Privacy Policy - Bull Event

1. Data Controller

In compliance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, the user is informed that the data controller for the personal data collected through this website is:

Controller: Toroshopping, S.L.
Trade name: Bull Event
Tax ID (NIF): B92950146
Registered office: Centro Melior Vasari, Urbanización La Alzambra, 3, Local 1, 29660 Marbella, Málaga, Spain.
Registration data: Registered in the Mercantile Registry of Málaga, volume 4566, folio 11, sheet MA-98915, 1st entry.
Email: info@bullevent.es
Phone: +34 679 58 35 36
Website: https://bullevent.es/

Hereinafter, BULL EVENT, the CONTROLLER, or the OWNER.

2. Scope of Application

This Privacy Policy applies to the processing of personal data provided by users through Bullevent.es and the forms, email addresses, contracting systems, communication tools, and other channels linked to the website.

It may also apply to personal data processed in the context of information requests, quotes, service contracting, commercial relationships, project management, suppliers, collaborators, and professional communications related to the activity of BULL EVENT.

3. Personal Data We May Process

Depending on the relationship maintained with the user, BULL EVENT may process the following categories of data:

Identification data, such as first and last name.
Contact data, such as email address, phone number, and mailing address.
Professional data, such as company, position, professional activity, or the entity represented.
Data necessary to prepare quotes, proposals, or contracts.
Billing, tax, and administrative data.
Data related to the services contracted or requested.
Data contained in communications maintained with BULL EVENT.
Technical and browsing data, such as IP address, browser type, device, operating system, pages visited, and data obtained through cookies or similar technologies.
Data necessary to manage incidents, technical support, reservations, tickets, audio guides, digital platforms, or technological projects, where applicable.
Any other data that the user voluntarily provides.

BULL EVENT requests only the data that is adequate, relevant, and necessary to fulfill each purpose.

The user must refrain from providing specially protected data or third-party information that is not necessary for the management of their request.

4. Purposes of Processing

Personal data may be processed for the following purposes:

4.1. Handling Inquiries and Requests

Managing and responding to inquiries, information requests, contact requests, doubts, suggestions, or communications sent through the website, by email, phone, or other enabled channels.

4.2. Preparation of Quotes and Commercial Proposals

Preparing, sending, and following up on quotes, service proposals, commercial presentations, tenders, projects, or collaboration requests.

4.3. Management of Contractual and Commercial Relationships

Managing the contracting, execution, follow-up, billing, and administration of services provided by BULL EVENT.

These services may include, among others:

Tourism and cultural management.
Management of visits, museums, monuments, and spaces.
Ticketing systems and ticket sales.
Audio guides and digital applications.
Virtual reality, augmented reality, and immersive content.
Development and management of websites and digital platforms.
Management of physical and online stores.
Consulting, communication, marketing, and technological services.
Organization and management of experiences, events, or activities.

4.4. Management of Clients, Suppliers, and Collaborators

Maintaining and managing professional, contractual, administrative, and economic relationships with clients, suppliers, institutions, collaborators, and other professional contacts.

4.5. Administrative, Accounting, and Tax Management

Issuing invoices, managing collections and payments, keeping accounts, and complying with applicable legal, tax, commercial, and administrative obligations.

4.6. Commercial Communications

Sending, when a valid legal basis exists, information about services, projects, news, activities, events, or content related to BULL EVENT.

The user may object to these communications or withdraw their consent at any time.

4.7. Technical Management and Website Security

Ensuring the operation, maintenance, availability, and security of the website, preventing fraud, abuse, unauthorized access, or illegal activities, and managing possible technical or security incidents.

4.8. Statistical Analysis and Service Improvement

Analyzing website use and obtaining aggregated statistics to improve its content, functionality, performance, campaigns, and services.

When these operations are carried out using non-necessary cookies, the user’s prior consent will be requested.

4.9. Management of Job Applications

In the event that the user voluntarily submits their resume, BULL EVENT may process their data to assess their profile for current or future selection processes.

4.10. Compliance with Legal Obligations

Meeting the legal obligations applicable to the CONTROLLER, responding to requests from public authorities, administrative bodies, courts, and tribunals, and exercising or defending rights and claims.

5. Legal Basis for Processing

The legal bases that allow for the processing of personal data are as follows:

Consent of the Data Subject

When the user:

Sends a contact form.
Requests information without a contractual relationship yet existing.
Subscribes to commercial communications.
Accepts analytical, advertising, or third-party cookies.
Voluntarily submits their resume.
Authorizes any other specific processing.

The user may withdraw their consent at any time. The withdrawal will not affect the lawfulness of the processing carried out previously.

Application of Pre-contractual Measures

When processing is necessary to:

Prepare a quote.
Handle a service request.
Develop a proposal.
Manage prior negotiations.
Respond to a request linked to a future contract.

Execution of a Contract

When processing is necessary to formalize, execute, administer, and monitor the services contracted with BULL EVENT.

