1. User Information
Who is responsible for processing your personal data?
Deejaygrup Mediterranean Creative Hub S.L.U. is the data controller responsible for processing the user’s personal data and hereby informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR), and Organic Law 3/2018 of December 5 (LOPDGDD).
What types of data do we collect and process from you?
Depending on the form or method used to collect your data, we always ask for only the minimum information necessary to fulfill the purposes specified in each case.
Why do we process your personal data, and why do we do it?
Depending on the form from which we obtained your personal information, we will treat it confidentially for the following purposes:
On the Contact form
- To respond to inquiries or any other requests made by users through any of the contact methods available on the data controller’s website.
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR) - To send commercial advertising communications via email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be sent by the data controller and will relate to its products and services, or those of its partners or suppliers with whom it has entered into a promotional agreement. In this case, third parties will never have access to personal data.
(based on the data subject’s consent, 6.1.a GDPR) - Conduct statistical analyses and market research.
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR)
On the Newsletter form
- Send newsletters, updates, offers, and promotions online.
(based on the data subject’s consent, 6.1.a GDPR)
On the “Request a Quote” form
- Submit commercial quotes for products and services.
(for the performance of a contract or a preliminary contract, 6.1.b GDPR) - To send commercial advertising communications via email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be sent by the data controller and will relate to its products and services, or those of its partners or suppliers with whom it has entered into a promotional agreement. In this case, third parties will never have access to personal data.
(based on the data subject’s consent, 6.1.a GDPR)
On the Online Forum form
- Participate in the online forums suggested by the person in charge.
(based on the data subject’s consent, 6.1.a GDPR)
On the Resume form
- Involve the relevant party in the hiring process and analyze the applicant’s profile in order to select a candidate for the vacant manager position.
(based on the data subject’s consent, 6.1.a GDPR)
On the Testimonial form
- Moderate and publish on the website users’ experiences, opinions, and suggestions regarding a product or service.
(based on the data subject’s consent, 6.1.a GDPR)
In the Comments form
- Moderate and post comments on a post to the website.
(based on the data subject’s consent, 6.1.a GDPR)
On the Ethics or Whistleblower Form
- Properly manage the ethics hotline by processing any irregularities reported through it and determining whether to initiate an investigation, with the aim of detecting potential crimes and preventing the entity from being held liable in any way, as well as to prevent any conduct that violates the entity’s internal or external regulations.
(to comply with a legal obligation, 6.1.c GDPR)
On the User Registration form
- Manage the user’s account to provide them with personalized access to the website and the interactive services it offers.
(based on the data subject’s consent, 6.1.a GDPR)
On the “Giveaways and Promotions” form
- Participate in sweepstakes, contests, promotions, or other services offered by the data controller.
(based on the data subject’s consent, 6.1.a GDPR) - To send commercial advertising communications via email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be sent by the data controller and will relate to its products and services, or those of its partners or suppliers with whom it has entered into a promotional agreement. In this case, third parties will never have access to personal data.
(based on the data subject’s consent, 6.1.a GDPR)
On the Reservations form
- Make reservations at the manager’s office.
(for the performance of a contract or a preliminary contract, 6.1.b GDPR) - To send commercial advertising communications via email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, to customers, that enable the sending of commercial communications regarding products or services similar to those initially contracted with the customer (Art. 21.2 LSSI).
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR)
On the Appointments form
- Schedule appointments and meetings with the person in charge.
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR)
On the Social Media form
- Contact via social media for the purpose of maintaining a relationship between the user and the data controller, which may include the following actions: processing requests and inquiries; providing information about activities and events; providing information about products and/or services; and interacting through official profiles. The user has a profile on the same social media platform and has chosen to follow the controller’s social media page, thereby demonstrating an interest in the information posted there; therefore, by requesting to follow our official page, the user provides consent for the processing of their data. Users may access the social media platform’s privacy policies at any time and configure their profiles to ensure their privacy. Once the user becomes a follower or has joined the controller’s social media page, they may post comments, links, images, photographs, or any other type of content supported by the platform. In all cases, the user must be the owner of the published content, hold the copyright and intellectual property rights, or have the consent of the affected third parties. Commercial communications may also be sent regarding the activities of companies within the group, as well as companies outside the group with which commercial collaboration or intermediary agreements have been established.
