This privacy policy (hereinafter, the “Privacy Policy”) informs you about the data processing carried out by AI8 Immersive Experience, S.L. (hereinafter, “AI8IE”, “El Juego Interior” or “EJI”) regarding users (hereinafter, “Users”) who visit the website (hereinafter, the “Website”) and purchase tickets (hereinafter, “Tickets”). El Juego Interior values your trust as a User and your privacy, and for this reason, explains below how your data is processed. If you have any questions or would like to receive more information in this regard, you may write to: atcliente@americascupexperience.com.

In compliance with current legislation, El Juego Interior undertakes to adopt the necessary technical and organizational measures, according to the security level appropriate to the risk of the data collected.

3. WHO IS THE DATA CONTROLLER?

The data controller for the personal data collected on the El Juego Interior Website is: AI8 IMMERSIVE EXPERIENCE SL, with NIF B26881862 and registered office at Via Agusta 17 principal, 08006 Barcelona; and is the entity that decides the purpose for which your personal data is used.

You may contact the Data Protection Officer of El Juego Interior at the following email address: info@iniestaeljuegointerior.com.

4. WHAT DATA DO WE PROCESS?

The personal data we process comes from the information that you, as a User, provide to us when filling out the forms found on the Website, when making a purchase for yourself or a beneficiary, and/or when sending us your inquiries or requests for information.

In each form, we indicate the contact details that are mandatory for us to address your inquiry or request. Data not marked as mandatory with an asterisk will be completely optional. We only collect the data necessary for each purpose. Please note that if you do not provide the mandatory information, we may not be able to address your inquiry or request or manage the processing.

It is your responsibility to provide accurate Data and keep it updated; therefore, we reserve the right to exclude from the Website or cancel the purchase of Tickets for Users who provide false or incorrect Data, or data without due authorization, without prejudice to the right of El Juego Interior to take any corresponding legal action.

Please note that some forms require third-party data to fulfill your request. Such third parties must have been previously informed and you must have the capacity to provide us with the data in accordance with the provisions of the applicable data protection regulations (General Data Protection Regulation 679/2016) or have obtained their consent. In the case of Ticket gifts, if we need to contact such third parties to fulfill your request, we will inform them that you have provided us with the data for that purpose.

5. FOR WHAT PURPOSE DO WE PROCESS YOUR DATA?

At El Juego Interior, we will process your Data for the following purposes:

1. TICKET PURCHASE. When you purchase a Ticket through any channel made available to you (online or in person), we will process your Data to manage the purchase and send you notifications regarding it, as well as to comply with applicable legal obligations. We will also process your Data to contact you regarding the purchase and to send you communications that may be of interest to you.

2. GIFT A TICKET. When you gift a Ticket through any channel made available to you, we will use your Data and those of the third party you have provided to send the gift by email and manage the purchase, which includes the possibility of contacting you and/or the third party through various means and complying with the legal obligations that apply to us or to you in this regard, and offering you or the third party registrations, offers, and additional information.

3. CONTACT. If you contact us through the channels enabled for this purpose, by email or any means made available to you, we will use the Data you provide to address your inquiries or requests, which includes the possibility of contacting you through various means and forwarding them to the corresponding responsible parties so they can respond. We may also use your Data to send you communications that may be of interest to you, if you so consent.

4. WEBSITE NAVIGATION. Through the use of cookies and other technologies, we can perform measurements and analyze browsing traffic, usability, and your experience as a User on the Website for statistical purposes. The installation and use of cookies depend on the settings you choose, both in the cookie banner and through your browser. You can find more information in the Cookies Policy.

6. WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis for processing your Data for the purchase of Tickets and/or gifting Tickets to third parties is the execution of the contract and compliance with legal obligations. Please note that if you are a Ticket purchaser, we may also send you communications based on our legitimate interest and provide offers and news that may be of interest to you.

The legal basis for processing your Data for contacting us is the consent you provided when sending us the inquiry through our channels. In some cases, the processing of your Data when you contact us may be based on the execution of pre-contractual measures if these are necessary to address the inquiry.

The legal basis for processing your Data in relation to Website navigation is consent, which you provide when you accept the installation of cookies, and which you can revoke or configure at any time through the settings panel. You can find more information about the use of cookies in the Cookies Policy.

Remember that you can revoke your consent at any time. You may also object to receiving further commercial communications as indicated in the footer of each communication.

7. HOW LONG IS YOUR DATA KEPT?

Your Data will be kept for the period necessary for the purpose for which it was collected, and specifically:

1. In relation to the purchase of Tickets, it will be kept for the time necessary to manage the purchase and will subsequently remain blocked during the retention periods or statute of limitations provided by law.

2. In relation to the sending of communications, the Data will be processed until you revoke your consent or object to the processing and/or for a maximum of one year.

