Privacy Policy

In compliance with Regulation (EU) 2016/679, General Data Protection Regulation, Organic Law 3/2018, on the Protection of Personal Data and Guarantee of Digital Rights, and Law 34/2002, on Information Society Services and Electronic Commerce, PRISIONIA A.I.E. informs users of this website about the processing of their personal data.

This Privacy Policy governs the processing of personal data that may be collected through browsing the website www.circodeloshorrores.com, the completion of forms, the purchase of tickets, the contracting of services, the subscription to commercial communications, the use of customer service channels and any other interaction maintained with PRISIONIA A.I.E.

The use of this website, the submission of forms, the contracting of services or the use of the communication channels made available to users implies the processing of personal data under the terms provided for in this Privacy Policy.

1. Data controller

The controller of the processing of personal data is:

Company: PRISIONIA A.I.E.
Tax ID (CIF): V88679501
Address: Paseo de las doce estrellas 4, planta 4, módulo A
28042 Madrid (Madrid)
Mercantile Registry:
Latest registration data in the Mercantile Registry:
Sheet M-892086 IRUS: 1000476500251. Electronic folio Entry 1
Deed Date: 23/04/2026
Filing Date: 19/06/2026
Notary/Certifier: ALONSO ROCAMORA PABLO
Residence: AYORA – VALENCIA
Protocol Number: 2026/495

PRISIONIA A.I.E. will process personal data in accordance with applicable regulations, adopting the necessary technical and organizational measures to guarantee its security, integrity, confidentiality and availability, as well as to prevent unauthorized access, loss, alteration, destruction or misuse of the data.

2. Personal data processed

PRISIONIA A.I.E. may process the following categories of personal data, depending on the relationship with the user and the services requested:

Identification data, such as name and surnames.

Contact data, such as email address, telephone number, mobile telephone and, where applicable, identifiers associated with messaging channels such as WhatsApp.

Data relating to the purchase or contracting, such as tickets purchased, show, date, seat, ticket category, experience contracted, amount, payment method, order number, incidents associated with the purchase and data necessary for the management of billing or after-sales service.

Data derived from queries, requests, complaints or claims, including the content of communications held with the user by email, web forms, telephone, WhatsApp or other enabled channels.

Browsing and website usage data, under the terms provided for in the Cookies Policy.

Data necessary for the management of commercial communications, subscriptions, unsubscriptions, contact preferences and objection to the sending of communications.

The user must provide truthful, accurate and up-to-date data, and shall be responsible for any damage or loss that may arise from the disclosure of false, inaccurate or third-party data without sufficient authorisation.

3. Purposes of data processing

PRISIONIA A.I.E. will process users' personal data for the following purposes:

3.1. Management of the relationship with users and clients

Personal data may be processed to respond to information requests, answer queries, manage forms submitted through the website, maintain contact with the user and process any request related to the shows, services or activities offered by PRISIONIA A.I.E.

3.2. Management of ticket purchases and provision of the contracted service

Personal data shall be processed in order to manage the purchase of tickets, confirm bookings, issue receipts, manage access to the event, provide the contracted services, resolve incidents related to the purchase, attend to modification or query requests and comply with the contractual obligations arising from the relationship with the client.

3.3. Administrative, accounting and tax management

Personal data may be processed in order to issue invoices, manage charges, attend to administrative, accounting, tax and legal obligations, as well as to retain the necessary documentation for the periods legally required.

3.4. Customer service, management of incidents, complaints and claims

PRISIONIA A.I.E. may process users' personal data to address queries, incidents, requests, complaints, claims, frequently asked questions, requests for assistance before, during or after the show and any communication related to the contracted experience.

This service may be provided through the channels enabled at any given time, including email, web forms, telephone, WhatsApp or other means of communication made available to the user.

3.5. Use of WhatsApp as a customer service channel

PRISIONIA A.I.E. may use WhatsApp as an additional customer service channel to answer queries, manage incidents, process complaints or claims, resolve frequently asked questions, provide operational information related to attending the event and provide assistance to the user before, during and after the show.

In particular, WhatsApp may be used for pilot programmes of personalised service for certain clients, including buyers of VIP experiences, tickets or services, when necessary or advisable to correctly provide the assistance associated with the contracted event.

