Privacy Policy and Data Protection

In compliance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD), we inform you how ESTEREO FACTORIA SL. processes your personal data.

1. Data Controller

ESTEREO FACTORIA SL.
Tax ID: B-65050700
Address: Carrer del Ter, 136, 08570 Torelló (Barcelona), Spain
Email: info@elmoscou.com

2. Purpose of Processing

a) Managing ticket purchases and event access control.
b) Fraud prevention and payment security through the Getnet Virtual POS (Banco Santander).
c) Compliance with legal obligations in tax, accounting and consumer matters.
d) Sending commercial communications about events and promotions, when the user has expressly authorized it.

3. Legal Basis for Processing

- Performance of a contract (ticket purchase).
- Compliance with legal obligations (tax and accounting).
- Legitimate interest in fraud prevention.
- Consent for marketing communications or the use of non-essential cookies.
You may withdraw your consent at any time.

4. Data Recipients and Data Processors

Data may be shared with:
• Banco Santander / Getnet, for the secure management of payments.
• Hosting providers, website maintenance services, and email service providers under data processing agreements.
• Public administrations when required by law.
No other disclosures will be made without prior consent.

5. International Data Transfers

As a rule, no data transfers are made outside the European Economic Area. If services located in third countries are used, the Standard Contractual Clauses approved by the European Commission and other appropriate safeguards will apply.

6. Data Retention Periods

- Purchase and billing data: retained for the legally required periods.
- Fraud prevention data: retained for the strictly necessary time.
- Marketing data: retained until consent is withdrawn.
Once the retention periods expire, the data will be securely blocked and deleted.

7. User Rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@elmoscou.com or by post to [full address].
A copy of your identity document must be attached.
You will receive a response within a maximum period of 1 month.
If you believe that the processing does not comply with the law, you may file a complaint with the Spanish Data Protection Agency (AEPD).

8. Minors

El Moscou’s services are not directed at persons under 14 years of age. If we detect data from minors without valid consent, it will be deleted immediately.

9. Data Security

The controller applies appropriate technical and organizational measures to ensure the confidentiality and integrity of data (encrypted connections, backups, and access controls).

10. Marketing Communications

You will only receive marketing communications if you have expressly authorized them. You may withdraw your consent at any time via the unsubscribe link or by emailing info@elmoscou.com.

11. Updates

The controller reserves the right to update this policy to adapt it to legal or service changes.
Last updated: 14/10/2025.