Privacy Policy

In accordance with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), we inform:

Data controller: Jordi Corbatón — Kurba Events, NIF 40595642K, 17800 Olot, la Garrotxa (Catalonia, Spain).

Purpose: managing contact requests received through the web form to study your requirements and send a personalised proposal.

Data collected: name, email, phone, date and venue of the event, number of guests, musical preferences, and any details you choose to share. For security reasons we also store the IP address and browser used to submit the form.

Legal basis: pre-contractual steps taken at your request (GDPR art. 6.1.b) — you write asking for a proposal and we prepare it. We do not ask for consent because none is needed for this; if we ever wanted to use your data for anything else, we would ask you separately.

Retention: data will be kept as long as necessary to manage the commercial relationship (or a maximum of 3 years if no contract is signed).

Recipients: data is never sold or shared with third parties for their own purposes. For technical management we use Cloudflare (infrastructure and database), Resend (email delivery) and Google (the inbox where the notice arrives) as data processors. Some of these providers are US-based and may process data outside the European Economic Area, under the safeguards set out in Chapter V of the GDPR.

Rights: you may exercise access, rectification, erasure, objection, limitation and portability rights by contacting info@kurbaevents.com. You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security measures: reasonable technical and organisational measures are applied to protect your data from loss, unauthorised access or unlawful processing.