Privacy Policy

This policy explains what personal data we process when you visit partybandmallorca.com, on what legal basis, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

Inan Lima Music and Entertainment
Inan Dos Santos Lima
Carrer Bernat de Santa Eugènia 3, Piso 6, Puerta 4
07015 Palma de Mallorca, España
Email: info@partybandmallorca.com
Telephone: +34 629 953 362

2. Hosting

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit the site, Cloudflare's servers automatically process technical connection data (including your IP address, browser type, and the time of access) in server log files. This is necessary to deliver the website securely and reliably. Legal basis: Art. 6 (1)(f) GDPR (our legitimate interest in a secure, functioning website). Cloudflare is certified under the EU–U.S. Data Privacy Framework and we have a data processing agreement in place.

3. Contact form

When you send an enquiry through our contact form, the data you provide (name, email, and optionally phone, event date, event type, location and your message) is transmitted to us so we can respond to your request. Form delivery is handled by Web3Forms (Statichunt Technologies), which forwards your submission to our email inbox.

A copy of your enquiry is also stored in our own database (hosted by Supabase, EU data centre) so we can keep track of it. Together with the enquiry we store the approximate location of access and, for spam protection, your IP address — the IP address is deleted automatically after 7 days.

We send you an automatic confirmation that your enquiry has arrived. This email is delivered by Resend (Resend, Inc.), which processes your name and email address solely to deliver that message. We record whether the confirmation was sent successfully, so we can tell whether it reached you.

Legal basis: Art. 6 (1)(b) GDPR (steps prior to entering into a contract) and Art. 6 (1)(a) GDPR (your consent in submitting the form). We keep enquiry correspondence for as long as needed to process your request and to meet any legal retention obligations, after which it is deleted.

4. Cookies & consent

When you first visit, we ask whether you consent to analytics. Your choice is stored locally in your browser (via localStorage, key cookie_consent) so we don't ask again. This storage is technically necessary to honour your choice and is set on the basis of Art. 6 (1)(f) GDPR. No analytics cookies are set unless you click "Accept". You can change your decision at any time via "Cookie settings" in the footer.

5. Google Analytics

Only if you consent, we use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to understand how visitors use the site in aggregate. Analytics is loaded only after you accept, and we have enabled IP anonymisation, so your IP address is shortened before any processing. Google may transfer data to servers in the USA; such transfers are covered by the EU–U.S. Data Privacy Framework.

Legal basis: Art. 6 (1)(a) GDPR (your consent). You can withdraw consent at any time via "Cookie settings" in the footer, or by declining the banner. Data collected includes pages viewed, approximate region, device and browser type, and referring source — never your name or contact details.

6. First-party visit statistics

Only if you consent (same "Accept" as above), we also keep our own, first-party visit statistics — no third-party tracker involved. We record the pages you view and how long you stay, clicks on our contact buttons and links, the referring website, an anonymous random visitor ID stored in your browser (localStorage), and — derived on our server from your IP address — the approximate country, region and city of access. Your IP address is deleted automatically after 7 days; after that only non-identifying usage and location data remain. The data is stored in our own database hosted by Supabase (Supabase Inc., data centre in the EU) and is not sold or shared. Legal basis: Art. 6 (1)(a) GDPR (your consent). You can withdraw consent at any time via "Cookie settings" in the footer.

7. Google Fonts

We load typefaces from Google Fonts. When a page loads, your browser connects to Google's servers to fetch the fonts, which transmits your IP address to Google. This is done to present the site consistently and attractively. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a consistent presentation).

8. Social media & WhatsApp links

Our site contains links to Instagram, YouTube, TikTok and a WhatsApp contact link. These are plain links — no data is shared with those services until you actively click a link and leave our site. Once you do, the respective provider's privacy policy applies.

9. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you (Art. 15);
rectification of inaccurate data (Art. 16);
erasure of your data (Art. 17);
restriction of processing (Art. 18);
data portability (Art. 20);
object to processing based on legitimate interest (Art. 21); and
withdraw consent at any time, with effect for the future (Art. 7 (3)).

To exercise any of these rights, contact us at info@partybandmallorca.com. You also have the right to lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD, www.aepd.es).

Last updated: 10 September 2026.