1. Who we are
Our website address is: https://www.carnivaland.net.
1.1 Carnivaland Services
Welcome to Carnivaland! We are an information and ticketing platform whose goal is to show you the Carnivals around the world. Thanks to our services and through our sales platform, we offer people from all over the world the possibility to discover and share the Carnivals around the world.
The Carnivaland products, features, and offerings available online through Carnivaland.net are collectively referred to as “Carnivaland Properties” or our “Services.”.
1.2 Who is who
Carnivaland is a corporation of calle del carmen 17, Cabezo de Torres 30110, Murcia and registration number 201999800029622 (“Carnivaland”, “we”, “us”, or “our”). If you reside in the European Economic Area (“EEA”) or Switzerland, Carnivaland is the responsible party or data controller concerning Personal Data (defined below) collected through the Services. Carnivaland’s representative for European data protection law is Carnivaland with its principal place of business at calle del carmen 17, Cabezo de Torres 30110, Murcia
If you have any questions or doubts, please contact us at the above address or at email@example.com.
2. Our privacy statement
3. Personal data we collect
When you interact with us through the Services, we may collect Personal Data. Sometimes this will be on our own behalf and sometimes it will be on behalf of an Organizer using our Services to run an event. This is an important distinction for the purposes of some data protection laws and is explained in more detail below.
3.1 Information collected from all Users
Information You Provide to Us: As we do with all Users, we collect Personal Information when you voluntarily provide such information to the Services (for example, by registering for access to the Services, contacting us with questions, responding to one of our surveys, or searching for or using certain parts of the Services). The Personal Data that we may collect includes, but is not limited to, your name, address, email, and any other information that you decide to provide and/or that allows the personal identification of Users.
Information We Collect Automatically: Also, we collect automatically collect some technical data that we receive from the computer, mobile device, or browser you use to access the Services (“Automatic Data”). Automatic Data includes, but is not limited to, a unique identifier associated with your browser or access device, (including, for example, your Internet Protocol (IP) address), characteristics about your access device or browser, statistics about your activities on the Services, information about how you got to the Services, and data collected through cookies, pixel tags, local shared objects, web storage and other similar technologies. You will find more information about our cookies and other similar tracking technologies in our Cookie Statement.
When you register to the Services or otherwise submit Personal Data to us, we may associate other non-personal Data (including Personal Data we collect from third parties) with your Personal Data. In such case, we will treat all such combined data as if it were Personal Data until it can no longer be associated with you or used to identify you.
3.2 Information collected from Organizers
If you are an Organizer, we will collect additional Personal Data about you.
Information you provide to us: In some cases, we may collect credit card information from you, some of which may be personal information, to secure certain payments. Besides, if you use our payment processing services, we will collect financial information from you that is necessary to facilitate payments and data required for tax purposes.
Information we obtain from other sources: We may also collect or receive Personal Data including, your name, email address, and other contact information from third-party sources such as third-party websites and marketing partners, your bank, our payment processing partners, and credit reporting agencies.
3.3 Information collected from Consumers
If you are a Consumer, we will collect additional Personal Data from you, sometimes for our purposes and sometimes on behalf of an Organizer (see section 16 below for more information).
Information you provide through the Carnivaland Sites: If you register for a paid event, you will provide financial information (e.g., credit card number, expiration date, billing address). And some of that data may be Personal Data. In addition, Organizers may set up event registration pages to collect virtually any type of information from consumers, in connection with registering for an Organizer’s event listed on the Services. Carnivaland does not control an Organizer’s registration process or the Personal Data they collect. By registering for, or otherwise providing information to Carnivaland related to an event or activity of an Organizer, whether that information is yours or a third party, related to a purchase, registration, or exchange, that Organizer will receive it and it is possible to use the information you provide. Please, see Section 5.5 below, titled “How We Disclosure and Transfer Your Personal Data – Organizers” for more information on the receipt and use of your data by an Organizer.
Information we obtain from other sources: We may also collect or receive Personal Data from third-party sources such as Organizers, other Consumers, integrations with social networks or other third parties, the bank that issued your credit card, our payment processing partners, or other third parties.
