Privacy Policy

This policy explains what personal data we process when you visit partybandmallorca.com, on what legal basis, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

Inan Lima Music and Entertainment
Inan Dos Santos Lima
Carrer Bernat de Santa Eugènia 3, Piso 6, Puerta 4
07015 Palma de Mallorca, España
Email: info@partybandmallorca.com
Telephone: +34 629 953 362

2. Hosting

This website is hosted on Cloudflare Workers (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; for the EU: Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany). When you visit the site, Cloudflare's servers automatically process technical connection data (including your IP address, browser type, and the time of access) in server log files. This is necessary to deliver the website securely and reliably. Legal basis: Art. 6 (1)(f) GDPR (our legitimate interest in a secure, functioning website). Cloudflare is certified under the EU–U.S. Data Privacy Framework and we have a data processing agreement in place.

Approximate location. When a page loads, your browser also calls a small endpoint on our own domain (/api/geo), which runs on Cloudflare and derives only the approximate city, region, country and time zone from your IP address. Nothing is stored or logged there; the result is kept in your browser for the current session only and is used solely for the contact form (section 3), the anonymous page counting (section 6a) and — if you consent — our first-party visit statistics (section 6).

3. Contact form

When you send an enquiry through our contact form, the data you provide (name, email, and optionally phone, event date, event type, location and your message) is transmitted to us so we can respond to your request. Form delivery is handled by Web3Forms (Statichunt Technologies), which forwards your submission to our email inbox.

A copy of your enquiry is also stored in our own database (hosted by Supabase, EU data centre) so we can keep track of it. Together with the enquiry we store the approximate location of access and, for spam protection, your IP address — the IP address is deleted automatically after 30 days; only the IP address is deleted, the approximate location derived from it (city, region, country) is kept without any link to the IP.

We send you an automatic confirmation that your enquiry has arrived. This email is delivered by Resend (Resend, Inc.), which processes your name and email address solely to deliver that message. We record whether the confirmation was sent successfully, so we can tell whether it reached you.

Legal basis: Art. 6 (1)(b) GDPR (steps prior to entering into a contract) and Art. 6 (1)(a) GDPR (your consent in submitting the form). We keep enquiry correspondence for as long as needed to process your request and to meet any legal retention obligations, after which it is deleted.

4. Cookies & consent

When you first visit, we ask whether you consent to analytics. Your choice is stored locally in your browser (via localStorage, key cookie_consent) so we don't ask again. This storage is technically necessary to honour your choice and is set on the basis of Art. 6 (1)(f) GDPR. No analytics cookies are set unless you click "Accept". You can change your decision at any time via "Cookie settings" in the footer.

5. Google Analytics

Only if you consent, we use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to understand how visitors use the site in aggregate. Analytics is loaded only after you accept, and we have enabled IP anonymisation, so your IP address is shortened before any processing. Google may transfer data to servers in the USA; such transfers are covered by the EU–U.S. Data Privacy Framework.

Legal basis: Art. 6 (1)(a) GDPR (your consent). You can withdraw consent at any time via "Cookie settings" in the footer, or by declining the banner. Data collected includes pages viewed, approximate region, device and browser type, and referring source — never your name or contact details.

6. First-party visit statistics

Only if you consent (same "Accept" as above), we also keep our own, first-party visit statistics — no third-party tracker involved. We record the pages you view and how long you stay, clicks on our contact buttons and links, the referring website, an anonymous random visitor ID stored in your browser (localStorage), and — derived on our server from your IP address — the approximate country, region and city of access. Your IP address is deleted automatically after 30 days — only the IP address is deleted; the approximate location derived from it and the browser type are kept, without any link to the IP, so that after that only non-identifying usage and location data remain. The data is stored in our own database hosted by Supabase (Supabase Inc., data centre in the EU) and is not sold or shared. Legal basis: Art. 6 (1)(a) GDPR (your consent). You can withdraw consent at any time via "Cookie settings" in the footer.

6a. Anonymous page counting (without cookies)

Regardless of your consent, we count every page view completely anonymously to understand how much the site is used (Art. 6 (1)(f) GDPR, legitimate interest). We store only the page viewed, date and time, the country and approximate location (city/region, via the /api/geo endpoint described in section 2), the referring domain and the device category (phone, tablet, computer). No IP address, no identifier and no information on your device is stored; individual persons cannot be identified. This counting requires no consent and sets nothing in your browser.

7. Google Fonts

We load typefaces from Google Fonts. When a page loads, your browser connects to Google's servers to fetch the fonts, which transmits your IP address to Google. This is done to present the site consistently and attractively. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a consistent presentation).

8. Social media & WhatsApp links

Our site contains links to Instagram, YouTube, TikTok and a WhatsApp contact link. These are plain links — no data is shared with those services until you actively click a link and leave our site. Once you do, the respective provider's privacy policy applies.

9. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you (Art. 15);
rectification of inaccurate data (Art. 16);
erasure of your data (Art. 17);
restriction of processing (Art. 18);
data portability (Art. 20);
object to processing based on legitimate interest (Art. 21); and
withdraw consent at any time, with effect for the future (Art. 7 (3)).

To exercise any of these rights, contact us at info@partybandmallorca.com. You also have the right to lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD, www.aepd.es).

Last updated: 19 September 2026.