LAST UPDATED ON: 15 JUNE 2025

For the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) [“GDPR”] and Organic Law 3/2018,  of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDPGDD”) and its implementing regulations, you are informed that by accepting the check box that is attached you expressly authorise your personal data, including those relating to your image and voice, to be incorporated for strictly confidential processing in a file for which LASTUR BOOKIN is responsible,  S.L. (hereinafter, “the company”), with NIF B-95.345.989, whose registered office is located in Bilbao (Bizkaia), at Camino de la Ventosa, 46, 1º D, CP 48013, in order to manage your participation and/or attendance at the KALORAMA FESTIVAL event (hereinafter, “the event”), to carry out profile segmentation in order to improve and optimize the experience associated with such events,  as well as to inform you of other products and services offered by the company and the rest of the companies of the LAST TOUR group that are detailed below.

The legal bases that legitimise the processing of your personal data are:

• The performance of a contract and/or business relationship.

• The informed consent that you give us expressly, freely and unequivocally when you accept this PRIVACY POLICY by sending us the corresponding form.

• For the fulfilment of various legal obligations that are mandatory for the company.

• For legitimate interest arising from all kinds of security reasons, improvement of our products and services, management of your requests for information, complaints and fraud management.

The data we request from you is adequate, pertinent and strictly necessary to carry out the purposes described. You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal. It also guarantees the authenticity, accuracy and veracity of all the information you provide us, undertaking to keep the data you provide us updated so that they respond, at all times, to your real situation; He will also be solely responsible for false or inaccurate statements and for the damages that they may cause.

We will keep the data for as long as there is a contractual or commercial relationship with you, or as long as you do not exercise your right to erasure, cancellation and/or restriction of data processing; After this retention period, the Company will delete, destroy, block or pseudonymize your personal data. In the event of blocking, your information will always be kept without any use or processing, as long as this information may be necessary for the exercise of claims or any type of judicial, legal or contractual responsibility may arise from its processing that must be attended to and for which reason it is necessary to proceed with its recovery.

DATA TRANSFERS:

The data you provide may be transferred to the following companies of the LAST TOUR group for the correct management of the services indicated above, as well as to inform you of the products and services that may be offered in the future:

• LAST TOUR CONCERTS, S.L., ARF VITORIA GASTEIZ, S.L., MIDDLE GROUND, S.L., CULTURA ROCK, S.L., EVENTOS Y FESTIVALES SONIDO RURAL, S.L., LAST TOUR IBERIA, S.L., LAST TOUR EUROPA, S.L., MUSICAL PERFORMANCES 2020, A.I.E., OSO POLITA RECORDS, S.L., YUUKII RECORDS, S.L., IMCOM MEDIA, S.L., FUNDACIÓN INDUSTRIAS CREATIVAS,  KALORAMA FESTIVAL UNIPESSOAL LDA, HOUSE OF FUN ENTERTAINMENT, LDA, LAST TOUR PORTUGAL, SOCIEDADE POR QUOTAS and LAST TOUR AMÉRICA, S.A.S.

• As well as any other entity that replaces any of the above, and/or linked or integrated into the LAST TOUR group, and/or that is linked or integrated with it in the future.

If you pay by credit card, the data will be encrypted and transferred to our payment partners. Any personal data about you will only be used internally within the LAST TOUR group and will not be transferred to third party companies and entities other than those expressed herein.

Finally, in the event that you send us a curriculum vitae for the job application, it will become part of a file owned by the company. The purpose of the file is the selection of personnel and by spontaneously sending us this information you are giving us your express consent for your data to be available in future recruitment or selection processes. In addition, said data may be transferred to LAST TOUR CONCERTS, S.L. and BALKBONE TOUR, S.L. for the same purpose, as well as to any other entity referred to in point 1 of this clause, and/or that replaces any of them, and/or that is linked to or integrated into the LAST TOUR group,  and/or that is linked or integrated with it in the future.

EXERCISE OF RIGHTS:

You may exercise your rights of access, rectification or deletion, limitation of processing, cancellation or opposition, as well as your right to portability, at the company, Camino de la Ventosa, 46, 1º D, CP 48013 de Bilbao (Bizkaia), dpo@lasttour.org. Likewise, you will have the right to file a complaint with the Spanish Data Protection Agency. The exercise of your rights under data protection legislation may be carried out in the Portuguese, Spanish and English languages.

SAFETY MEASURES:

In order to safeguard the security of your personal data, we inform you that the company has adopted all the necessary technical and organisational measures to guarantee the IT security of the personal data provided, including (but not limited to):

• The pseudonymization and encryption of personal data where applicable.

• The ability to ensure the ongoing confidentiality, integrity, availability, and resilience of treatment systems and services.

• The ability to restore availability and access to personal data quickly, in the event of a physical or technical incident.

• A process of regular verification, evaluation and assessment of the effectiveness of technical and organisational measures to ensure the security of processing.