(based on the data subject’s consent, 6.1.a GDPR)
In the Instant Messaging form
- Schedule appointments and meetings with the person in charge.
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR) - To send commercial advertising communications via email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, to customers, that enable the sending of commercial communications regarding products or services similar to those initially contracted with the customer (Art. 21.2 LSSI).
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR) - Manage, maintain, improve, or develop the services provided.
(for the performance of a contract or a preliminary contract, 6.1.b GDPR) - Manage your online purchase or order, process the payment, and proceed with shipping or activation, in accordance with the general terms and conditions.
(for the performance of a contract or a preliminary contract, 6.1.b GDPR) - Submit commercial quotes for products and services.
(for the performance of a contract or a preliminary contract, 6.1.b GDPR) - To send commercial advertising communications via email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be sent by the data controller and will relate to its products and services, or those of its partners or suppliers with whom it has entered into a promotional agreement. In this case, third parties will never have access to personal data.
(based on the data subject’s consent, 6.1.a GDPR) - To respond to inquiries or any other requests made by users through any of the contact methods available on the data controller’s website.
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR)
On the Video Surveillance form
- Security and access control, monitoring of work activities and internal operations. The legal basis for this processing is the public interest in security and access control, and the legitimate interest of the data controller pursuant to Article 20.3 of the Workers’ Statute. The data will be retained for a maximum of 30 days.
(based on the data subject’s consent, 6.1.a GDPR)
In the “Images and Recordings” form
- File containing static and/or dynamic images. Includes publication on the data controller’s or third parties’ media.
(based on the data subject’s consent, 6.1.a GDPR)
In the Customers and Suppliers form
- Business management with customers and suppliers.
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR)
On the “Ad Exclusion” form
- Data management to prevent the sending of marketing communications to those who have expressed their refusal or objection to receiving them.
(to comply with a legal obligation, 6.1.c GDPR)
On the “Commercial Advertising” form
- Advertising management and business development. Includes data from legitimate, publicly available sources.
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR)
In the “Rights of Data Subjects” form
- Respond to requests from citizens regarding the exercise of their rights under the GDPR.
(to comply with a legal obligation, 6.1.c GDPR)
In the “Web, App, and Other Platform Users” form for the data controller
- Identification information for users who access the corporate website.
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR)
In the “Training, Courses, Workshops, Activities, or Similar” form
- Management of Terms of Access and Use.
(based on the legitimate interests of the data controller, Art. 6.1.f of the GDPR)
On the “Legal Representatives and Contact Persons” form
- If you are the legal representative or contact person for any of the entities or individuals with whom the Foundation has a relationship, the data controller will process your data to manage the intended relationship.
(based on the data subject’s consent, 6.1.a GDPR)
How long will we retain your personal data?
The data will be retained for no longer than is necessary to fulfill the purpose of the processing or for as long as there are legal requirements mandating its retention. When the data is no longer necessary for that purpose, it will be deleted using appropriate security measures to ensure the anonymization of the data or its complete destruction.
To whom do we disclose your personal information?
We do not plan to disclose any personal data to third parties, except—if necessary for the purposes of data processing—to our communications service providers, with whom the data controller has entered into the confidentiality and data processor agreements required by current privacy regulations.
Third-party data provided by the user
If the user provides personal data belonging to third parties for any purpose, the user guarantees that he or she has previously informed the individuals concerned and obtained their consent to disclose their data to the data controller.
The user warrants that the individuals concerned are of legal age and that the information provided is accurate and truthful.
