MadCrush Online Privacy Notice
Last update: October 15, 2023
MadCrush (“we,” “us,” “our”) respects your concern for privacy. This Online Privacy Notice (“Notice”) will apply to the personal data we collect on www.madcrush.es (the “Site”). The Notice describes the type of personal information we collect, how we use it, and with whom we share it. It also describes the rights you may have and how to contact us regarding our privacy practices.
Visitors to the Site are subject to important limitations. Please review our Terms of Use, which govern your visit to the Site.
1. How we obtain information about you
We may collect personal data that you choose to provide through the Site, including but not limited to your first and last name, physical address, e-mail address or telephone number, for example, when:
- Register on the Site to create a user account;
- Fill out a form on the Site;
- Sign up to receive direct marketing communications on the Site;
- Make purchases on the Site;
- You sign up for any of the features we offer on the Site and provide personal data in connection therewith;
- Attend an event organized by us or one of our business partners;
- Communicate with us (for example, on a social media platform or by e-mail);
- Vote in MadCrush awards, enter a contest or respond to a survey;
- Download the MadCrush application.
When you visit our Site, we may also collect certain information by automated means using technologies such as cookies, non cookie-based authenticators, web server logs, tracking pixels and web beacons. Cookies are files that websites send to your computer or other Internet-connected device to uniquely identify your computer or store information or settings in your browser. Your browser may notify you when you receive certain types of cookies and how to limit or disable them. However, please note that without cookies, you may not be able to use all of the features of our Site or purchase products using a “shopping cart”. Non-cookie authenticators are URL-based identifiers that track activity through clicks or time-sensitive password reset keys when cookies are disabled or a session is not logged in.
We may also collect personal data in other contexts that we will notify you of in due course.
2. Information we obtain
Information you provide to us and our lawful basis for processing personal data
Personal data that you provide directly to us will be apparent in the context in which you provide it, for example:
- If you register on the Site to create a user account, you will normally provide your full name, e-mail address, city preferences, e-mail subscription preferences and communication preferences. Our legal basis for processing your personal data in this way is that the processing is necessary to perform a contract to which you are a party;
- If you sign up to receive electronic marketing communications from us, you will generally provide us with your name, e-mail address and other contact information, as well as your product preferences. Our legal basis for processing your personal data in this way is your consent for us to carry out such processing, which will be requested when you subscribe to newsletters;
- If you make purchases, for example, if you purchase an Offer or tickets to MadCrush events, you will typically provide your full name, e-mail address, mailing and billing address, and payment information. Payments will be processed by our various payment providers, to whom we will provide your payment details directly. We will not store your payment card information. Our legal basis for processing your personal data in this way is that the processing is necessary to perform a contract to which you are a party.
- If you sign up for a feature on our Site, you will generally provide your name and contact information, and any other information necessary to access the feature. Our lawful basis for processing your personal data in this way is your consent to the processing, which we will request from you as part of your compliance with the terms and conditions applicable to that function;
- If you choose to vote in MadCrush awards, enter a contest or respond to a survey, you will usually provide your name and e-mail address. Our lawful basis for processing your personal data in this way is your consent to the processing, which we will request from you as part of your compliance with the terms and conditions applicable to such prize, contest or survey;
- If you make a purchase at a MadCrush through our ordering application, you will generally provide your full name, email address, phone number, mailing and billing address, and payment details. Payments are processed by our various suppliers, to whom you will provide your payment details directly. Our legal basis for processing your personal data in this way is that this processing is necessary for the performance of a contract to which you are a party.
Each form on our Site varies in the information requested and collected. In most cases, an asterisk (*) indicates mandatory information in the questionnaires. You may choose to provide additional information in the non-mandatory fields.
If you do not want us to send you direct sales emails, please unsubscribe by clicking on the link in the footer of any of our emails or contact us at privacy@madcrush.es.
Information we automatically collect
Our web services may record information such as your operating system type, browser type, domain and other system settings, as well as the language your system uses and the country and time zone where your device is located. Web server logs may also record information such as the address of the web page that referred you to our Sites and the IP address of the device used to connect to the Internet. They may also record information about your interaction with the Sites, such as the pages you visit. To control which web servers collect information by automated means, we may place tags called “web beacons”; these are small files that link web pages to specific web servers and their cookies. We may also collect information from your browser, such as your browsing history, and use it along with data collected from forms and e-mail messages to help us understand and respond to your needs.
