Privacy policy

1. Who is responsible for your data

Data controller

Sergio Mendoza Valenzuela

Activity or name used

Ensemble Harmion

Email

info@ensembleharmion.es

2. What data we may process

The website does not currently have user accounts, a private area or newsletter subscriptions. Data may be received through the contact form, email or other expressly indicated means.

Depending on the content of the enquiry, we may process:

• The first name and surname of the contact person.
• Email address and, where applicable, the telephone number provided by the data subject.
• Event information: date, town or city, venue, timetable, type of ceremony or event and the musical line-up requested.
• Data needed to prepare a quotation, booking, contract or invoice.
• The content of messages and communications exchanged with the data subject.

We do not request through this website any specially protected data, such as health information, ideology, religion or sexual orientation. We ask you not to include that type of information in an enquiry unless it is strictly necessary and has been agreed in advance.

3. What we use the data for

The data will be used to:

• Answer questions about services and availability.
• Prepare musical proposals and quotations tailored to the event.
• Organise meetings, repertoire, timetables, travel arrangements, technical requirements and the other aspects of a performance.
• Manage bookings, contracts, payments, invoicing and administrative obligations where a booking takes place.
• Keep the communications needed to prove what was agreed and to deal with any issues that may arise.
• Protect the website and detect misuse through the strictly necessary technical logs of the hosting service.

We will not use the data received to send regular advertising, create commercial profiles or add a person to a mailing list without first asking for consent.

4. Legal basis

When a person requests availability, a quotation or information for a possible performance, the processing is necessary to respond to that request and to take steps prior to a possible booking.

If a performance is ultimately booked, the data will be processed to carry out what has been agreed and to comply with the corresponding legal, administrative, accounting and tax obligations.

General enquiries that are not directly linked to a contract may be handled on the basis of the legitimate interest of Ensemble Harmion and of the sender in maintaining communication related to the musical activity.

Where a specific purpose requires consent, for example publishing an identifiable individual photograph or sending regular promotional communications, this will be requested separately.

5. How long we keep the data

Enquiries that do not lead to a booking will be kept for the time reasonably needed to respond and close the conversation. As a general criterion, they may be deleted or reviewed twelve months after the last communication.

Where there is a booking, the data and documents will be kept for the duration of the relationship and afterwards for the periods required by the applicable tax, accounting, contractual or liability rules.

Technical hosting security logs will be kept for the period configured by the provider or for the time strictly necessary to investigate incidents.

6. Who may access the data

Members of Ensemble Harmion who need to know the information in order to prepare or carry out the performance may access it. They must not use it for personal purposes or for purposes other than managing the service.

Necessary service providers may also be involved, such as:

• The website hosting and domain provider.
• The email provider.
• Professional advisory, accounting or invoicing services, where necessary.
• Banks or payment methods used to manage a payment or refund.

These providers must only process the data in order to provide the relevant service and in accordance with the applicable conditions and safeguards.

Data may be disclosed to public authorities, courts or other authorities where there is a legal obligation to do so.

Ensemble Harmion does not sell, rent or hand over databases to advertisers.

7. International transfers

No international transfers carried out directly by Ensemble Harmion are foreseen.

Some technology providers, especially for email or infrastructure, may operate from different countries. Before using those services, it should be checked that they offer a valid protection mechanism in accordance with the General Data Protection Regulation (GDPR).

8. Data relating to other people

If the person contacting us provides data relating to another person, for example the person responsible for the venue, a couple celebrating a ceremony or an organiser, they declare that they may communicate that data in order to manage the event and that they have informed that person where necessary.

Only the data strictly necessary to prepare the performance should be provided.

9. Data relating to children

This website is not intended to collect data directly from children. If a performance or enquiry concerns a minor, the communication should preferably be made by their mother, father, guardian or legal representative.

10. Photographs, videos and recordings

Booking a musical performance does not by itself authorise the publication of identifiable images of clients, guests, attendees or minors.

Where it is intended to use a photograph, video, testimonial or recording for promotional purposes, it will be checked that there is an adequate legal basis and, where necessary, a specific permission will be requested.

11. How to exercise your rights

You may request access, rectification, erasure, objection, restriction of processing or data portability by writing to:

info@ensembleharmion.es

In your request, you must indicate which right you wish to exercise and provide the information needed to locate your data. Additional identity documentation will only be requested where it is essential to verify identity and prevent another person from accessing your data.

If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency.

12. Security

Reasonable measures will be applied to prevent unauthorised access, loss, alteration or improper disclosure of data. Access to emails and management documents should be limited to those who need it and protected by suitable passwords and up-to-date systems.

No system connected to the Internet can guarantee absolute security, but any relevant incident will be assessed and managed in accordance with the applicable legal obligations.

13. Changes to this policy

This policy should be reviewed when web analytics, embedded videos, a booking platform, subscriptions, online payments or other functions are added that change the current processing.