1. Data controller
The data controller for the personal data collected through the Christmas FantasÃa website is:
- •Owner: Ignacio Severino Pasten
- •Tax ID (NIF): X9258604T
- •Registered office: C/ Polvoranca 31, 28921
- •christmas.fantasiacontacts@gmail.com
- •Website: https://christmasfantasia.com/
2. What personal data do we process?
Depending on the features used on the website, we may process:
- •Name and surname, or the name provided by the user.
- •Email address.
- •Messages sent through the contact form.
- •Resource requested and language preference in the download forms.
- •Information related to participation in the cover voting.
- •Name or alias and content of comments published in the gallery.
- •Technical identifiers used for certain security and abuse-prevention functions.
- •IP address or equivalent technical information, processed in a limited way for security, abuse prevention and request control.
- •Date of consent when applicable.
- •Version of the policy accepted in processes where such consent is registered.
We do not deliberately request special categories of personal data.
3. Purposes of processing
The purposes depend on the feature used.
3.1 Contact form
The data provided through the contact form is used to:
- •Receive and respond to the enquiries made.
- •Manage the communication requested by the user.
- •Keep a record of communications when necessary.
- •Apply security and abuse-prevention measures.
The submitted data may be stored in our database and used to send the corresponding reply through our email provider.
3.2 Download requests
The data provided to request resources is used to:
- •Manage the request for the selected resource.
- •Provide access to the requested content.
- •Keep a record of the requests.
- •Prevent abusive or automated use.
When the user explicitly ticks the corresponding box, their data may additionally be used to receive communications related to Christmas FantasÃa, in accordance with what is indicated in that box.
Receiving commercial communications is voluntary and does not condition the provision of the requested service.
3.3 Cover voting
The data provided in the voting is used to:
- •Register the vote.
- •Prevent duplicate or fraudulent votes.
- •Manage participation in the voting process.
- •Manage, where applicable, the giveaway or promotion associated with the voting.
- •Contact a participant when necessary.
- •Evidence the consent given when this is the legal basis used.
To avoid duplicates, the normalised email address and certain technical security data may be used.
3.4 Gallery
The gallery may include comment and “like†features.
Comments may publicly display the name or alias entered by the user and the content of the comment.
For certain abuse-prevention functions, a random technical identifier stored locally in the browser may be used. This identifier is not used for advertising or to build browsing profiles.
4. Legal basis
Depending on the feature used, processing may be based on:
- •The implementation of measures requested by the data subject and the management of their communication.
- •The consent of the data subject, when expressly requested.
- •The legitimate interest of the controller in maintaining the security of the website, preventing abuse and ensuring the proper functioning of its features.
- •Compliance with legal obligations where applicable.
When consent is requested, it must be given by an affirmative action and may subsequently be withdrawn.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Commercial communications
Some forms may include a separate, optional box to receive news, events and exclusive content.
- •This box will not be ticked by default.
If the user gives consent, we may keep evidence of that consent to manage the corresponding communications.
Christmas FantasÃa currently does not use a specific external newsletter provider for automated campaign sending.
The user may withdraw their consent to receive commercial communications at any time by writing to: christmas.fantasiacontacts@gmail.com
6. Recipients and providers
To provide certain technical services we may use external providers, including:
- •Supabase, for the storage and management of certain data.
- •Resend, for sending certain emails related to the forms.
- •Vercel, as hosting provider and for the execution of certain website functionalities.
- •Spotify, when the user interacts with the Spotify player or content embedded on the website.
- •Google Fonts, for the loading of certain fonts when requested from Google's servers.
These providers may process certain technical data necessary to provide their services.
When a provider is located outside the European Economic Area, processing must be carried out through a valid mechanism in accordance with the applicable regulations, such as an adequacy decision or the appropriate safeguards.
7. Data retention
Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods necessary to address possible legal liabilities.
Data processed on the basis of consent will be kept while such consent remains valid, unless another legal basis allows it to be kept.
Technical data used for security and abuse prevention will be kept for the time strictly necessary for that purpose.
8. Security
Reasonable technical and organisational measures are applied to protect personal data against loss, unauthorised access, alteration or improper disclosure.
Access to the administrative functions of the database is carried out using credentials intended for the server environment. Privileged credentials must not be publicly exposed or included in code executed in the browser.
9. Users' rights
The user may exercise the following rights, where applicable:
- •Right of access.
- •Right of rectification.
- •Right of erasure.
- •Right to restriction of processing.
- •Right to object.
- •Right to data portability.
- •Right to withdraw consent where processing is based on it.
To exercise these rights, you can write to: christmas.fantasiacontacts@gmail.com
The request must reasonably allow the requester to be identified and specify the right they wish to exercise.
Likewise, the data subject may lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their data does not comply with the applicable regulations.
10. Minors
Christmas FantasÃa is not specifically aimed at minors.
We do not deliberately request specially protected information about minors. If personal data of a minor is found to have been collected without the necessary legal basis, appropriate measures may be taken for its deletion.
11. External links
The website may contain links to third-party websites, such as social networks or external services.
Christmas FantasÃa does not control the privacy policies or practices of those third parties. The user should consult their respective privacy policies.
12. Updates
This Privacy Policy may be modified when necessary to adapt to legal, technical or functional changes of Christmas FantasÃa.
The version in force will be the one published on this page.
Contact: christmas.fantasiacontacts@gmail.com