NOVA NIGHTLIFE

Privacy policy

Last updated: 23 September 2026

This is an English translation provided for convenience. If there is any discrepancy, the Spanish version prevails.

In accordance with current legislation, NOVA NIGHTLIFE (the “Website”) is committed to adopting the technical and organisational measures necessary to ensure a level of security appropriate to the risk of the data collected.

Applicable laws

This privacy policy complies with current Spanish and European data protection legislation, in particular:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, GDPR).
  • Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
  • Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Data controller

The controller of the personal data collected on NOVA NIGHTLIFE is Alejandra Ibáñez Cambero, tax ID (NIF) 05334334-J (the “Controller”). Contact details:

Record of processing

Personal data collected through the Website’s forms, WhatsApp, Instagram or email will be processed to answer your enquiry, manage your ticket, guest list, VIP table or event, and maintain the relationship established with you. NOVA NIGHTLIFE keeps a record of processing activities in accordance with Article 30 GDPR, unless the exception in paragraph 5 of that article applies.

Principles

Your personal data will be processed in accordance with the principles of Article 5 GDPR: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.

Categories of personal data

NOVA NIGHTLIFE only processes identification and contact data (name, phone number, email) and the information you provide about your request (for example, date, number of people or type of event). No special categories of personal data under Article 9 GDPR are processed.

  • Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR): answering enquiries and managing the tickets, guest lists, VIP tables or events you request.
  • Consent (Art. 6.1.a GDPR): sending news by email when you subscribe, and statistics cookies as described in our Cookie policy.
  • Compliance with legal obligations (Art. 6.1.c GDPR): keeping information required by tax and accounting law.

You can withdraw your consent at any time, as easily as you gave it. Withdrawal does not affect the lawfulness of prior processing or your use of the Website. Forms indicate which fields are required to handle your request.

Purposes of processing

  • Answering enquiries received through the forms, WhatsApp, Instagram or email.
  • Managing tickets, guest lists, VIP tables and private or company events you request.
  • Sending news by email only to people who have expressly subscribed.
  • Producing aggregated usage statistics of the Website, only if you have consented through the cookie banner.

No automated decisions or profiling are carried out.

Retention periods

Personal data is kept only for the minimum time necessary for its purposes and, in any case, for no longer than 36 months, or until you request its deletion.

Recipients

To provide the service, your data may be shared with or accessible to the following recipients, only as far as necessary:

  • Clubs, venues and organisers where you request a ticket, guest list or VIP table, to manage your entry.
  • Fourvenues, the platform through which tickets and VIP tables are bought, under its own privacy policy.
  • Automattic Inc. (WordPress.com, Jetpack and Akismet), provider of web hosting, forms, subscriptions and spam filtering.
  • Meta Platforms (WhatsApp and Instagram), when you choose to contact us through those channels.
  • Public authorities, judges and courts, where there is a legal obligation.

Some of these providers (Automattic and Meta) may process data in the United States. These international transfers are covered by the EU-US Data Privacy Framework and/or the standard contractual clauses approved by the European Commission. Your data is never sold or passed on to third parties for commercial purposes.

Minors

NOVA NIGHTLIFE’s services are aimed exclusively at people aged 18 or over. We do not knowingly collect data from minors; if we find that a minor has given us their data, we will delete it.

Confidentiality and security

NOVA NIGHTLIFE applies the technical and organisational measures needed to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure or access. As the internet cannot be guaranteed to be fully secure, the Controller will inform you without undue delay if a personal data breach occurs that is likely to result in a high risk to your rights and freedoms. Personal data is treated as confidential, and the Controller ensures that employees and collaborators respect this confidentiality.

Your rights

Under the GDPR and the LOPDGDD you have the right to:

  • Access your personal data and information about how it is processed.
  • Rectify inaccurate or incomplete data.
  • Erase your data (“right to be forgotten”) when it is no longer necessary, you withdraw consent, you object, it was processed unlawfully or erasure is legally required.
  • Restrict processing in the cases provided for by law.
  • Data portability: receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Object to the processing of your data.
  • Not be subject to automated decisions, including profiling.

To exercise your rights, write to the Controller with the reference “RGPD-bynovanightlife.com”, stating your name, your request and the reasons, an address for notifications, the date and any supporting documents. If there are reasonable doubts about your identity, we may ask for additional information. Send it to C/ Condado de Treviño, 9, 28033 Madrid, Spain, or to bynovanightlife@gmail.com.

The Website may include links to third-party websites not operated by NOVA NIGHTLIFE. Their owners have their own data protection policies and are responsible for their own files and privacy practices.

Complaints to the supervisory authority

If you believe your personal data is being processed in breach of the law, you may lodge a complaint with a supervisory authority, in particular in the State of your habitual residence, place of work or place of the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (aepd.es).

Changes to this policy

NOVA NIGHTLIFE may amend this policy due to legislative changes, case law, guidance from the Spanish Data Protection Agency or changes in the services offered. The date of the last update appears at the top of this page; relevant changes will be clearly announced on the Website. Cookies are described in our Cookie policy.