Privacy Policy

1. Data controller

The data controller responsible for the processing of your personal data on this website is:

2. What data we collect

We only collect the data you actively provide to us:

• — Email address — when you subscribe to our events newsletter via the contact form on the homepage.

We do not collect names, phone numbers, payment details, or any other personal data unless you voluntarily provide them by contacting us directly.

3. Purpose and legal basis

4. Third-party processors

We use a small number of trusted third-party services to operate this website. Each acts as a data processor under a data processing agreement:

• — Notion (Notion Labs, Inc., USA) — stores subscriber email addresses. Data is transferred to the USA under Standard Contractual Clauses. Privacy policy ↗
• — Make (Celonis SE, Germany) — automation platform that receives form submissions and forwards them to Notion. Privacy policy ↗
• — PostHog (PostHog Inc.) — product analytics. Data is stored on EU servers (eu.posthog.com) and only activated after your cookie consent. Privacy policy ↗
• — Google Analytics (Google Ireland Ltd.) — audience analytics. Only activated after your cookie consent. Data may be transferred to the USA under Standard Contractual Clauses. Privacy policy ↗
• — Vercel (Vercel Inc., USA) — website hosting. Processes server logs (IP addresses, browser information) for security and performance purposes. Data is transferred to the USA under Standard Contractual Clauses. Privacy policy ↗

5. Data retention

We retain your email address for as long as you remain subscribed to our events updates. There is no fixed expiry — your data is kept solely for the purpose of keeping you informed about Vilanga events. You can unsubscribe and request deletion at any time by contacting us at hola@vilanga.com, after which your data will be deleted promptly.

6. Cookie policy

We use cookies and similar technologies only after you have given your explicit consent via the banner shown on your first visit.

You can withdraw your cookie consent at any time by clearing your browser's local storage or cookies, or by contacting us.

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• —Access — request a copy of the data we hold about you.
• —Rectification — ask us to correct inaccurate data.
• —Erasure — ask us to delete your data ("right to be forgotten").
• —Restriction — ask us to limit how we process your data.
• —Portability — receive your data in a machine-readable format.
• —Objection — object to processing based on legitimate interest.
• —Withdraw consent — at any time, without affecting prior processing.

To exercise any of these rights, contact us at hola@vilanga.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority: AEPD (aepd.es) ↗.

8. Changes to this policy

We may update this policy from time to time. The date at the top of the page always reflects the most recent version. For significant changes, we will notify active subscribers by email.