Privacy Policy

1. Data Controller

The Data Controller is:

2. Types of Data Collected

Data voluntarily provided by users

• First and last name
• Email address
• Phone number (for WhatsApp contacts)
• Professional information related to artistic activities
• Personal and contact data for collective applications

Data collected automatically

• IP address
• Browser type and device used
• Operating system
• Pages visited and time spent
• Referrer website
• Date and time of access

3. Purposes and Legal Basis for Processing

Personal data is processed for the following purposes:

4. Processing Methods

Personal data processing is carried out through:

• Electronic tools and computerized procedures
• Methods suitable to ensure security and confidentiality
• Access granted exclusively to authorized personnel
• Adequate technical and organizational measures (e.g., encryption, backup, firewall)

5. Data Recipients

Personal data may be communicated to:

Data Processors

• Brevo SAS - Email marketing and newsletter management services
• Google LLC - Analytics and advertising services
• Meta Platforms, Inc. - Advertising and remarketing services
• GoDaddy Operating Company, LLC - Hosting services

Data will not be disseminated or sold to third parties for direct marketing purposes without user consent.

6. Data Transfer Outside the EU

Some service providers are located in non-EU countries (mainly the United States). Data transfer to such countries occurs in compliance with GDPR safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• EU-US Data Privacy Framework certification (where applicable)
• Other appropriate safeguards under Articles 46-49 GDPR

7. Data Retention Period

8. Data Subject Rights

Regarding the processing of personal data, data subjects have the right to:

• Access Obtain confirmation of data existence and access their content
• Rectification Update or correct inaccurate data
• Erasure Obtain data deletion in cases provided by GDPR
• Restriction Obtain processing limitation in certain cases
• Portability Receive personal data in a structured and readable format
• Object Object to processing for legitimate reasons
• Withdraw consent Withdraw consent at any time

9. Cookie Policy

Information about Cookies

Cookies are small text files that visited websites send to the user's browser, where they are stored and then retransmitted to the same sites on subsequent visits.

Types of Cookies Used

Cookie Management

Users can manage cookie preferences through:

• Browser settings
• The consent panel shown on first access
• Opt-out links provided by individual services

Useful links:

• Google Analytics Opt-out
• Facebook Cookie Policy
• Your Online Choices

10. Processing of Minors' Data

HivesMash services may be used by minors over 14 years of age. For minors under 16 years, processing is lawful only if authorized by the holder of parental responsibility.

HivesMash does not knowingly collect personal data from minors without parental or legal guardian consent.

11. Changes to This Policy

The Data Controller reserves the right to make changes to this privacy policy at any time. In case of substantial changes, adequate notice will be provided to users through the website.

We recommend checking this page periodically to stay informed about any changes.

12. Judicial Remedies

Pursuant to Article 79 of the GDPR, without prejudice to any other administrative or non-judicial remedy, data subjects who consider that the processing of their personal data infringes the GDPR have the right to an effective judicial remedy.

Proceedings may be brought before the courts of the Member State where the data subject habitually resides or works, or of the place where the alleged infringement occurred.