Privacy policy

1. Data controller

David Espínola Pérez · NIF 74741033A
Calle de Hermosilla 48, 1º Derecha, 28001 Madrid, España
info@valiatickets.com

2. Data and purposes

We process account and business data, data needed to create and manage vouchers, billing and support information, and technical usage data. We use it to provide the service, authenticate users, generate and validate vouchers, manage subscriptions and payments, provide support, secure the platform, and improve it through consented analytics.

3. Legal basis

• Performance of the contract to provide Valia and manage the account.
• Consent for Google Analytics and other non-essential cookies.
• Legitimate interests for security, fraud prevention, and essential improvement.
• Legal obligations for tax and accounting information.

4. Retention

We retain data while the account is active and afterwards for the periods required to meet legal responsibilities. Data processed by consent is deleted or no longer processed when consent is withdrawn, unless legally required.

5. Providers and transfers

We may share data with processors providing hosting and private database and storage infrastructure (including Vercel), payments (Stripe), AI image generation, and analytics (Google Analytics), and with authorities when required by law. Where a provider processes data outside the EEA, we apply legally required safeguards, including Standard Contractual Clauses where applicable.

6. Google Analytics and cookies

Google Analytics loads only if you accept analytics cookies. It collects information about pages visited, device, navigation, and interactions to produce aggregated statistics. We do not use session recording. You can withdraw consent at any time from the cookie policy.

7. Your rights

You may request access, rectification, erasure, objection, restriction, and portability, and withdraw consent, by writing to info@valiatickets.com. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Source and security

Data comes from the user and their use of the platform. We apply reasonable technical and organisational measures to protect it, although no system can guarantee absolute security.