of the Court of Justice of the European Union.

According to the right to portability, data subjects have the right to obtain the personal data concerning them in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects, or significantly affects him or her, subject to the exceptions provided for in Article 22(1) of the GDPR.

The data subject has the right to the erasure of his or her data, due to the disappearance of the purpose for which the data were processed or collected, due to revocation of consent when this is the consent that legitimises the processing, or for other reasons contained in article 17 of the GDPR. Erasure will be carried out by the high-level erasure of data contained in automated media and the physical destruction of non-automated media.

How can rights be exercised?  

By means of a letter, always accompanied by a copy of the ID card, or another document that proves the identity of the interested party, addressed to the addresses indicated in the heading for the attention of the Data Protection Officer dpd@sayma.es

What avenues of complaint are available?

If you consider that your rights have not been duly addressed, you can file a complaint with the Spanish Data Protection Agency (AEPD), whose contact details are.

Telephone numbers: 901 100 099 / 91.266.35.17
Address: C/ Jorge Juan, nº 6, 28001, Madrid.
Web: www.aepd.es

Last actualisation date: January 2022