4. How we use your personal information
Recopilamos y utilizamos los datos personales que recopilamos de forma constante con esta Política de privacidad y las leyes de privacidad aplicables. Podemos utilizar los datos personales de las siguientes formas:
4.1 Specific reason
If you provide Personal Data for a specific purpose, we may use it for the purpose for which it was provided. For example, if you contact us by e-mail, we will use the Personal Information you provide to respond to your inquiry or troubleshoot the problem, and we will respond to the e-mail address from which you sent the message.
4.2 Access and Use
If you provide Personal Data to get access to or use the Services or any related activity, we will use such Personal Data to provide you with access to or use of the Services or features and to analyze your use of the Services or features. For example, if you provide Personal Data about your identity or suitability to use some parts of the Services, we will use such information to decide whether to allow you to access or use such Services and to evaluate your suitability for use of such Services on an ongoing basis.
4.3 Internal business purposes
We may use your Personal Data for internal business purposes such as, but not limited to, relying on it to improve the content and functionality of the Services, better understand our users, improve the Services, protect, identify or address fraudulent activity, enforce our Terms of Service, manage your account and provide you with customer service, and generally manage the Services and our business, among others.
4.4 Marketing of Carnivaland
We may use your Personal Data for our marketing and advertising purposes, including (without limitation) by email, SMS marketing, display media, and for other devices (such as tablets, mobile devices, and televisions). We do this to inform you about services or events that we believe may be of interest to you, develop promotional or marketing materials, and display Carnivaland or event-related content and advertising on or off the Services that may be of your interest. We may also do this on behalf of an Organizer, for example, when your previous interactions with an Organizer suggest that you may be interested in a particular type of event.
You may at any time notify us of your intention to unsubscribe from Carnivaland’s email marketing communications list by sending an email to firstname.lastname@example.org.
You may see advertisements for our Services (or our Organizer’s events) on third-party websites, including social media platforms. If you see an advertisement on a third-party website, or social media platform, it may be because we have engaged the third-party or social media platform to display this advertisement to our Users, or others, who have similar attributes to our Users. In some cases, this involves sharing your email address or other contact details with the third-party or social media platform so that they can identify you as one of our Users, or identify other individuals with similar attributes to you to show them advertisements for our Services (or our Organizer’s events). If you no longer wish to have your Data used for these purposes, please contact us at email@example.com. For more information on how we market and interact with social media sites, please see section 5.6.
4.5 E-mails from the Organizers
We allow Organizers to use our email tools to contact consumers about their current and past events, so you may receive emails from those Organizers from our system that we send on their behalf. If you have registered for an event on the Services, your email address will be available to that Organizer. However, Organizers may import email addresses they have from external sources and send communications through the Services to such addresses, and we will send such communications to such email addresses on behalf of the Organizer. The Organizer, and not Carnivaland, is responsible for sending these emails.
4.6 Use of interest-based data
Sometimes we deduce the type of events or activities you might be interested in. We may use these inferences to help target advertising or customize recommendations for you, including on behalf of the Organizers. We may do this on an aggregate or generalized basis. For example, we may determine that our users who attend many comedy events also attend or show interest in drag-related events or content. We may target (or help target) content or recommendations related to both comedy and drag to those Users.
4.7 Other purposes
4.8 Aggregated personal data
5. How we disclose and transfer your personal data
5.2 Business transfers
5.3 Parent companies, subsidiaries, and affiliates
5.4 Agents, Advisors, and Service Providers
We may share your Personal Data with our contractors and service providers who process Personal Data on Carnivaland’s behalf to perform certain business-related functions. These companies include our marketing agencies, online advertising providers, data enhancement service providers, database service providers, backup, disaster recovery service providers, email service providers, payment processing partners, customer support, technical support, hosting companies, and others. When we engage other companies to perform such functions, we may provide them with information, including Personal Data, in relation to the performance of those functions.
When you purchase tickets, register or donate to an event, change your ticket or registration for an event to another person, enter a contest, or otherwise enter your Personal Data (such as through a web form) or otherwise communicate with an Organizer, or participate in an Organizer’s event or activity, that Organizer will receive the information you provide, including your Personal Data and, in cases where a change of ticket or registration is made, also the Personal Data of the person to whom the change is made. Other third parties who are involved in or on whose behalf an event or activity is promoted may also receive such Personal Data.