Compliance with Legal Obligations

When data must be processed to comply with tax, accounting, commercial, administrative, labor, consumer protection obligations, or any other applicable legal obligation.

Legitimate Interest

BULL EVENT may process certain data when necessary to:

Maintain relationships with clients, suppliers, and professional contacts.
Carry out professional communications related to services already contracted.
Protect the security of the website and its systems.
Prevent fraud and illegal uses.
Manage claims.
Defend its rights and interests.
Improve the organization, operation, and quality of its services.

When processing is based on legitimate interest, a balance will be struck between the interests of the CONTROLLER and the rights and freedoms of the data subjects.

6. Mandatory Nature of Data

Fields marked as mandatory in the forms must be completed to properly handle the request.

If the user does not provide the mandatory data, BULL EVENT may not be able to respond to their inquiry, prepare a quote, or provide the requested service.

The user guarantees that the data provided is true, accurate, complete, and up to date.

The user will be responsible for communicating any modification of their personal data and for any damages that may occur due to providing false, incomplete, inaccurate, or outdated information.

7. Third-Party Data

When the user provides personal data of another person, they declare that they have a valid legal basis to communicate it and that they have previously informed the third party about the processing of their data.

The user undertakes not to provide third-party data that is not necessary for the management of the service or that has been obtained illegally.

8. Retention Periods

Personal data will be kept for the time necessary to fulfill the purpose for which it was collected.

In general, the following criteria will apply:

Inquiries and information requests: for the time necessary to respond and, subsequently, for a reasonable period for follow-up.
Quotes and unaccepted proposals: for the period necessary for follow-up and as long as liabilities may arise.
Clients and contracted services: while the contractual relationship is maintained and subsequently during the applicable legal periods.
Tax, accounting, and billing data: during the periods required by tax, commercial, and accounting regulations.
Commercial communications: until the user withdraws their consent or objects to the processing.
Resumes: for a maximum period of one year, unless the data subject authorizes its retention for a longer period or there is an active selection process.
Browsing data and cookies: during the periods established in the Cookie Policy and in the configuration of each tool.
Claims and incidents: for the time necessary for processing and as long as legal liabilities may arise.

Once these periods have ended, the data may be kept duly blocked during the legal limitation periods and will subsequently be deleted or anonymized.

9. Data Recipients

Personal data will not be sold or transferred to third parties for commercial purposes.

It may be communicated to third parties when necessary to provide the requested services or comply with a legal obligation.

Possible recipients include:

Public administrations.
Tax Agency.
Social Security.
Courts and tribunals.
Law enforcement agencies.
Financial entities and payment platforms.
Tax, labor, accounting, or legal consultancies.
Insurance companies.
Clients, institutions, or entities responsible for the projects managed by BULL EVENT, when necessary.
Reservation, ticket sales, or ticketing platforms.
Technology providers, web hosting, email, maintenance, analytics, storage, communications, and security.
Transport, courier, or logistics companies, when necessary to provide the service.
Other providers involved in the execution of the contract.

When a provider processes personal data on behalf of BULL EVENT, it will act as a data processor and must offer sufficient guarantees of compliance with the GDPR.

10. Data Processors

BULL EVENT may contract providers who need to access personal data to provide services such as:

Web hosting and servers.
Email.
IT maintenance.
Website development and management.
Ticketing platforms.
Audio guide systems and applications.
Customer management tools.
Cloud storage systems.
Web analytics services.
Email marketing platforms.
Payment services.
Support and security services.
Automation and artificial intelligence tools.

These providers will process the data following the instructions of BULL EVENT and will be subject to the corresponding contractual obligations of confidentiality, security, and data protection.

11. International Data Transfers

Some technology providers used by BULL EVENT may be located outside the European Economic Area or process information from third countries.

When international data transfers occur, BULL EVENT will ensure they are carried out through one of the guarantees recognized by the regulations, such as:

An adequacy decision by the European Commission.
Standard contractual clauses approved by the European Commission.
Binding corporate rules.
The EU-U.S. Data Privacy Framework, where applicable.
Any other legally recognized mechanism.

The user may request additional information about the guarantees applied by writing to info@bullevent.es.

12. Commercial Communications

BULL EVENT may send commercial communications when:

The user has given their consent.
A prior contractual relationship exists and the communications refer to similar products or services.
Another legal basis exists that allows it.

The user may unsubscribe at any time through:

The link provided in each communication.
Sending an email to info@bullevent.es.
Any other procedure indicated in the communication.

Unsubscribing from commercial communications will not affect the messages necessary to manage contracted services, reservations, invoices, incidents, or contractual relationships.

13. Use of Cookies and Similar Technologies

Bullevent.es may use its own and third-party cookies to:

Ensure the technical operation of the website.
Remember preferences.
Analyze the use and performance of the page.
Measure campaigns.
Integrate third-party content or functionality.
Show personalized communications, where applicable.

Non-necessary cookies will only be installed when the user has given their consent.

The user can accept, reject, configure, or withdraw their consent through the cookie settings panel.

