Under the Tree (“we”, “us”) respects your privacy and is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish data protection law (LOPDGDD 3/2018).This policy explains how we collect, use, and protect your information when you use our Website or purchase tickets.

Data controller for Under the Tree is Igor Tarnopolskyy, NIE: Z1677960-T, Plaza Cortes Valencianes, 46930, Quart de Poblet, Spain.  Email: info@underthetree.es Website: www.underthetree.es

We collect and process:

· Identification data: name and surname
· Contact details: email and phone number
· Records of our conversations and messages if you contact us or we contact you
· Technical data including IP address, browser type, device; your login data; operating system and platform

We do not collect payment information like credit card numbers or bank details. Payment is processed securely by a third-party payment provider, Stripe. You can access to Stripe privacy policy, here.

We process your personal data for the following purposes:

a) purposes related to the provision of our services (e.g., contacting us, subscribing to the newsletter, purchasing a ticket, etc.). In this case, the legal basis for processing is the provision of a service or responding to your request. Marketing communications, such as newsletters, are sent only with your prior consent or under the ‘soft opt-in’ legal basis when you are already a customer of our services, in accordance with Article 21.2 of the Spanish LSSI.

b) purposes of research/statistical analysis on aggregated or anonymized data, without any possibility of identifying the user, to measure the website’s performance, track traffic, and evaluate usability and interest;

c) purposes related to compliance with a legal obligation

d) purposes necessary to ascertain, exercise, or defend a right in legal proceedings or related to cases in which judicial authorities exercise their functions. In these last two cases, the processing of data is necessary to comply with a legal obligation.

You may choose not to provide your personal data; however, in this case it may be impossible to respond to your request or to fulfill a legal obligation to which I am subject.

We may share data with:

· Payment providers, ticket platforms, email delivery providers and social media platforms.

· Legal authorities, if required by law. We never sell personal data to third parties.

Some of your personal data may be transferred to recipients located outside the European Economic Area.
Where the country is covered by an EU adequacy decision, transfers rely on that decision.For transfers to countries without an adequacy decision, we ensure appropriate safeguards in accordance with the GDPR, such as the European Commission’s Standard Contractual Clauses, to protect your data to EU standards.

We keep personal data only as long as necessary to fulfil the purposes described or as required by law.

You have the right to:

· Access, rectify, or erase your data
· Restrict or object to processing
· Withdraw consent at any time
· File a complaint with the Spanish Data Protection Authority (AEPD)

To exercise your rights, contact us at: info@underthetree.es.

We take your privacy seriously. The Controller uses security measures to protect your information and prevent unauthorized access, disclosure, changes, or deletion.We process your data using computers and secure digital tools, following internal procedures that are directly related to the purposes explained in this policy.Sometimes, certain people who help run this website- such as admin, support, marketing, or technical staff-  may access your data. We may also share data with trusted external providers (for example, hosting services, IT support, email providers, or communication agencies). You can request an updated list of all third parties at any time by contacting the Controller.

 Your data is processed at the Controller’s offices and in any places where the people or companies involved in the processing are located.Depending on your location, your data may be transferred to another country. When this happens, we make sure the transfer complies with data protection laws.