The processing of personal data through WhatsApp may include the user's mobile telephone number, identification data, data relating to the purchase or ticket acquired, category or type of service contracted, event attended, date of attendance, content of the conversation, incidents reported and any other data that the user themselves voluntarily provides during the conversation.

The user must not send via WhatsApp specially protected data, complete bank details, complete identity documents, health data or any other information that is not necessary for the management of their query, incident or request.

3.6. Sending of commercial communications

PRISIONIA A.I.E. may process users' personal data to send commercial, informative or promotional communications related to shows, tours, promotions, campaigns, presales, news, experiences, benefits associated with tickets or contracted services and other products or services similar to those previously contracted or requested by the user.

These communications may be sent by email, SMS, telephone, WhatsApp or other equivalent electronic channels, provided that there is a valid legal basis for it and the rights of the user are respected.

When the sending of commercial communications is based on the user's consent, said consent must have been given by means of an affirmative, free, specific, informed and unambiguous action.

In the case of commercial communications addressed to clients with whom a prior contractual relationship exists, relating to its own products or services similar to those initially contracted, the processing may be carried out in accordance with the provisions of article 21.2 of Ley 34/2002, de servicios de la sociedad de la información y de comercio electrónico [Spanish Law 34/2002 on information society services and electronic commerce, LSSI-CE], provided that the data has been obtained lawfully and the user is offered a simple and free means of objecting to the processing.

3.7. Use of WhatsApp for commercial communications

PRISIONIA A.I.E. may use WhatsApp to send commercial communications such as newsletters about shows, tours, promotions, news, presales, campaigns and its own services related to the activity of Circo de los Horrores, provided that the user has validly authorized the receipt of such communications through this channel or there is another applicable legal basis in accordance with current regulations.

The use of WhatsApp as a commercial channel may involve the processing of the user's mobile telephone number, identification data, purchase data, commercial preferences, channel registration date, history of communications sent, message delivery status, user responses and unsubscribe requests.

The user may unsubscribe from the commercial communications received via WhatsApp at any time by replying with the word BAJA [UNSUBSCRIBE] to any of the messages received through that channel. The unsubscription shall be processed immediately or within the shortest technically possible period. They may also request to unsubscribe by sending an email to datosclientes@circodeloshorrores.com.

Unsubscribing from commercial communications via WhatsApp shall not affect the communications strictly necessary to manage a purchase, an incident, a claim or the correct provision of the contracted service.

3.8. Management of unsubscriptions, objections and communication preferences

PRISIONIA A.I.E. will process the personal data necessary to manage requests for cancellation, objection, revocation of consent and updating of communication preferences made by users.

When the user requests to unsubscribe from commercial communications, their data may be kept in a suppression list for the purpose of preventing new unauthorised commercial mailings.

3.9. Compliance with legal obligations

Personal data may be processed to comply with legal obligations applicable to PRISIONIA A.I.E., to respond to requests from administrative, judicial or police authorities, to manage claims, to keep required documentation and to address possible liabilities arising from the relationship maintained with the user.

4. Legal basis for the processing

The legal bases that legitimise the processing of personal data are the following:

4.1. Performance of the contractual relationship or application of pre-contractual measures

This legal basis shall apply when the processing is necessary to manage the purchase of tickets, provide the contracted service, attend to requests related to the event, manage incidents, resolve queries linked to the contracting or provide customer service before, during or after the show.

It shall also apply to the use of WhatsApp as a customer service channel when the conversation is intended to manage a query, incident, complaint, claim or assistance related to a purchase, ticket, event or service requested by the user.

4.2. User's consent

Consent shall be the applicable legal basis when the user voluntarily subscribes to commercial communications, authorises the receipt of communications through a specific channel, agrees to receive commercial messages via WhatsApp or provides their data for purposes that require express authorisation.

The user may withdraw their consent at any time, without this affecting the lawfulness of the processing carried out prior to its withdrawal.

4.3. Legal authorisation for commercial communications to previous clients

When there is a prior contractual relationship with the user, PRISIONIA A.I.E. may send commercial communications about its own products or services similar to those initially contracted, in accordance with the provisions of article 21.2 of Law 34/2002, provided that the data has been obtained lawfully and the user is offered a simple and free means to oppose the sending of such communications.

