Privacy policy

Last updated: September 2026. This is a courtesy translation; the Spanish version is the legally binding one.

1. Data controller

  • Controller: [[RAZÓN SOCIAL O NOMBRE Y APELLIDOS]]
  • Tax ID: [[NIF / CIF]]
  • Address: [[DOMICILIO FISCAL COMPLETO]]
  • Email: hola@confetticlub.es
  • Phone: +34 689 884 462

2. What we collect

Only what you voluntarily enter in the quote form:

  • Name
  • Phone number
  • Email address
  • Event date, event type, town, approximate guest count and hours of service
  • Anything you add in the free-text field

None of this is sent to a server of ours. The form assembles it in your own browser and opens WhatsApp or your email client with the message already written: you decide whether to send it. If you do not, it never reaches us and no copy is kept anywhere.

We collect nothing automatically beyond what is described in section 8. This site uses no cookies and stores nothing in your browser.

3. Why we use it

Solely to answer your quote request and manage any resulting booking: to contact you, prepare the proposal, coordinate the details of the event and, if you book, issue the invoice.

We do not build profiles, we make no automated decisions with legal effect, and we send no marketing unless you explicitly ask us to.

4. Legal basis

Processing is based on your consent, given by ticking the box on the form before submitting it (GDPR article 6.1.a).

If you go on to book, subsequent processing is based on performance of the contract (article 6.1.b) and on compliance with applicable tax and accounting obligations (article 6.1.c).

5. How long we keep it

If we do not end up working together, we keep your details for a maximum of 12 months from your enquiry in case you come back to us, and then delete them.

If you book, we keep them for the duration of the relationship and afterwards for the statutory limitation periods for tax and accounting obligations (currently 6 years under the Spanish Commercial Code and 4 years under tax legislation).

6. Who we share it with

We do not sell or transfer your data to third parties for commercial purposes.

This site is hosted by Cloudflare, Inc. (Cloudflare Pages), acting as a data processor. Because the form transmits nothing, the host never handles what you type.

Your enquiry reaches us through whichever channel you choose when you send it:

  • If you choose WhatsApp, the conversation is governed by the privacy policy of WhatsApp Ireland Ltd. (Meta group), over which we have no control.
  • If you choose email, the message travels through your email provider and ours.

In both cases, once we receive your message we are the controller of the data it contains, on the terms of this policy.

Where any of these suppliers is located outside the European Economic Area, the transfer is covered by the Standard Contractual Clauses approved by the European Commission or by a valid adequacy decision.

7. Your rights

You can exercise the following rights at any time by writing to hola@confetticlub.es, stating which right you wish to exercise and enclosing a copy of your ID:

  • Access: find out what data of yours we process.
  • Rectification: correct anything inaccurate.
  • Erasure: ask us to delete it.
  • Restriction: ask us to suspend processing.
  • Portability: receive it in a structured, commonly used format.
  • Objection: object to the processing.
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

We will respond within one month. If you believe we have not handled your request properly, you may complain to the Spanish Data Protection Agency (www.aepd.es).

8. Cookies and analytics

This site uses no cookies. It also stores nothing in your browser’s local storage.

To measure visitor numbers we use Cloudflare Web Analytics, which uses no cookies, does not track users across websites and collects no personal data: it produces only aggregated statistics on page views, country and traffic source.

For that reason, and in line with the Spanish Data Protection Agency’s guidance, this site does not need to show a cookie consent banner.

9. Security

The site is served entirely over an encrypted connection (HTTPS). We apply reasonable technical and organisational measures to protect data against loss, unauthorised access or alteration.

Even so, no system is completely infallible: absolute security cannot be guaranteed.

10. Changes to this policy

We may update this policy to reflect legal changes or changes in how the service is delivered. The date of the last update appears at the top of this page.