If the information collected is completely anonymous, it will not represent personal data. If your personal data is not anonymized, our lawful basis for processing it in this way is that we have a legitimate interest in continuously evaluating that personal data to develop and improve our business (as well as to ensure that the products and services we provide are relevant to the market), which does not override your interests, rights and freedoms regarding the protection of your personal data.
Social network widgets
The Site includes social networking features, such as Google, X and Facebook widgets. These widgets may collect information about the pages you visit on the Site and the IP address of the device you have used to connect to the Internet. Widgets may also set a cookie to ensure the proper functioning of these functions.
Social media features and widgets are either hosted by a third party or hosted directly on the Site. Your interactions with the social networking features and widgets included on the Site are governed by the privacy policies of the companies that provide them. If you use any of the social networking features or widgets on our Site, we recommend that you review the privacy policies of the companies that provide them.
Information we may obtain from third parties
The information we collect from third parties will typically consist of public profile data (such as your preferences and interests), for example, from public posts on social networks.
3. How we use the information we collect
How we use the information we collect
We may use the information you provide to us to respond to your inquiries, for example, to contact you about an application, ask you questions, provide you with announcements about products and upcoming events, conduct surveys, and for other reasons related to offering and improving our services. We use personal data for these purposes because we have a legitimate business interest in providing services to our customers and other interested parties, which does not override their interests, rights and freedoms in relation to the protection of their personal data. If you make a purchase on our Site, we will also collect personal data, as it is necessary to enter into a contract with you.
In addition to these uses, we may use the personal data you provide on our Site for:
- To carry out, evaluate and improve our activity;
- Develop new products and services;
- Conduct market research;
- To advertise and market our products and services;
- Determine the effectiveness of our advertising and marketing;
- Analyze our products, services and websites;
- Manage the Site;
- Segment and personalize the marketing communications you have viewed on the Site.
We use personal data for these purposes because we have a legitimate business interest in developing and improving our business, which does not override your interests, rights and freedoms in relation to the protection of your personal data.
We may also use such information to protect against fraud, claims and other liabilities, and to comply with or enforce applicable legal requirements, industry regulations and our policies and terms. We use personal data for these purposes when necessary to protect, exercise and defend our legal rights, or when we are required to do so by applicable law.
Information we automatically collect
We use the personal data we automatically collect through cookies, non-cookie based authenticators, web beacons and other automated means for purposes such as personalizing and enhancing our visitors’ visits to the Site, facilitating the use of the Sites and learning how our visitors navigate the Site. We also use this information to help diagnose technical and service problems, administer the Site and identify visitors to the Site. We use clickstream data to determine how much time visitors spend on the Site’s web pages, how they navigate the Site, and how we can tailor the Site to your needs. We use personal data for these purposes because we have a legitimate business interest in operating and improving our Site that does not override your interests, rights and freedoms in relation to the protection of your personal data.
We also use third-party analytics services on our Site, such as those of Eloqua and Google Analytics. The providers that administer these services may use cookies and web beacons to help analyze your use of the Site. The information collected by cookies and web beacons (including your IP address) is available to service providers, who use it to evaluate your use of the service.
Other uses of information
In addition to these uses, we may use the personal information you provide or that we collect for other purposes. If we do so, we will send you an additional privacy notice describing those other purposes for which we will use your personal data and our legal basis for doing so.
4. Information we share
We do not sell or otherwise disclose personal data provided by you or that we collect on our Site except as described herein. We may share the personal data you provide to us or that we collect on the Site with:
- Other MadCrush group companies;
- Our business partners;
- A designated third party, for example, in connection with a contest in which you have participated and only if you have expressed your consent;
- Suppliers providing services on our behalf.
We may share personal data with vendors who provide services on our behalf such as payment, analytics, hosting or advertising service providers. All service providers have entered into legally binding contracts that obligate them to use or disclose personal data only to the extent necessary to perform their services on our behalf or comply with applicable legal requirements.