4.4. Compliance with legal obligations

This legal basis shall apply when the processing is necessary to comply with legal obligations in tax, accounting, administrative, consumer, defence-of-claims matters, cooperation with the competent authorities or retention of legally required documentation.

4.5. Legitimate interest

PRISIONIA A.I.E. may process personal data on the basis of its legitimate interest when necessary to prevent abuse or fraud, ensure website security, manage claims, keep evidence of communications, defend its rights or improve the quality of its services, provided that the rights and interests of users do not prevail.

5. Data retention

Personal data shall be retained for as long as necessary to fulfil the purpose for which it was collected and while the contractual, commercial or service relationship requested by the user is maintained.

Data linked to purchases, billing and legal obligations shall be retained for the periods required by the applicable tax, accounting, commercial, administrative or consumer regulations.

Data processed for commercial communications shall be retained until the user withdraws their consent, requests to unsubscribe or objects to the processing.

The data necessary to prove the unsubscription, objection or withdrawal of consent may be kept blocked or included in suppression lists for the purpose of preventing new unauthorised commercial mailings.

Data processed in WhatsApp conversations or other customer service channels shall be retained for as long as necessary to manage the request, incident, complaint or claim and, subsequently, for the periods necessary to address possible legal liabilities.

Once the purpose of the processing has been fulfilled, the data shall be deleted or blocked, unless it must be retained for an additional period to address administrative, legal, judicial or contractual liabilities.

6. Disclosure of data and recipients

In general, PRISIONIA A.I.E. will not communicate personal data to third parties, except when there is a legal obligation, it is necessary for the provision of the contracted service, the user has authorized it or it is necessary to have suppliers who process data on behalf of the controller.

Providers of technology services, ticket sales platforms, payment gateways, web hosting providers, messaging services, customer service tools, legal, tax or accounting advisers and other providers necessary for the correct provision of the services may have access to personal data.

When these providers process personal data on behalf of PRISIONIA A.I.E., they will act as data processors and must offer sufficient guarantees of compliance with the GDPR, formalizing the corresponding data processing agreement in accordance with Article 28 of the GDPR.

Personal data may also be disclosed to administrative authorities, public bodies, the Spanish State Law Enforcement Agencies (Fuerzas y Cuerpos de Seguridad), courts and tribunals when there is a legal obligation or a valid request.

7. Suppliers linked to the WhatsApp channel

Para la gestión del canal WhatsApp, PRISIONIA A.I.E. podrá permitir el acceso a datos personales a proveedores tecnológicos que intervienen en la prestación del servicio.

In particular, SuperX GmbH, based in Berlin, Germany, supplier of the Superchat platform, may be involved, acting as data processor for the centralised management of conversations, contacts, subscriptions, unsubscriptions, replies, automations, customer service and communications carried out through WhatsApp and other enabled channels.

Likewise, the use of WhatsApp requires the involvement of WhatsApp Ireland Limited and/or Meta Platforms Ireland Limited, as the entities providing the WhatsApp Business Platform infrastructure, to the extent necessary to route, deliver and manage the communications carried out through that channel.

WhatsApp Ireland Limited and/or Meta Platforms Ireland Limited may act, depending on the specific processing, the configuration of the service and the applicable contractual conditions, as technology suppliers, processors or sub-processors with respect to certain operations necessary for the provision of the service, and as independent controllers with respect to those processing activities they carry out for the WhatsApp platform's own purposes or those of its services.

The use of WhatsApp as a communication channel implies that the user uses a platform owned by third parties, also subject to their own terms, conditions and privacy policies with respect to those processing activities that said entities carry out as independent controllers.

8. Group companies and other recipients linked to the provision of the service

Personal data may be communicated to companies linked to PRISIONIA A.I.E. when necessary to manage the purchase of tickets, collections, payment gateways, provision of the contracted service, customer service or compliance with legal obligations.

These entities include:

Productores de Sonrisas, S.L., with CIF B85536308.

Sonrisas y Saltos, S.L., with CIF B13639133.

PDS y Amigos, A.I.E., with CIF V88151949.

Serrín en las Venas, A.I.E., with CIF V16747362.

Haciendo Malabares, A.I.E., with CIF V10643625.

Detrás de Backstage, A.I.E., with CIF V22764708.

