Privacy Policy

In compliance with EU Regulation 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you that the data controller for your personal data is:

2.1 Data Collected via the Waitlist Form

• Full name
• Email address
• Country of residence (for package availability management)
• Preferred show date (optional)

2.2 Data Collected During the Package Booking Process

• Identification data: first name, last name, identity document
• Contact data: email address, phone number
• Payment data: processed directly by TRAVLR as organizer and merchant of record; Queer Destinations does not have access to full card details
• Travel data: dates, accommodation preferences, number of travelers

2.3 Data Collected During Website Browsing

• Browsing data and technical, analytical, and preference cookies (subject to the Cookie Policy)
• IP address and device data, anonymized or pseudonymized where possible

2.4 Data Collected in Communications with the User

• Content of messages sent through contact forms or by email
• Data necessary for handling inquiries, rights requests, or complaints

Queer Destinations S.L. will not share your personal data with third parties except in the following cases:

4.1 Transfer to TRAVLR Pty Ltd (Package Tour Organizer and Merchant of Record)

Once the user accesses the TRAVLR platform to finalize the package booking, their personal data will be processed by TRAVLR Pty Ltd as package tour Organizer and merchant of record, for the purpose of managing the travel contract and providing all services included in the package.

The transfer of data to TRAVLR Pty Ltd involves an international transfer to Australia, a country without a European Commission adequacy decision. This transfer is made on the basis of the data subject's explicit consent (Art. 49.1(a) GDPR), collected via a specific unchecked checkbox in the waitlist form, with prior information about the risks involved.

4.2 Processing by Live Nation España S.A.U.

For entry to the show venue, Live Nation España S.A.U. (Tax ID A58569815, Paseo San Juan 104, 6th Floor 2nd, 08037 Barcelona) may process attendees' identification data and CCTV footage for access control and event security purposes, acting as an independent data controller.

4.3 Service Providers (QD's Data Processors)

Queer Destinations S.L. may engage service providers acting as data processors, such as email management platforms, web analytics tools, or web hosting providers. All will be bound by data processing agreements ensuring GDPR compliance.

4.4 Public Authorities

Where required by applicable law, Queer Destinations S.L. may disclose personal data to competent judicial, law enforcement, tax, or administrative authorities.

As a general rule, Queer Destinations S.L. processes personal data within the European Economic Area (EEA). The only exception applicable in the context of the Shakira — Residencia Madrid 2026 Project is TRAVLR Pty Ltd's access to user data.

• Waitlist data: until the sales process opens or until the user withdraws their consent, whichever comes first.
• Commercial communications data: until the user unsubscribes or withdraws their consent.
• Package tour contract data: for the duration of the contract and, thereafter, for the applicable limitation periods: five years for tax and commercial obligations, and two years for consumer claims.
• Communications and complaints data: two years from the resolution of the inquiry or complaint.

Under data protection law, users have the right to exercise the following rights at any time: Access, Rectification, Erasure, Restriction of processing, Data portability, Objection, and Withdrawal of consent.

7.1 How to Exercise Your Rights

7.2 Right to Lodge a Complaint

The website www.queerdestinations.com uses cookies and similar technologies. Users may configure or reject non-essential cookies through the cookie settings panel available on the website, or by adjusting their browser settings. For detailed information about the cookies used, their providers, and their duration, please refer to the full Cookie Policy available on the website.

• Encryption of communications using the HTTPS protocol
• Restricted access controls to personal data by authorised staff only
• Incident management and security breach response procedures
• Periodic security system assessments

In the event of a security breach that poses a risk to users' rights and freedoms, Queer Destinations S.L. will notify the AEPD within a maximum of 72 hours of becoming aware of it, in accordance with Articles 33 and 34 GDPR.

Queer Destinations S.L.'s services are intended exclusively for persons aged 18 and over. Queer Destinations S.L. does not knowingly collect personal data from minors. If you are a parent or legal guardian and become aware that your child has provided data without your consent, please contact us at [email protected].

Queer Destinations S.L. reserves the right to amend this Privacy Policy to reflect legislative or case law developments or changes in its business activities. Any material amendment will be communicated to registered users by email at least 30 days before it takes effect. The updated version will always be available at www.queerdestinations.com/privacidad.

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)
• Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD)
• Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI-CE)
• Royal Decree-Law 13/2012 of March 30, as it relates to the use of cookies