( Legal information )

Privacy policy

Last updated: 21 October 2026

1. Data controller

This policy explains what personal data is processed through this website, why, on what legal basis, for how long and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. Contact form, email and WhatsApp

Data: name (optional), email address and the content of your message. If you write via WhatsApp, also your phone number and profile name.

How the form works: when you click “Enviar mensaje” (Send message), your own email program opens with the message ready to send. Nothing is stored on this website: the data is only sent if you send that email, and it is received in the controller’s Gmail account.

Purpose: to answer your enquiry and, if you ask for it, to prepare and organise a performance.

Legal basis: steps taken at your request prior to entering into a contract when you enquire about a performance (Art. 6(1)(b) GDPR), and the legitimate interest in answering enquiries received (Art. 6(1)(f) GDPR) in all other cases.

Retention: for as long as the conversation lasts. If a performance is agreed, for the duration of the relationship and afterwards for the periods required by applicable tax and commercial law. If no performance is agreed, messages are deleted 12 months after the last communication.

3. Reviews

Data: name, event or venue (optional), rating, comment, photograph (optional) and date of submission. To prevent mass submissions, an encrypted fingerprint of the IP address the review is sent from is also stored: the IP address cannot be read from it and it is deleted automatically after 24 hours. If you send a photo, the website re-creates it and removes its hidden data (such as GPS location).

Purpose: to check your review and, if approved, to publish it on this website with your name and, where applicable, your photograph. Each new review triggers an email notification to the controller with your name, rating, event and comment.

Legal basis: your explicit consent, given by ticking the authorisation box on the form (Art. 6(1)(a) GDPR). The encrypted IP fingerprint is based on the legitimate interest in protecting the website against spam (Art. 6(1)(f) GDPR).

Withdrawal: you may withdraw your consent and ask for your review and photo to be deleted at any time by writing to kikeargandonaguitar@gmail.com. Withdrawal does not affect the lawfulness of the earlier publication.

Minimum age: reviews may only be submitted by people aged 14 or over. Do not send photos showing other people without their permission.

Retention: published reviews, until their author asks for their removal or until the reviews section is discontinued. Reviews that are not approved are deleted, together with their photo, when they are moderated. The encrypted IP fingerprint, 24 hours.

4. Browsing the website

To display the website, the hosting provider’s server receives the technical data that every browser sends (for example IP address, date and requested page) and may log it for security and operational purposes, under its own terms. The legal basis is the legitimate interest in providing a secure website (Art. 6(1)(f) GDPR).

This website does not use analytics, advertising or tracking tools. Fonts and libraries are loaded from the website’s own server, without contacting third parties. If you accept cookies and press play on a video that can be watched on the website, your browser connects to YouTube (Google), which receives your IP address and technical browser data and may store its own cookies, under its privacy policy. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw from “Cookie settings”. More information in the Cookie policy.

5. Recipients

Data is not sold or disclosed to third parties, except where required by law.

6. International transfers

Google may process email data and, if you play a video on the website, YouTube data outside the European Economic Area, in particular in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, recognised by the European Commission as an adequate safeguard. The same may apply to WhatsApp if you use it, under the safeguards offered by that service.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time, by writing to kikeargandonaguitar@gmail.com or by post to the address above. Please state which right you wish to exercise. If there is reasonable doubt about your identity, additional information may be requested to confirm it. You will receive a reply within one month at the latest.

If you believe your rights have not been properly respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.

No automated decisions or profiling are carried out with your data.

8. Changes to this policy

If the way the website works changes, this policy will be updated and the date of the last update will be shown.