For example, and without limitation, a concert venue (the Organizer, in this case) may allow third-parties, promoters, or production companies (the Third-Party Organizers) to create events to be held at the Organizer’s venue using your Carnivaland account. In that case, we may provide your Personal Data to the Third Party Organizers on behalf of the Organizers. The same applies to contests and sweepstakes: we may provide your Personal Data both to the Organizer promoting the contest or sweepstakes, and to any legal sponsor of the contest or sweepstakes (such as a brand sponsor).
We are not responsible for the actions taken by such Organizers or their Third Party Organizers (or other recipients of your Personal Data) about your Personal Data. It is crucial that you review the applicable policies of the Organizers and, if applicable and available, Third Party Organizers of an event (and related fundraising site, if any) before you provide Personal Data or other information about such event or related fundraising site.
5.6 Facebook, social networks, and other third-party connections
- “Like” or “Follow” Carnivaland on social media. Besides, when you “Like” or “Follow” us on Facebook, Instagram, Twitter, or other social media sites (to the extent we provide that capability), we may collect certain information about you, including your name, email address, and any comments or content you post that is relevant to us. We may also collect information from you if you sign up for one of our promotions or submit information to us through social media sites.
- Facebook plugins and links on our pages. The Carnivaland website may also contain links to Facebook or other social media, for example: through the Facebook “Like” or “Share” button or other social plugins. When you interact with these functions and links, your browser will establish a direct link to Facebook’s servers, and Facebook will receive information about your browser and your activity and can link it to your Facebook user account. For more information on how Facebook uses data, please refer to Facebook’s policies.
- Additional marketing and connectivity from Facebook or other social media. Besides, if you are a member of Facebook (or other social media platform) and you provide Personal Data to an Organizer (for example, in the way described in Section 5.5), the Organizer may use that Personal Data to send you advertising and offers through Facebook (or other social media), including when you are on Facebook or other social media platform. The Organizer may work with us and third parties to enable this data integration and advertising. Facebook and other social media platforms may provide a way to opt-out of such advertising. Please review their user settings and support pages for more information on how they help you manage your privacy and marketing choices.
- Third-party services and integrations. Carnivaland may provide you with the opportunity to contract directly with third parties and/or integrate with third-party services or applications through our platform. In such cases, we will disclose your Personal Data to other entities to fulfill a request from you or to provide you the services you have requested.
5.7 Legal requirements
We may disclose your Personal Data if required by law to (for example) in the event of a subpoena or a request from a government agency (including responses to public authorities to meet national security or law enforcement requirements), or if we believe in good faith that such action is necessary (a) to comply with a legal obligation; (b) to protect or defend our rights, interests or property, or those of a third party; (c) to prevent or investigate potential wrongdoing in connection with the Services; (d) to act in urgent circumstances to protect the personal safety of users of the Services or the general public; or (e) to protect against legal liability.
6. How we store your personal data
7. How to access, update, correct or delete your Personal Data
You can access or delete your Personal Data that we store. If you are a registered user, you can do so by logging in and visiting the different sections and personal areas, as well as completely deleting your data by requesting it through firstname.lastname@example.org. You can also edit some of your personal data directly through your account. In some cases, you can ask us to correct and update any of your incorrect Personal Data using the contact information below, and we will consider your request under applicable laws.
If a Consumer initiates a data deletion request, Carnivaland is authorized to remove or anonymize the requesting Consumer’s Personal Data from the Services, even if that means removing its availability to the Organizer through the Services. However, if you are a Consumer, you understand that even if Carnivaland deletes or anonymizes your Personal Data upon your request or under this Policy, your Personal Data may still be available in the Organizer’s databases if it is transmitted to the Organizer before Carnivaland receives or takes action on any deletion or anonymization activity.
Non-registered Users may also access, update, correct or delete Personal Data and exercise these rights by using the contact information below. We will consider and respond to all requests under applicable law.
8. How long we keep your Personal Data
We may retain your Personal Data for as long as you are registered to use the Services. You may delete your account at any time by sending an email to email@example.com indicating so in the subject line. However, we may retain Personal Data for a long period if permitted or required by applicable law. Even if we delete your Personal Data, it may continue to exist on archival or backup media for additional time for legal, tax, or regulatory reasons or legitimate and lawful business purposes.
