Privacy & Cookie Policy

1. Data Controller

The data controller is:

• Company name: Blu Vita SRL
• Registered office: Calle Mayor 42, 28013 Madrid (Spagna)
• Tax ID: B-12345678
• DPO Email: privacy@bluvita.es
• Phone: +34 91 000 0000

In accordance with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPD-GDD), Blu Vita SRL guarantees the protection of users' personal data.

2. Data Collected

We collect the following categories of personal data:

Data provided by the user

• First and last name
• Email address
• Phone number (optional)
• Date of birth (optional)
• Notes or special requests related to events
• Password (stored in non-readable form)

Data collected automatically

• IP address
• Browser type and operating system
• Pages visited and visit duration
• Technical and analytical cookies (see Cookie section)

3. Purposes and Legal Basis

Purpose	Legal basis (GDPR art. 6)
User account management and authentication	Performance of a contract (art. 6.1.b)
Event registration and management	Performance of a contract (art. 6.1.b)
Sending confirmation emails and operational communications	Performance of a contract (art. 6.1.b)
Anonymous statistical traffic analysis	Legitimate interest (art. 6.1.f)
Marketing communications (newsletter)	Consent of the data subject (art. 6.1.a)
Compliance with legal and tax obligations	Legal obligation (art. 6.1.c)

4. Data Retention

Personal data will be retained for the following periods:

• User account data: until the account is deleted or a deletion request is made, and in any case no longer than 5 years from the last login.
• Event registration data: 3 years from the event for accounting obligations.
• Marketing data (consent): until consent is withdrawn.
• System logs: maximum 12 months.

After this period, data will be securely deleted or anonymised.

5. Disclosure to Third Parties

Blu Vita SRL does not sell or transfer users' personal data to third parties. Data may be disclosed to the following categories of recipients, solely for the purposes indicated:

• IT service providers (hosting, cloud): as data processors under art. 28 GDPR.
• Payment platforms (if applicable): for transaction management.
• Public authorities: where required by Spanish or EU law.

All third-party suppliers are bound by data processing agreements compliant with the GDPR.

6. Data Subject Rights

Under articles 15–22 of the GDPR and the LOPD-GDD, you have the right to:

• Access: obtain confirmation of the processing of your data and a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”): request the deletion of your data.
• Restriction of processing: request the suspension of processing in certain cases.
• Portability: receive your data in a structured format.
• Objection: object to processing based on legitimate interest.
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise your rights, write to privacy@bluvita.es enclosing a copy of an identity document. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.

7. Minors

As provided by art. 7 LOPD-GDD, Blu Vita services are intended for persons aged at least 14 years (the digital consent age in Spain). We do not knowingly collect data from minors under 14. If you become aware of data of minors processed without consent, please contact us immediately.

8. Cookie Policy

The Blu Vita website uses cookies and similar technologies. A cookie is a small text file saved on your device.

Technical cookies (necessary)

Essential for the website to function. No consent required.

Name	Purpose	Duration
bluvita_session	Maintains the authenticated user session	Session
bluvita_cookie_consent	Records the cookie choice	12 months

Analytical cookies (optional)

Used to understand how users interact with the site. Only activated with consent.

Name	Provider	Purpose	Duration
_ga, _gid	Google Analytics	Anonymous statistical traffic analysis	24 months / 24 hours

How to manage cookies

You can manage cookie preferences via the banner that appears on your first visit, or through your browser settings:

• Google Chrome
• Mozilla Firefox
• Apple Safari

Disabling technical cookies may make some website features unavailable.

9. Security

We adopt appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction or accidental disclosure, in accordance with art. 32 GDPR. Measures include: HTTPS encryption, authenticated access, regular backups and security monitoring.

10. Changes to the Policy

Blu Vita SRL reserves the right to update this policy at any time. Material changes will be communicated via email and/or a notice on the website. The “last updated” date at the top of the page indicates the current version.