Buy tickets
Tickets
Buy tickets
Tickets

Privacy Policy

Last updated: 26 October 2026

Who We Are

Our website address is: https://salascala.com.

  1. INTRODUCTION
    At Sala Scala, we value the trust you place in us and take the protection of your personal data very seriously. This privacy policy describes how we handle the information we collect from you or that you provide to us through our website [www.salascala.com], during your reservations, participation in our events, or in your digital interactions with us.
    We want you to know what types of personal data we collect, for what purposes we use them, to whom we may disclose them, and what your rights are in this regard.
    This policy is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
  2. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?
    ● Data Controller: SPV SCALA, S.L.
    ● Address: Las Retamas, 3, Playa de San Agustín, Gran Canaria
    ● Contact email: LOPD@salascala.com

2.1 To whom does this policy apply?
To all individuals who access, browse, or use the website and to those who contact Sala Scala through any communication channel.
2.2 What regulations do we apply?
● General Data Protection Regulation (EU) 2016/679
● Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights
● Law 34/2002 on Information Society Services (LSSI-CE)

2.3 When was this privacy policy last updated?
This policy was last updated on 26 October 2026. It may be modified in the event of legal changes or changes to our services.

  1. WHAT PERSONAL DATA DO WE PROCESS?
    We may process the following categories of personal data:
    ● Identifying data: name, surname.
    ● Contact data: email, telephone, postal address
    ● Browsing data: IP address, device, browser, visit duration, pages viewed
    ● Information on preferences and consumption habits
    ● Payment or billing data (when you make a purchase)
  2. FOR WHAT PURPOSE DO WE USE YOUR PERSONAL DATA AND HOW DO WE COLLECT IT?
    We collect your data directly when you enter it in contact or purchase forms, and automatically through cookies when you browse our website.
    The main purposes of processing are:
    4.1. To provide you with our services and offer you our products (and your tickets)
    ● Manage reservations and payments
    ● Send confirmations, reminders, and notifications
    ● Manage event access

4.2. To send you commercial communications (newsletter or similar)
● Provided you have given your express consent

● Information about events, promotions, discounts, etc.

4.3. For profiling
● We use analytics and segmentation tools to personalize your experience and offer you content and advertising tailored to your interests.

4.4. To fulfill tax or contractual obligations
● Issuance of invoices, tax declarations, and accounting justification of transactions.

4.5. For administrative purposes, for internal management
● Quality control, system maintenance, technical support

4.6. For accounting and finance management, contracting relevant insurance, legal and business consulting, dispute resolution.

4.7. To monitor compliance with our internal policies
● Monitor compliance with the Code of Ethics, this Privacy Policy, and our Information Security Policy

  1. HOW LONG DO WE KEEP YOUR DATA?
    Data is kept for the duration of the commercial or contractual relationship and for as long as it is needed for the relevant purposes or applicable legal obligations. A request for deletion will be assessed in light of those obligations. For example, tax obligations may require retention for four years.

Subsequently, they will be anonymized or securely deleted.

  1. WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
    Depending on the purpose, the legal basis may be:
    ● Your consent, for example for newsletters or optional cookies.
    ● Performance of a contract, such as purchasing tickets or services.
    ● Legitimate interests, where applicable and subject to your rights, such as service security.
    ● Compliance with legal obligations, particularly tax, accounting and data protection requirements.

You may withdraw your consent at any time by writing to us at
admin@salascala.com.

  1. WHO HAS ACCESS TO YOUR PERSONAL DATA?
    Access may be given to:
    ● Authorised members of our internal team.
    ● Technology providers, including hosting, email marketing, CRM and payment services.
    ● Advertising platforms such as Google, Meta, TikTok, LinkedIn and OpenAI, with your consent where required.
    ● Tax and legal advisers, where necessary.
    ● Insurance companies, where applicable.
    ● Public authorities and courts, when legally required.

Providers and platforms may act as data processors or independent controllers, depending on the service. The applicable terms must address the corresponding data protection obligations.

  1. HOW DO WE PROTECT YOUR PERSONAL DATA?
    We apply technical and organisational measures appropriate to the risks:

● Restricted access to authorized personnel
● SSL encryption on the website
● Secure storage and backups
● Security monitoring and periodic technical audits
● Impact assessments when applicable

  1. HOW CAN YOU EXERCISE YOUR RIGHTS?
    You have the right to:
    ● Access your personal data
    ● Rectify inaccurate or incomplete data
    ● Request its deletion
    ● Limit its processing
    ● Object to processing
    ● Request the portability of your data
    ● Withdraw your consent

To exercise them, send an email to LOPD@salascala.com or a letter to Las Retamas, 3, Playa de San Agustín, Gran Canaria.
If you believe we have not respected your rights, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Advertising measurement in ChatGPT (OpenAI)

With your consent to advertising cookies, we use the OpenAI pixel to measure and analyse the results of our adverts in ChatGPT. We record page visits, clicks towards ticket purchases, successful form submissions and newsletter sign-ups. A click to Janto is recorded as an expression of interest, not as a completed purchase.

For this measurement, OpenAI receives information about the action, the page or content visited, the date and time, advert and browser identifiers, and technical connection data, such as the IP address and browser used.

The legal basis is your consent under Article 6(1)(a) GDPR. The pixel remains blocked until you accept the advertising cookie category. You can reject this category or withdraw permission at any time using the “Cookie settings” button. Withdrawal stops new events from being sent and removes OpenAI advertising cookies from this domain, without affecting the lawfulness of earlier processing.

The recipient is OpenAI; OpenAI Ireland Limited handles data subject to European Economic Area and Swiss data protection rules. Processing may involve transfers outside the European Economic Area. The parties’ roles and the safeguards for these transfers are described in OpenAI’s advertising data protection terms. OpenAI advertising data protection terms.

Measurement data is retained for as long as needed for the stated purposes and applicable obligations. Browser cookie lifetimes are described in our Cookie Policy and are separate from OpenAI’s data retention periods. You can exercise your rights by emailing LOPD@salascala.com. Cookie Policy. OpenAI privacy information.