In addition, we may disclose your personal information (a) if we are permitted or required to do so by law or legal process, for example, as a result of a court order or at the request of a law enforcement agency, (b) if we believe that such disclosure is necessary or appropriate to prevent physical harm or economic loss, (c) in connection with investigations of actual or suspected fraudulent or other illegal activities, and (d) if we sell or transfer all or a portion of our business or assets (including in the event of restructuring, dissolution or liquidation).
5. Data transfer
We may transfer the personal data we collect about you to recipients in countries other than the country in which it was originally collected. These countries may not have the same data protection laws as the country where you initially provided the data. If we transfer your personal data to recipients in other countries (such as the U.S.), we will protect it as described in this Notice.
If you are located in the European Economic Area (“EEA”) or Switzerland, we will comply with applicable legal requirements to adequately protect the transfer of personal data in countries outside the EEA and Switzerland. In all such cases, we will only transfer your personal data if:
- The country to which personal data is to be transferred has been the subject of an adequacy decision by the European Commission;
- We have implemented appropriate protections regarding the transfer of data, e.g., EU Standard Contracts.
You may request a copy of the protections we have implemented regarding the transfer of personal data by contacting us as described in the “How to Contact Us” section below.
6. How long we keep the information
The period of time for which we will retain personal data will depend on the purpose for which we have collected it. In all cases, we will retain them for as long as necessary to fulfill the purposes for which we collected them. We will subsequently delete personal data, unless we are legally obliged to retain it in order to fulfill our legal obligations (e.g. for tax and accounting purposes).
Subject to any applicable legal requirements, we will usually retain personal data as follows:
- Personal data you provide to us when making a purchase through our Site: we will retain that personal data to process and ship your purchase, and then store it securely for seven years.
- Personal information you provide to us when you sign up to receive direct marketing communications: we will retain this personal information for the duration of our relationship with you until you choose to terminate it or we no longer maintain contact with you for two years.
- Personal data collected for analytical purposes: we will retain such personal data for a short period of time necessary to perform analytics. We anonymize personal data used for analytics immediately.
- Website Logs: We will maintain Site audit logs, which may contain your personal data, for several months.
7. Your rights and decisions
If you are located in the European Economic Area (“EEA”) or Switzerland, you have the following rights in relation to the personal data we hold about you:
- To request confirmation as to whether we process personal data relating to you and, if so, to request a copy of such personal data;
- Request that we correct or update your inaccurate, incomplete or outdated personal information.
- Request that we delete your personal data in certain circumstances, such as when we have collected personal data based on your consent if you withdraw your consent;
- Request that we limit the use of your personal information to certain circumstances, such as while we are considering another request you have made to us, for example, a request that we update your personal information;
- If you have given us your consent to process your personal data, you withdraw such consent; and
- Request that we provide you with a copy of your personal data in a structured, commonly used and machine-readable format in certain circumstances.
To exercise these rights, you may contact us by e-mail or as detailed in the “How to Contact Us” section below.
You also have the right to file a complaint with the data protection supervisory authorities in your country.
Response time and format
We endeavor to respond to a verifiable consumer request within forty-five (45) days of receipt. If we need more time, we will inform you in writing of the reason and the period of delay. Any disclosures we provide will only cover the 12-month period prior to receipt of the consumer’s verifiable request.
We have the right to deny requests under certain circumstances. In such cases, we will inform you of the reasons for such denial. We will not provide specific pieces of personal information if disclosure would pose a substantial, articulable and unreasonable risk to the security of that personal information, the account you maintain with us or the security of our systems or networks. In no event will we disclose, if we have collected it, your Social Security number, driver’s license number or other government-issued identification number, bank account numbers, any health insurance or medical identification number, an account password, or security questions and answers.
8. Updates to our online privacy notice
We may update this Notice periodically and without notice to you to reflect changes in our data protection practices or applicable law. We will publish the updated version and indicate at the top the date of the last update.
9. How to contact us
If you have any concerns, questions or comments about this Notice or any matter relating to how we collect, use or disclose personal data, or if you wish to update the information we maintain about you or your preferences, you may contact us:
If you reside in the European Economic Area (“EEA”) or Switzerland, please send us an e-mail to privacy@madcrush.es.
If you are located outside the EEA or Switzerland, by e-mail at privacyworld@madcrush.es.