3. In relation to the Data you provide to make inquiries or contact us, your Data will be processed as long as necessary to respond to your inquiry or request, as well as, where appropriate, for the time necessary to address possible claims or inquiries from you.

4. In relation to web browsing Data, it will be kept until you revoke your consent and for a maximum period of 5 years.

Once the Data is no longer necessary for the purpose for which it is processed, it will remain blocked solely for the purpose of addressing any liabilities or obligations that may arise from its processing, after which period it will be deleted.

8. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Your data may be communicated to service providers who help us carry out our activity, for example, IT tools, technical support services, payment providers, financial services, etc., some of which have processing and/or support centers located outside the European Economic Area (EEA). Your data may also be transferred to companies within our group for internal management purposes, as well as to manage your purchases or for commercial purposes.

We guarantee that, should your data leave the EEA, it will maintain the same level of protection based on compliance with the provisions of European data protection regulations. In this sense, international data transfers will be carried out (i) to countries with an adequate level of protection declared by the European Commission, (ii) based on the provision of adequate safeguards (standard contractual clauses or binding corporate rules), or (iii) by virtue of authorization from the competent supervisory authority or other cases provided for in the regulations.

To receive more information about international data transfers or to obtain confirmation or a copy of the safeguards used, you can contact us at the address [*].

In cases where it is necessary to comply with our legal obligations, data may be communicated to the Public Administration and the State Security Forces and Bodies.

9. REGISTRATION AND MONITORING OF CORPORATE SOCIAL MEDIA ACCOUNTS

In the case of profiles we maintain on various social networks linked from this Website, for example, through plugins or third-party applications, your data may be processed under other privacy policies of the owners of those social networks.

The use of such connectors is voluntary. If you choose to use them, you will be authorizing the communication of your personal data (IP address, browsing data) to the aforementioned social networks, and we will not be responsible for the subsequent processing they may carry out with your data. We recommend that you visit the terms and conditions of use of these platforms prior to interacting with our profiles on those social networks.

The profiles on the social networks linked from this Website have been created so that you can better understand our activity and to offer different communication channels aimed at people interested in our entity.

10. SECURITY MEASURES

At El Juego Interior, we undertake to adopt the necessary technical and organizational measures, according to the security level appropriate to the risk of the data collected, in a way that guarantees the security of personal data and prevents the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorized communication or access

to such data.

The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially, as the transmission of data between the server and the User, and in feedback, is fully encrypted.

However, because we cannot guarantee the invulnerability of the internet or the total absence of hackers or others who fraudulently access personal data, we undertake to notify the User without undue delay when a personal data security breach occurs that is likely to result in a high risk to the rights and freedoms of natural persons. Following the provisions of Article 34 of the GDPR, a personal data security breach is understood as any security breach resulting in the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorized communication or access to such data.

Personal data will be treated as confidential, and we undertake to inform and guarantee through a legal or contractual obligation that such confidentiality is respected by employees, associates, and any person to whom the information is made accessible.

11. WHAT ARE YOUR RIGHTS?

As the owner of your personal information, you may request confirmation as to whether your personal data and/or that of minors in your care are being processed and, if so, access them. You may also request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, it is possible to request the limitation of the processing of your data and/or that of minors in your care, in which case we will only keep it for the exercise or defense of claims.

You may revoke the consents provided at any time. Once revocation is exercised, which will not be retroactive unless a legal provision imposes such character, your data may be kept blocked during the statute of limitations periods established by applicable regulations.

Remember that you may also object to the processing of your data and/or that of minors in your care, particularly regarding commercial communications, in which case we will not process the data, except for compelling legitimate reasons or for the exercise or defense of possible claims.

Thus, you may exercise your rights by written communication addressed to the data controller with the reference “GDPR-El Juego Interior”, specifying:

1. Name, surname of the User, and a copy of their ID. In cases where representation is permitted, identification by the same means of the person representing the User will also be necessary, as well as the document proving representation. The photocopy of the ID may be replaced by any other legally valid means that proves identity.

2. Request with the specific reasons for the application or information to be accessed.

3. Address for notification purposes.

4. Date and signature of the applicant.

5. Any document proving the request made.

This request and any other attached document may be sent to the following address and/or email:

Postal address: Moll d’Espanya del Port Vell s/n, 08039 Barcelona
Email: info@iniestaeljuegointerior.com

Furthermore, if you have any questions regarding the exercise of your rights, before contacting the Supervisory Authority, we remind you that, if you wish, you can consult us directly by writing to our Privacy Officer, and we will try to help you in the best possible way.

Finally, should you consider that there is a problem or infringement of current regulations in the way your personal data is being processed, you will have the right to file a claim before a supervisory authority, in particular, in the case of Spain, the Spanish Data Protection Agency (http://www.agpd.es).