Privacy policy

About this Privacy Policy

This Privacy Policy explains how and what type of personal data is collected, the legal basis for such collection, the purpose of processing, and the entire lifecycle of such data, including the retention period, transfer to third parties (if applicable), and the timing of its deletion. We value your privacy, and for this reason, we only request data that is strictly necessary to ensure the proper functioning of our platform, guaranteeing that the data collected is relevant, adequate, and not excessive in relation to the purposes for which it was collected. To maintain the accuracy and integrity of your data while the relationship between you and any other interested parties continues, it is the user's responsibility to keep their data up to date.

This Privacy Policy also provides information about your rights concerning your personal data. We ask that you carefully read this policy to understand the channels we provide for the free exercise of your rights.

About Us
Any references to “The Sombrero Galaxy,” “SOM,” or “We” are used interchangeably for self-reference. Should you have any questions or concerns regarding this Privacy Policy, you may contact us at info@thesombrerogalaxy.com

Scope of Application
This Privacy Policy applies when you:

  • Browse the website thesombrerogalaxy.com, as well as when you access our social media platforms.

  • Register your personal data as a user of the platform or complete forms provided by The Sombrero Galaxy.

  • Purchase a subscription, register for an event, or subscribe to our Newsletters.

  • Participate in our research activities or surveys.

  • Contact our customer service center or reach out to us through our social media platforms.

I. What Type of Personal Data Do We Collect?

Data Necessary to Use The Sombrero Galaxy Platform
Whenever you use any of The Sombrero Galaxy platforms, we collect personal data to ensure the proper provision of our services. We only request the data strictly necessary to perform our tasks, ensuring that the data is adequate, relevant, not excessive, and limited to the purposes for which it is processed. The data collected includes, but is not limited to, the following:

Identification Data
This category includes your name, surname, and email address.

Communication and Interaction Data
Communication data arises from your interactions with us, such as email exchanges, chat messages, completed forms, search history on the platform, and any other information that may relate to your interests in the products and services offered on the platform.

Device and Browser Data
When visiting our website, information about the device you use is collected, including device type, location, browser type and version, operating system and its version, internet provider, IP address, software or hardware details, error data, read receipt confirmations, geolocation based on the IP address or other information shared according to your device settings, access timestamps, and other identifiers that help recognize your device and validate your user identity.

Payment Data
The Sombrero Galaxy processes and stores credit card information to manage payments through Stripe, the payment gateway responsible for processing transaction data. For more information, you may review Stripe's privacy policy here.

II. Purpose of the Collected Data

Platform Functionality and Development
We process your data to enable access to The Sombrero Galaxy platforms, send messages, updates, changes to our policies, and security alerts.
We use your data to analyze and detect platform errors, improve the services offered, manage claims, and enhance your experience by tailoring our services based on your search history and profile preferences.
The legal basis for this processing is your consent at the time of registration and the fulfillment of a contractual relationship by agreeing to our Terms and Conditions.

Protection of The Sombrero Galaxy and Its Community
The data provided helps us prevent, detect, and address fraud and other unauthorized uses of the platform that may jeopardize the security of our users. It is also used to verify or authenticate the information provided, including user identity.

Commercial Purposes and Improving Marketing Services
We may use the data provided for advertising purposes, provided the user has explicitly consented. This includes sending promotions, discounts, and relevant updates, tracking advertising campaigns, improving ads on social media, and managing rewards programs, giveaways, or promotional events organized by The Sombrero Galaxy or our partners.
The legal basis for these activities is the user’s explicit consent for commercial purposes, which may be withdrawn at any time through the designated channels.

III. Disclosure of Data to Third Parties
When required by law or reasonably necessary, we may disclose your personal data to courts, tribunals, or government entities to fulfill legal obligations, comply with court orders, respond to claims against The Sombrero Galaxy, or cooperate in criminal investigations regarding unlawful activities that could harm the platform or our reputation.

IV. Security
The Sombrero Galaxy is committed to safeguarding the information it processes through its platforms. We continually review and implement administrative and technical security measures to ensure the protection, availability, integrity, and confidentiality of personal data, thereby preventing unauthorized destruction, extraction, alteration, or access.
Our platform uses an “HTTPS” security protocol, ensuring that it is verified and secure. This is reflected in the beginning of the URL in your browser's address bar. Do not enter your credentials if the “HTTPS” indicator is missing.

Users are solely responsible for implementing adequate security measures to protect access to their accounts. Users must not share their login credentials (username and password) and should ensure passwords are sufficiently robust to prevent unauthorized access. Users are accountable for any consequences resulting from intrusions or payments made through their accounts.

Upon noticing any unauthorized access to your account, you must immediately notify The Sombrero Galaxy to take appropriate measures and mitigate any potential damages.

V. Exercising Your Rights
You may exercise the following rights at any time and free of charge by submitting a request, including the reasons for your inquiry, and verifying your identity as necessary:

  • Access and Portability: Request a copy of your personal data, details about its processing, or transfer the data to another provider where technically feasible.

  • Rectification: Correct inaccurate or incomplete personal data by specifying the data to be amended.

  • Objection: Object to the processing of personal data for advertising, commercial activities, or decisions based solely on automated processing.

  • Limitation: Request the restriction of data processing in cases where data accuracy is disputed, processing is unwanted but deletion is not desired, or the original purpose no longer applies but deletion is legally restricted.

  • Erasure and Forgetting: Request the deletion of personal data if it is inappropriate, excessive, or unlawfully processed, or if the original purpose no longer applies.

To exercise these rights, please email info@thesombrerogalaxy.com, specifying the reason for your inquiry and providing proof of identity.
If The Sombrero Galaxy does not respond or if the response does not satisfy your request, you have the right to file a complaint with the competent data protection authority (www.aepd.es).

VI. Retention of Personal Data
Personal data will be retained only as long as necessary to fulfill the purposes outlined at the time of collection and to comply with any legal obligations.
To prevent data loss or destruction (whether accidental or malicious), we maintain backup copies, which may result in residual data persisting for a short time in backup systems.

VII. Changes to the Privacy Policy
The Sombrero Galaxy reserves the right to modify this Privacy Policy at any time, in compliance with applicable national and international regulations, to align with regulatory changes and keep this policy up to date. When changes are made, we will notify our community and update the "Last Updated" date.

If substantial changes occur, such as the introduction of a new data processing activity, we will notify you via email well before the new policy takes effect. If you disagree, you may opt to close your account. If you continue using the platform after the new policy takes effect, your access will be subject to the latest version of the Privacy Policy.

VIII. Cookie Policy
This Privacy Policy integrates the Cookie Policy published on our website.
The Sombrero Galaxy uses cookies, mobile identifiers, tracking URLs, log data, and similar technologies to support the development and continuous improvement of our platforms.
Upon accessing our platform, you may configure the cookie settings as desired, provided that essential cookies remain enabled for the platform’s proper functioning.

IX. Consent
By accepting this Privacy Policy, the user acknowledges having read and understood the information provided in a clear and comprehensive manner, understanding its scope, and freely, specifically, and unequivocally consenting to the processing of their data in compliance with Article 22 of the Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE); Articles 6 and 7 of the General Data Protection Regulation 2016/679 (GDPR); and Article 6 of the Organic Law 3/2018.

X. Data Controller

Josefina Nano, in her capacity as the owner of The Sombrero Galaxy, holding DNI: 60366638X, with registered office at Travessera de Gracia 251, 2nd Floor, 08015 - Barcelona, is the DATA CONTROLLER for the processing of personal data related to the data subjects.

DECEMBER 2024.