9. Cookies, pixel tags, local shared objects, web storage, and similar technologies.
10. Your options
You have several options regarding your Personal Data:
10.1 Limit the Personal Data you provide
You may use the Services without providing any Personal Data (other than Automatic Data, to the extent Personal Data is considered Personal Data under applicable law) or by limiting the Personal Data you provide. If you choose not to provide any Personal Data or to limit the Personal Data you provide, you may not be able to use some features of the Services. For example, to purchase tickets as a Consumer, you must provide your name and email address to the Organizer.
10.2 Unsubscribe from e-mail messages
(a) Carnivaland marketing communications.
Where consistent with our marketing preferences, Carnivaland may send you electronic messages containing advertising or marketing content about the Services itself or events on the Services if you have registered for the Services, purchased a ticket, or registered for an event on the Services. You may also choose to “unsubscribe” from receiving these emails by clicking on the “Unsubscribe” link at the bottom of such emails or by sending an email to firstname.lastname@example.org indicating so.
(b) Messages sent by the Organizer.
Organizers may use our email tools to send emails to people on their subscription lists, including Consumers who have registered for their events using the Services. Although these emails are sent through our system, Carnivaland does not determine their content or recipients. Organizers are required to use our email tools only under applicable laws. Carnivaland provides an “Unsubscribe” link in all these emails, which allows recipients to choose to stop receiving emails from a particular organizer, and the user can always unsubscribe by sending an email to email@example.com.
(c) Social notifications.
If you link your Facebook account or any other enabled social media or subscribe to integrations with other social media whose features include social notifications (i.e., updates about your friends’ actions on the Services), you will receive such notifications.
(d) Response or transactional messages.
Some Carnivaland emails are sent in response to your requests. For example, if you are a Consumer, we must email you the ticket or registration on behalf of the Organizer when you purchase that ticket or registration. Another example would be that if you send an email to the customer service department, we will send you an email to respond to you. Notwithstanding any subscriptions you have unsubscribed from, you will continue to receive these transactional or responsive emails. You can only stop receiving such emails by contacting us at firstname.lastname@example.org with your request. By choosing to stop receiving all emails from us or through our system, you will stop receiving updates about events you have created (including payment broadcasts) or registered to attend (including emails with your tickets). It is not advisable to do this unless you plan to stop using the Services, are not currently registered for an event, are not currently organizing an event, and do not need to receive messages from us or through our system.
10.3 Do not track
We do not currently participate in any “Do Not Track” framework that allows us to respond to signals or other mechanisms you send us in connection with the collection of your personal information.
11.1 Personal data provided to third parties
11.2 Third-party links
12. Children – Children’s Online Privacy Protection Act
13. Global Privacy Laws
15. Dispute resolution
If you have a complaint about Carnivaland’s privacy practices, please write to us at the following address:
Carnivaland, Inc., Attn: Privacy Officer, 155 5th Street, Floor 7, San Francisco, CA 94103, USA or an email (LINK). We will take reasonable steps to work with you and try to resolve your claim.
Residents of the EEA, Switzerland, or the United Kingdom who believe that their information has not been processed under the Privacy Shield principles can present their complaints in several ways. For more information, see our Privacy Shield Notice (LINK).
16. AEE, SWITZERLAND AND UNITED KINGDOM ONLY
The EU’s General Data Protection Regulation (GDPR)
In May 2018, a new data privacy law known as the EU General Data Protection Regulation (or “GDPR”) was put into effect. The GDPR requires Carnivaland and the Organizers to use the Service to provide Users with more information about the processing of their Personal Data.
Here is what you need to know:
Legal basis for processing your Personal Data
The GDPR requires us to inform you of the lawful basis on which we are relying to process your Personal Data. The legal reasons on which we process your Personal Data for the purposes set out in Section 4 above will usually be as follows:
- – you have given your consent;
- – it is necessary for our contractual relationship;
- – the processing is necessary for us to comply with our legal or regulatory obligations;
- – the processing is in our legitimate interests as an event organization and ticketing platform (e.g., to protect the security and integrity of our systems and to provide you with customer service, etc.)
