1.- WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

Company name: SHE EVENTS & OTHERS SL
Tax ID (C.I.F./N.I.F.): B84676659
Registered office: C/ Estrecho de Mesina 13, 28043 Madrid ( Madrid)
Registered in the Madrid Mercantile Registry, Sheet M 404677, Folio 90, Volume 22630, Section 8.
Phone: 933221050
Email: infodmc@spheritage.com

2.- FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

In accordance with Regulation (EU) 679/2016 and Organic Law 3/2018 of December 5 on the protection of personal data and the guarantee of digital rights, we inform you that the personal data you provide to us—and any data generated during the course of your relationship with us—will be processed for the following purposes: 

2.1. Data provided to complete a purchase:

  • Manage, process, ship, and track purchases made.
  • Contact the user to complete the purchase process.
  • Conduct quality and satisfaction surveys.
  • Send personalized commercial communications via any channel provided by the user.
  • Analyze website usage and understand user preferences and behavior.
  • Enable participation in promotions and/or contests.
  • Manage accounting, tax, and administrative processes.

2.2. Data provided through contact forms:

  • Manage, process, and respond to your inquiries, requests, incidents, or questions.
  • Offer products and services.
  • Analyze website usage and understand user preferences and behavior. 

2.3. Data provided for Newsletter subscription:

  • Manage subscription and/or unsubscription.
  • Offer products and services.
  • Analyze website usage and understand user preferences and behavior.

2.4. Data provided to participate in recruitment processes or unsolicited applications:

  • Evaluate your application for job openings.

3.- HOW LONG WILL WE KEEP YOUR DATA?

Personal data provided will be retained as long as its deletion is not requested by the data subject or their legal representative, and while it remains necessary—or relevant—for the purpose for which it was collected or recorded, including applicable statute of limitation periods.

The retention of data is subject to any legal obligations SHE EVENTS & OTHERS SL may have to retain it. Once these periods expire, the data will be securely deleted or destroyed in a way that ensures the information cannot be recovered.

4.- WHAT LEGAL GROUNDS AUTHORIZE THE PROCESSING OF YOUR PERSONAL DATA?

The legal basis for processing your data is the consent provided by the data subject. This consent is obtained explicitly and unequivocally by completing and submitting paper or electronic forms where personal data is collected.

Additionally, data processing is authorized when necessary to perform a contract or provide a service to which the user is a party, or for the application of pre-contractual measures at the user’s request (Art. 6.1.a and b of the GDPR).

Processing may also be justified by legal obligations of the controller or for the satisfaction of legitimate interests, provided such interests do not override the fundamental rights and freedoms of the data subject.

5.- TO WHOM WILL YOUR PERSONAL DATA BE DISCLOSED?

Your data will not be transferred to any entity without your consent, except as legally required. We will request your explicit consent for any other data transfers.

In managing authorized purposes, your data may be shared with entities or individuals directly related to SHE EVENTS & OTHERS SL and the services provided. Personal information may also be disclosed to public authorities, courts, and tribunals when legally required.

Data may also be shared with service providers offering consulting, IT support, marketing, training, or auditing services. These entities will only access the information needed to perform their services and are bound by data processing agreements requiring confidentiality, limited use, and data security. 

No international data transfers outside the EU or to entities not complying with the GDPR standards are planned.

Personal data processed by SHE EVENTS & OTHERS SL is provided by the data subject or obtained from publicly accessible sources.

6.- WHAT CATEGORIES OF DATA DO WE PROCESS?

The processed data is necessary to fulfill the authorized purposes: 

6.1. For purchase completion:

  • Identification data: name, surname, and ID.
  • Contact data: email address, phone number, and postal address.
  • Transactions: purchased products and services.
  • Financial data: bank card.
  • Browsing data.

6.2. Data provided via contact forms:

  • Identification data: name and surname.
  • Contact data: email address.
  • Browsing data.

6.3. Data provided for Newsletter subscription: 

  • Identification data: name and surname.
  • Contact data: email address.
  • Browsing data.

6.4. Data provided to apply for job offers or send spontaneous applications: 

  • Identification data: name and surname.
  • Contact data: email address.
  • Browsing data.
  • Any other information voluntarily included in the CV.

If users provide data of other individuals, they confirm having obtained their consent and agree to inform them about this Privacy Policy. 

7.- WHAT ARE YOUR RIGHTS?

Anyone has the right to obtain confirmation on whether SHE EVENTS & OTHERS SL processes their personal data.

Data subjects have the right to access, update, rectify inaccurate data, or request deletion when data is no longer necessary for the original purposes.

In certain cases, users may object to data processing due to personal circumstances. In such cases, data will no longer be processed unless for compelling legitimate reasons or for the exercise or defense of legal claims.

Under certain conditions (Art. 18 GDPR), users may request the restriction of processing, in which case SHE EVENTS & OTHERS SL will only process the data with consent, for legal claims, to protect others’ rights, or for public interest.

When applicable, data subjects have the right to be forgotten and to data portability—allowing them to receive their personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

You also have the right not to be subject to a decision based solely on automated processing, including profiling, except under specific circumstances outlined in Art. 22.1 GDPR.

Data subjects have the right to request data erasure when the purpose for collection no longer exists, consent is withdrawn, or under the other grounds listed in Art. 17 GDPR. 

8.- HOW CAN YOU EXERCISE YOUR RIGHTS?

By sending a written request to the contact details indicated above, specifying the right you wish to exercise. To verify identity, we may request an official ID or similar document.

9.- HOW CAN YOU FILE A COMPLAINT?

If you believe your rights have not been properly respected, you may file a complaint with the Spanish Data Protection Agency.

Contact details:
Phone: 901 100 099 / 912 663 517
Postal address: C/ Jorge Juan,6 Madrid.

Disclaimer

This English version of the Cookies Policy is provided for informational purposes only. In the event of any discrepancies or conflicts between this translation and the original Spanish version, the Spanish version shall prevail.

LAST UPDATE: 18/07/2025