The data controller may verify the consent of these data subjects by sending an initial non-commercial email requesting confirmation of the consent granted on their behalf by the user.
If the user’s breach of these terms and conditions gives rise to any liability, the user shall be liable for the consequences of such breach.
Do we process international transfers?
In accordance with the provisions of Article 44 of the GDPR, authorization for the international transfer of data to a country that has not been designated as having an adequate level of protection may only be granted if sufficient safeguards are in place. Thus, authorization may be granted if the data controller provides a written contract between the data exporter and the data importer that sets forth the necessary safeguards to ensure the protection of data subjects and guarantees the exercise of their rights.
The data controller may use the services of providers that have servers or offices in other locations, which may result in such transfers. For an updated list of providers, please contact the data controller at administracion@atlantidafilmfest.es.
What are your rights?
The user’s rights are as follows:
- The right to withdraw consent at any time.
- Right of access, rectification, portability, erasure of your data, restriction of processing, or objection to processing.
- The right to file a complaint with the supervisory authority (www.aepd.es) if you believe that the processing does not comply with current regulations.
Contact Information for Exercising Your Rights
Deejaygrup Mediterranean Creative Hub S.L.U. Av. San Fernando, 21 – 07011 Palma (Balearic Islands). Email: administracion@atlantidafilmfest.es.
2. Whether the information provided by the user is mandatory or optional
By checking the appropriate boxes and entering data in the fields marked with an asterisk (*) on the contact form or in download forms, expressly, freely, and unequivocally agree that their data is necessary for the provider to respond to their request; the inclusion of data in the remaining fields is voluntary. The user guarantees that the personal data provided to the data controller is accurate and is responsible for notifying the data controller of any changes to such data.
The data controller informs users that all data requested through the website is required, as it is necessary to provide optimal service to the user. If not all data is provided, there is no guarantee that the information and services provided will fully meet your needs.
If, by any means, you provide us with personal data belonging to other individuals, the data controller advises that you must do so with their consent and must have informed them in advance of the provisions contained in this privacy policy.
Furthermore, the data controller undertakes to provide any third party whose data is provided to us with any relevant information, in accordance with the provisions of Article 14 of the General Data Protection Regulation.
3. Safety Measures
In accordance with the provisions of current personal data protection regulations, the data controller is complying with all provisions of the GDPR and LOPDGDD regarding the processing of personal data under its responsibility and, clearly, with the principles described in Article 5 of the GDPR, according to which such data is processed lawfully, fairly, and transparently in relation to the data subject, and is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
The data controller guarantees that it has implemented appropriate technical and organizational policies to enforce the security measures established by the GDPR and the LOPDGDD in order to protect users’ rights and freedoms, and has provided users with the necessary information so that they may exercise those rights.
International Data Transfers
In the course of providing their services, some of the service providers used by the data controller may be located outside the European Economic Area (EEA) or may process data from third countries.
In such cases, the data controller ensures that these international data transfers are carried out in compliance with the provisions of Regulation (EU) 2016/679 (GDPR), by implementing appropriate safeguards for the protection of personal data, such as the use of standard contractual clauses approved by the European Commission, the existence of adequacy decisions by the European Commission, or other legal safeguards recognized by applicable law.
Users may request additional information about the specific safeguards applied to each international transfer by contacting the data controller at administracion@atlantidafilmfest.es.
For more information about our privacy policies, please contact the data controller: Deejaygrup Mediterranean Creative Hub S.L.U., Av. San Fernando, 21 – 07011 Palma (Balearic Islands). Email: administracion@atlantidafilmfest.es.
4. Term
This privacy policy is effective as of June 29, 2026.
The data controller reserves the right to modify this policy to adapt it to future applicable legislative or jurisprudential updates, or for other technical, operational, commercial, corporate, or similar reasons. If, as a result of these changes, users’ rights are affected, the data controller undertakes to explain the reasons.