Detailed information is available in the:

Cookie Policy:
https://bullevent.es/politica-de-cookies/

14. Social Networks

BULL EVENT may maintain profiles on social networks.

When the user interacts with these profiles, the processing of their data will be governed by both this Privacy Policy and the policies of each social network.

BULL EVENT may process data derived from these interactions to:

Handle comments and messages.
Inform about its services and activities.
Manage campaigns, promotions, or communications.
Understand interaction statistics.
Moderate content.

The user should avoid publishing their own or third-party personal data that is not necessary in public spaces.

15. Artificial Intelligence and Automated Systems

BULL EVENT may use artificial intelligence, automation, or digital assistance tools to support tasks such as:

Drafting and reviewing content.
Translation.
Organization and classification of information.
Initial handling of inquiries.
Data analysis.
Preparation of proposals.
Development of audio guides or digital content.
Improvement of internal processes.

When these tools involve the processing of personal data, BULL EVENT will endeavor to apply minimization, confidentiality, security, and human supervision measures.

Unnecessary personal data, specially sensitive information, or confidential documentation will not be deliberately introduced into public artificial intelligence tools without adequate guarantees.

In general, BULL EVENT does not make decisions that produce legal effects on users based exclusively on automated processing.

When an automated decision-making system with legal or significantly similar effects is implemented, affected persons will be previously informed about its logic, scope, consequences, and rights.

16. Minors

The services of Bullevent.es are not specifically directed at minors under fourteen years of age.

Minors under fourteen years of age should not provide personal data without the authorization of their parents, guardians, or legal representatives.

If BULL EVENT detects that it has received data from a minor without the corresponding authorization, it may delete it and adopt the necessary measures to prevent its processing.

In services or activities intended for minors, specific authorization and data protection procedures may be established.

17. Data Security

BULL EVENT adopts reasonable technical and organizational measures to protect personal data against:

Unauthorized access.
Loss.
Destruction.
Alteration.
Improper disclosure.
Illegal processing.
Fraudulent use.

These measures will be reviewed and updated considering the nature of the data, the risks of processing, the state of the art, and the costs of application.

However, no system connected to the Internet can guarantee absolute security.

The user must communicate to BULL EVENT any incident or suspicion of improper use of their data.

18. Confidentiality

Persons authorized to process personal data will be subject to confidentiality obligations and must use the information only for the functions assigned to them.

The duty of confidentiality will continue to be in effect even after the professional, labor, or contractual relationship has ended.

19. Rights of Data Subjects

The user may exercise the following rights:

Right of Access

Request information on whether BULL EVENT is processing their personal data and obtain a copy of it.

Right of Rectification

Request the correction of inaccurate data or the updating of incomplete data.

Right of Erasure

Request the deletion of their data when it is no longer necessary, consent has been withdrawn, or another legal cause exists.

Right to Object

Object to the processing of their data when it is based on legitimate interest or used for commercial communications.

Right to Restriction of Processing

Request that processing be restricted in legally established cases.

Right to Portability

Receive the data provided in a structured, commonly used, and machine-readable format, or request its transmission to another controller when technically possible.

Right to Withdraw Consent

Withdraw consent at any time without affecting the processing carried out previously.

Right Not to Be Subject to Automated Decisions

Request not to be subject to a decision based exclusively on automated processing that produces legal effects or significantly affects them.

20. Exercise of Rights

To exercise their rights, the data subject may send a request to:

Email: info@bullevent.es

Mailing address:
Toroshopping, S.L.
Centro Melior Vasari
Urbanización La Alzambra, 3, Local 1
29660 Marbella, Málaga, Spain.

The request must indicate:

First and last name of the data subject.
The right they wish to exercise.
Data necessary to identify the processing.
Address or means of contact to receive the response.
Documentation proving identity when there are reasonable doubts about the identity of the applicant.

BULL EVENT will respond within the legally established periods.

The exercise of rights is free of charge, except in cases where requests are manifestly unfounded or excessive.

21. Complaint Before the Supervisory Authority

If the user considers that the processing of their personal data violates the regulations, they may file a complaint with the Spanish Data Protection Agency.

Before filing a complaint, the user may contact BULL EVENT to attempt to resolve the issue via email at info@bullevent.es.

The competent supervisory authority in Spain is:

Spanish Data Protection Agency (AEPD)
https://www.aepd.es/

22. Links to Third-Party Websites

Bullevent.es may include links to third-party pages, services, platforms, or social networks.

BULL EVENT does not control the privacy policies of such third parties and will not be responsible for their data processing.

The user should review the privacy policies of each external website or platform before providing personal data.

23. Update of the Privacy Policy

BULL EVENT may modify this Privacy Policy to adapt it to:

Legislative or jurisprudential changes.
Criteria of the supervisory authorities.
Changes in the services offered.
New providers or tools.
Technical or organizational modifications.
New processing operations.

The current version will be permanently published on Bullevent.es.

When changes are significant, BULL EVENT may inform users through a notice on the web or through available contact channels.

Last update: September 2026.