Transfers of personal data
As Carnivaland is a global company, we may need to transfer your Personal Data outside of the country from which it was originally provided. This may be intra-group or to third parties that we work with and who may be located in jurisdictions outside of the EEA, Switzerland, and the United Kingdom that do not have data protection laws or laws that are less strict compared to Europe.
Where we transfer Personal Data outside the EEA, Switzerland, or the UK, we use the required legal steps to ensure that appropriate security measures are in place to protect your Personal Data. This includes the use of Standard Contractual Clauses.
Carnivaland complies with the EU-U.S. and Swiss-U.S. Privacy Shield as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Data from those countries. We comply with the Privacy Shield Principles of notice, choice and accountability for onward transfers, security, data integrity and purpose limitation, access and recourse, compliance and accountability when processing EEA, Swiss and U.K. Personal Data in the United States. You will find more information about our commitment to the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield Framework in our Privacy Shield Notice. We recognize that the Court of Justice of the European Union ruled in July 2020 that a certification under the EU-U.S. Privacy Shield Framework can no longer serve as a basis for entities subject to the GDPR to export data of individuals outside the United Kingdom and the European Economic Area. As we transition to other transfer mechanisms (described above), we will continue to meet our obligation to comply with the Privacy Shield Principles for such data.
Please feel free to contact us, as set out in Section 15 for more information about the safeguards we have put in place to protect your Personal Data and your privacy rights in these circumstances at email@example.com.
Retention of Personal Data
We retain your Personal Data for as long as necessary to provide you our Services, or for other purposes, such as complying with legal obligations, resolving disputes, and maintain our agreements.
If you have an account with us, we will generally retain your Personal Data for a period of ninety (90) days after you have requested that your account be closed or if it has been inactive for seven (7) years.
Data protection law gives you rights concerning the Personal Data we hold about you, including the right to request a copy of the Personal Data, request that we rectify, restrict or delete your Personal Data, object to profiling, and unsubscribe from marketing communications.
In most cases, you can exercise these rights by logging in and visiting your personal section or by changing the “cookie settings” in your browser (see our Cookie Statement for more information). If you do not find what you are looking for in your personal section, please contact us using the contact information set out in Section 15 above. Please note that requests to exercise data protection rights will be evaluated case-by-case. There may be circumstances in which we are not legally required to comply with your request due to the laws in your jurisdiction or due to exemptions provided in data protection legislation.
If you have a complaint about how we handle your Personal Data, please contact us as set out in Section 15 to explain or at firstname.lastname@example.org. If you are not satisfied with how we have attempted to resolve your dispute, you may contact the relevant data protection authority.
Carnivaland as data controller and data processor
EU data protection law makes a distinction between organizations that process Personal Data for their purposes (known as “data controllers”) and organizations that process Personal Data on behalf of other organizations (known as “data processors”). If you have questions or complaints about how your Personal Data is handled, you should always address them to the relevant data controller, as they are primarily responsible for your Personal Data.
Carnivaland may act as a data controller or data processor concerning your Personal Data, depending on the circumstances.
For example, if you create an account with us to organize your events, Carnivaland will be a data controller concerning the Personal Data you provide as part of your account. We will also be a data controller of Personal Data we have obtained about your use of the Carnivaland Applications or Properties, which may relate to Organizers or Consumers. We use this to conduct research and analysis to help us to understand and serve Users of the Services, as well as to improve our platform and provide you with more targeted recommendations about events that we believe may be of interest to you.
However, if you register for an event as a Consumer, we will process your Personal Data to help manage that event on behalf of the Organizer (sending confirmation emails, promotions and feedback, payment processing.) and to assist the Organizer’s objective and understanding of the success of its event planning (providing event reports, using analytics to gain insight into the effectiveness of various sales channels.)In these circumstances, Carnivaland merely provides the tools for the Organizers; Carnivaland does not decide what Personal Data to request on the registration forms, nor is Carnivaland responsible for the continued accuracy of the Personal Data provided. Therefore, any questions you may have regarding your Personal Data and your rights under data protection law should be directed to the Organizer as the data controller, not to Carnivaland.