Súbete al Alambre, A.I.E., with CIF V10619427.

La Vida es un Circo, S.L., with CIF B87831590.

Navidades y Sonrisas, S.L., with CIF B13639216.

Sonrisas y Adrenalina, S.L., with CIF B56309750.

Rara Suma y Sigue Espectáculos, S.L., with CIF B86384203.

LA POÉTICA DEL HORROR, A.I.E., con CIF V88154760. 

All of them located at Paseo de las Doce Estrellas, 4, Planta 4, Módulo 4, 28042 Madrid, unless another updated address is indicated.

The ticket purchase platform may be managed by Vivaticket Ibérica, S.L., with CIF B84092196, to the extent necessary to process the acquisition of tickets and associated services.

9. International data transfers

Con carácter general, PRISIONIA A.I.E. procurará que los datos personales sean tratados dentro del Espacio Económico Europeo.

However, certain technology suppliers, platforms or integrated services, including services linked to messaging, electronic communications, analytics, hosting, technical support or technological infrastructure, could involve international data transfers or access to data from countries located outside the European Economic Area.

When international data transfers occur, PRISIONIA A.I.E. will adopt the safeguards required by applicable regulations, including, where appropriate, adequacy decisions of the European Commission, standard contractual clauses, binding corporate rules or other legally permissible mechanisms.

10. Rights of users

The user may exercise, under the terms provided for in the applicable regulations, the following rights:

Right of access, to know if PRISIONIA A.I.E. processes your personal data and to obtain information about said processing.

Right of rectification, to request the correction of inaccurate or incomplete data.

Right of erasure, to request the deletion of their data where applicable.

Right of objection, to object to the processing of their data in certain cases, including the sending of commercial communications.

Right to restriction of processing, to request that the processing of their data be restricted in the cases provided for by the regulations.

Right to portability, where applicable.

Right to withdraw consent at any time, when the processing is based on consent.

These rights may be exercised by sending a communication to PRISIONIA A.I.E., at the registered office indicated in this Privacy Policy, or by sending an email to datosclientes@circodeloshorrores.com.

To ensure that the request is made by the data subject, PRISIONIA A.I.E. may request proof of identity when necessary, seeking to avoid unnecessary procedures.

The user may prove their identity, among other means, using the registered email address, digital certificate, electronic DNI, Cl@ve [Spanish electronic identification system] or a copy of the identity document with the unnecessary data concealed, keeping visible only the data strictly necessary to verify their identity.

Una vez verificada la identidad del usuario, PRISIONIA A.I.E. atenderá la solicitud conforme a los plazos y condiciones previstos en la normativa aplicable.

11. Unsubscribing from commercial communications

The user may object at any time to receiving commercial communications.

In the case of commercial communications by email, they may request to unsubscribe through the mechanism included in each communication or by email addressed to datosclientes@circodeloshorrores.com.

In the case of commercial communications via WhatsApp, the user may unsubscribe by replying with the word BAJA [UNSUBSCRIBE] to any of the messages received through that channel. They may also request to unsubscribe by email addressed to datosclientes@circodeloshorrores.com.

To ensure that the request is made by the data subject, PRISIONIA A.I.E. may request proof of identity when necessary, seeking to avoid unnecessary procedures.

12. Complaint before the supervisory authority

If the user considers that the processing of their personal data does not comply with the applicable regulations, they may lodge a complaint with the Agencia Española de Protección de Datos [Spanish Data Protection Agency], with address at C/ Jorge Juan, 6, 28001 Madrid, or through its electronic headquarters available at www.aepd.es.

13. Data security

PRISIONIA A.I.E. aplicará las medidas técnicas y organizativas adecuadas para proteger los datos personales frente a destrucción, pérdida, alteración, acceso no autorizado, comunicación ilícita o cualquier otra forma de tratamiento no autorizado.

These measures shall be applied taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of the processing, as well as the risks to the rights and freedoms of natural persons.

14. Updating of the Privacy Policy

PRISIONIA A.I.E. may update this Privacy Policy when necessary to adapt it to regulatory, technical, organizational, contractual changes or changes related to the services provided.

The version published on the website shall be the one applicable at any given time. Users are advised to periodically review this Privacy Policy to find out how their personal data is processed.