Privacy Policy

At MAMBO CLUB we care about the privacy and transparency of your personal data. Below we explain how we collect and process your personal data.

1. Data Controller

  • Identity: MANUEL NAVARRO RAJOY
  • Tax ID (CIF/NIF): 53285850W
  • Registered Address: C/ MIQUEL SERVET 149, 08912 BADALONA, BARCELONA.
  • Telephone: +34 679 519 744
  • Email: INFO@MAMBO.CLUB

2. Data Protection Officer (DPO)

  • DPO: Manuel Navarro Rajoy
  • DPO Contact: info@legaldata.pro
  • AEPD_DPD certification No.: A2025166DPD
    • Spanish Data Protection Agency logo

3. Purpose of the Data Processing

We process the information you provide for the following purposes:

  • Access Management and Loyalty: To identify you at the entrance of MAMBO CLUB and apply loyalty discounts.
  • Age Verification: To ensure that you meet the minimum age required to access the premises.
  • Commercial Communications: To send you promotional messages and gifts via WhatsApp if you have given your consent.
  • Ticket Sales: To manage the purchase of tickets through our website or physical premises, linking them to your ID document.
  • Website Interaction: To allow you to request songs in the current MAMBO CLUB session, displaying your name publicly.
  • User Analysis and Profiling: To create profiles in order to identify visit frequencies, preferences and behaviours so as to improve our services.

4. Legal Basis for the Processing

The legal basis for processing your personal data is:

  • Consent of the Data Subject: For sending commercial communications, publishing your name when requesting songs and other processing operations that require your consent.
  • Legitimate Interest of the Controller: For access management, loyalty, analysis and improvement of our services, always ensuring that your rights and freedoms are not affected.
  • Compliance with a Legal Obligation: For age verification and compliance with tax and administrative obligations.

5. Recipients of the Data

Your data may be disclosed to:

  • Associated or Collaborating Companies: For the provision of services related to our activity, under contracts that guarantee the protection of your data.
  • Service Providers:
    • OVH HISPANO, S.L.U.: Provider of hosting and data storage services, with servers located in Canada. OVH acts as a data processor and offers adequate safeguards for the protection of your data.
    • Stripe: Payment gateway for managing online purchases.
    • WhatsApp: For sending commercial communications, which may involve international data transfers with the appropriate safeguards.
  • Public Authorities: In the cases required by law.

6. International Data Transfers

Your personal data is stored on servers located in Canada, at the OVH BHS3 data centre. Canada has an adequacy decision from the European Commission recognising that it offers an adequate level of protection for personal data. Therefore, data transfers to Canada are permitted under the GDPR.

In the event of transfers to other third countries, we guarantee that they are carried out with the appropriate safeguards, by adopting standard contractual clauses or adhering to recognised certification mechanisms.

7. Data Retention Period

The personal data provided will be retained:

  • As long as the relationship with the user is maintained and they do not request its erasure.
  • As long as the data is necessary for the purposes for which it was collected.
  • For the periods necessary to comply with the applicable legal obligations.
  • Specifically:
    • - Data with no associated commercial transaction: It will be retained for a maximum of 3 years from the last interaction with the data subject. After this period without activity, it will be deleted or anonymised, unless a legal obligation requires longer retention.
    • - Data with an associated commercial transaction (invoices, accounting, etc.): It will be kept for the 6 years established by the Commercial Code or for the 4 years of the tax limitation period, whichever applies in each case. After these periods, it will be securely deleted or blocked.
  • In any case, we comply with the principle of storage limitation provided for in the data protection regulations. Once the periods indicated have ended or the data is no longer necessary, it will be securely deleted or anonymised.

8. Rights of the Data Subject

You have the right to:

  • Access your personal data.
  • Rectify inaccurate data.
  • Erase your data when it is no longer necessary.
  • Object to the processing of your data.
  • Restrict the processing of your data in certain circumstances.
  • Port your data to another controller.
  • Withdraw your consent at any time.

To exercise these rights, send a request together with a copy of your ID document to:

  • Postal Address: C/ MIQUEL SERVET 149, 08912 BADALONA, BARCELONA.
  • Email: INFO@MAMBO.CLUB

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Data Requested and its Mandatory Nature

When you register, we ask you for:

  • Mandatory: ID document, first name, surname, date of birth, acceptance of the privacy policy.
  • Optional: Email, telephone, consent to receive advertising.

Refusal to provide the mandatory data may make it impossible for us to provide our services to you.

10. Security Measures

MAMBO CLUB undertakes to comply with its obligation of secrecy regarding personal data and its duty to safeguard it, and has adopted the technical and organisational measures necessary to ensure the security of your personal data and prevent its alteration, loss, unauthorised processing or access, in accordance with the provisions of the GDPR and the LOPDGDD.

11. Accuracy of the Data

The user guarantees that the data provided is true, accurate, complete and up to date. The user is responsible for any direct or indirect damage or loss that may arise as a result of a breach of this obligation.

12. Third-Party Data and Visibility

When using certain features of our website, such as searching for other users by ID document or telephone, you may see the name and initials of other registered users. By registering, you consent to your name and initials being visible to other users for this purpose. If you do not want your data to be visible, you can request this through INFO@MAMBO.CLUB.

13. Automated Decisions and Profiling

We create user profiles to analyse visits, preferences and behaviours in order to improve our services and offer you personalised promotions. No automated decisions producing legal or significant effects on you will be taken without your consent.

14. Use of WhatsApp for Communications

To send commercial communications and promotions via WhatsApp, your explicit consent is required. You may withdraw this consent at any time.