Village Underground Barcelona

Privacy policy

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), and Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), Village Underground S.L. informs users of its policy on the processing of personal data.

1. Data controller

2. Personal data we collect

2.1 Through the ticketing platform

When tickets are purchased for events held at Village Underground, the following data is collected:

  • First name and surname
  • Email address
  • Mobile phone number (when needed to manage the event)
  • Payment details (handled directly by the payment platform; Village Underground does not store bank or card details)
  • Purchase history and event attendance
  • IP address and browsing data during the purchase process

2.2 Through the newsletter sign-up form

To send commercial communications and our cultural programme, the following data is collected:

  • Name (optional)
  • Email address
  • Programme preferences or interests (if provided voluntarily)
  • Date and time of subscription and of consent confirmation

3. Purposes of processing

3.1 Ticket purchases

  • Managing and confirming ticket purchases
  • Sending the ticket to the buyer's email address
  • Handling incidents, changes or cancellations of the event
  • Complying with legal and tax obligations arising from the transaction
  • Preventing fraud and verifying identity at the venue entrance

3.2 Newsletter and commercial communications

  • Sending Village Underground's cultural programme, events, concerts and activities
  • Announcing offers, pre-sales and early access to tickets
  • Sending information about collaborations, sponsorships and news about the venue
  • Carrying out satisfaction surveys and analysing audience preferences (only with express consent)

3.3 Legal obligations

  • Complying with requests from judicial, administrative or tax authorities
  • Handling complaints and exercising or defending legal rights

4. Legal basis for processing

The processing of personal data is based on the following legal grounds:

  • Performance of a contract (Art. 6(1)(b) GDPR): processing is necessary to manage ticket purchases and provide the requested service.
  • Express consent of the data subject (Art. 6(1)(a) GDPR): for sending the newsletter and commercial communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
  • Legal obligation (Art. 6(1)(c) GDPR): to comply with tax, accounting and security obligations under current legislation.
  • Legitimate interest (Art. 6(1)(f) GDPR): for fraud prevention, venue security and incident management.

5. Data retention periods

Personal data will be kept for the following periods:

  • Ticket purchase data: for the duration of the contractual relationship and, once it has ended, for the periods required by law to meet tax and commercial obligations (generally 5 years under the Spanish Commercial Code and 4 years under tax legislation).
  • Newsletter data: until the user withdraws consent or unsubscribes. Once the unsubscription has been processed, the data will be blocked and kept only for as long as needed to deal with possible claims.
  • Browsing and IP data: in accordance with the Information Society Services Act, for up to 12 months from collection, unless required by a judicial or administrative authority.

6. Recipients and disclosure of data

6.1 Service providers (data processors)

Village Underground may share data with third parties acting as data processors under a processing agreement in accordance with Art. 28 GDPR, which may include:

  • Ticketing platforms used to manage events
  • Email marketing service providers for sending newsletters
  • Online payment platforms for processing transactions
  • Hosting and web technology providers
  • Website analytics services (Google Analytics or equivalent)

All these providers are contractually bound to process data only on Village Underground's instructions and to apply appropriate security measures.

6.2 Third parties

Village Underground will not disclose personal data to third parties for their own commercial purposes without the prior express consent of the data subject, except where required by law or by a competent authority.

6.3 International transfers

If any service provider is located outside the European Economic Area, Village Underground will ensure that such transfers are made with the appropriate safeguards provided for in the GDPR (adequacy decisions, standard contractual clauses or other equivalent safeguards).

7. Rights of data subjects

Users may exercise the following rights over their personal data at any time:

  • Right of access: to know what personal data Village Underground processes about them.
  • Right to rectification: to request the correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): to request the deletion of data when, among other cases, it is no longer necessary for the purpose for which it was collected.
  • Right to object: to object to the processing of data in certain circumstances, including processing for direct marketing purposes.
  • Right to restriction of processing: to request that processing be restricted in the cases provided for in Art. 18 GDPR.
  • Right to data portability: to receive the data in a structured, commonly used and machine-readable format, when processing is based on consent or on a contract.
  • Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise any of these rights, the data subject must send a written request to:

The request must include the data subject's full name, a copy of an identity document or equivalent proof of identity, and a description of the right they wish to exercise. Village Underground will respond within one month of receiving the request; this may be extended by two further months in particularly complex cases.

If the data subject considers that the processing of their data does not comply with current legislation, they may lodge a complaint with the Spanish Data Protection Agency (AEPD) through its website: www.aepd.es.

8. Newsletter — specific conditions

8.1 Subscription mechanism

Subscribing to the Village Underground newsletter requires a valid email address and express confirmation of consent through a double opt-in system: the user will receive a confirmation email that must be validated before the subscription is activated. This procedure ensures that consent is freely given, specific, informed and unambiguous, in accordance with Art. 7 GDPR.

8.2 Content of communications

Communications sent through the newsletter may include: the programme of events, concerts and cultural activities; pre-sales and special promotions; news about the venue and collaborations; and any other information related to Village Underground's activities. Every communication will include a clearly visible unsubscribe link.

8.3 Unsubscribing from the newsletter

Users can unsubscribe from the newsletter at any time, free of charge, by:

Unsubscriptions will be processed within a maximum of 10 working days of receiving the request.

9. Cookies and tracking technologies

The Village Underground website and ticketing platform use cookies and similar technologies. Detailed information about the types of cookies used, their purpose, duration and how to configure them can be found in the Cookie Policy, available from the cookie banner shown on the first visit to the website and in the website footer.

In general, the following are used: technical cookies (strictly necessary for the site to work), analytics cookies (to analyse use and improve the service) and marketing cookies (to personalise communications). Non-technical cookies are only activated with the user's express consent.

10. Minors

Village Underground's services are intended for people over 18. Village Underground does not knowingly collect or process personal data of anyone under 18. If it is found that data has been collected from a minor without the consent of their legal guardians, that data will be deleted immediately. Parents or guardians who become aware that a minor has provided personal data may contact Village Underground through the channels indicated in this policy.

11. Security measures

Village Underground applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Art. 32 GDPR, including among others: encryption of data in transit using secure protocols (SSL/TLS), access control to processing systems, procedures for managing incidents and security breaches, and regular assessment of the measures in place.

In the event of a security breach that poses a risk to the rights and freedoms of data subjects, Village Underground will notify the AEPD within a maximum of 72 hours of becoming aware of it, and will inform those affected when that risk is high, in accordance with Arts. 33 and 34 GDPR.

12. Updates to this policy

Village Underground reserves the right to amend this Privacy Policy to adapt it to changes in legislation, case law or the services offered. Any significant change will be communicated to users through the website and, where applicable, by email to newsletter subscribers. We recommend reviewing this policy periodically.

Last updated: May 2026.

Village Underground Barcelona — Carrer Cobalt 12, 08907 L'Hospitalet de Llobregat (Barcelona)
info@villageunderground.cat — www.villageunderground.cat