Privacy Policy

Who this policy concerns

This notice concerns personal data used in connection with the Oceanbeat website, enquiries, bookings and events. Five Palm Entertainment S.L. is the company named in the existing website legal notice. Contact privacy@oceanbeat.es about privacy or info@oceanbeat.es for booking support. The postal contact is the address in the Legal Notice.

Enquiries and customer support

When you contact us, we use the details you provide, such as your name, email address, telephone number, message and booking reference, to respond and handle your request. The legal basis is taking steps towards or performing a contract where the enquiry concerns a booking, or our legitimate interest in answering other relevant enquiries. Do not send passwords, full card numbers or unrelated sensitive documents.

Bookings and payments

Booking information can include guest and contact details, the selected event and date, payment status and transaction references. This is used to manage the purchase, attendance and related support. Contract performance and applicable accounting or other legal obligations are the relevant bases.

Payment services process payment information under their own notices where they act as independent controllers. Follow the information displayed by the payment provider at checkout. This notice does not claim that Oceanbeat needs your complete payment-card details in a support message.

Event attendance and special requests

Information needed for check-in and attendance is used for that event. Tell us only what is necessary when asking about accessibility, dietary requirements or other special arrangements. If a request involves health information, its use requires an applicable basis for special-category data; a general marketing consent is not a substitute.

Marketing

Where required, marketing messages are sent only with your consent. Any legally permitted existing-customer marketing must provide an appropriate opt-out. You can unsubscribe using the message instructions or contact us. Service messages about a booking are different from advertising.

Photos and video

Event images may identify people. The purpose, legal basis and any relevant permission must be appropriate to the particular use. Participation does not automatically grant unrestricted commercial-image consent. Contact us if you wish to ask about, object to or request removal of an identifiable image, and provide the page or image reference.

Website use, cookies and external services

Technical data, such as an IP address and browser information, may be processed to deliver and protect the website. Optional analytics, advertising or embedded third-party services can involve additional data and cookies. Where consent is required, it must be obtained before the relevant processing; changing a browser setting is not a substitute for the website’s obligations.

Links to external sites lead to services with their own privacy information. Using WhatsApp or another external contact service also involves that provider’s terms and notice.

Who receives information

Information may be handled by service providers needed for hosting, bookings, payment, communications and customer support, and by event suppliers where necessary to deliver the selected service. Relevant information may also be disclosed to competent authorities where legally required. Personal data must not be made public merely because a booking has been paid.

Where information is transferred outside the European Economic Area, an applicable lawful transfer mechanism and safeguards are required. This notice does not promise that all providers store all data exclusively in Europe.

Retention and security

Data is kept for the purpose for which it was collected and for applicable legal retention periods, then deleted or anonymised when no longer needed. Booking and accounting records can require longer retention than a general enquiry. Appropriate technical and organisational safeguards are required; no system can be described as absolutely secure.

Your rights

Depending on the processing and applicable conditions, you can request access, correction, erasure, restriction or portability and object to processing, including direct marketing. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. Rights are subject to the applicable legal conditions.

Contact the privacy address with enough information to identify the request. Identity verification should be proportionate. You may complain to the Spanish supervisory authority, Agencia Española de Protección de Datos, or another competent authority.

Changes and additional notices

When a specific service introduces additional processing, the relevant information must be provided at that point. This website notice must reflect the actual services in use; archived references to unused apps, device sensors, contact-book access or social-network passwords should not be treated as current features.