Tickets
Info Tickets
Info Tickets
2026 Lineup Preview

Privacy policy

Data controller

  • Associació Cultural MIRA; C/ Badajoz, 127, naus 3-4; 08018 Barcelona (hereinafter, MIRA).
  • Email: info@mirafestival.com.

Scope of the policy

When you access and use this website or any other channel involving the processing of personal data, you agree to this Privacy Policy, as well as to the provisions contained in the Legal Notice and the Cookies Policy.

At MIRA, we provide the necessary information so that, before submitting your personal data, you can review this Privacy Policy and any other relevant information regarding data protection.

Purpose of the processing of your data

MIRA processes your personal data (name, surname(s), email address, telephone number and any other information necessary) for the following purposes:

  • Contractual: management of the sale of tickets, passes, season tickets and accreditations, as well as any aspect related to the event.
  • Consent: marketing and commercial communications carried out through any channel, including electronic means.
  • Legitimate interest: sending recommendations based on services previously contracted, preventing fraud and responding to enquiries.

How long we keep your data

The retention period for personal data will vary depending on the service contracted. In any case, your data will be kept for the duration of the commercial relationship and, afterwards, for the legally required periods.

By way of example, the following retention periods may apply:

  • Job applicant data: 1 year.
  • Documentation relating to personal obligations without a specific limitation period: 5 years (art. 1964.2 Civil Code).
  • Business books, correspondence, documentation and supporting records: 6 years (art. 30 Commercial Code).
  • Documentation relating to tax obligations: 4 years (General Tax Law).
  • Documentation relating to social security obligations: 4 years.
  • Employment documentation: 1 year (Workers’ Statute).
  • Health data relating to occupational risk prevention: 4 years.
  • Documentation relating to data protection obligations: 3 years (LOPDGDD).
  • Documentation relating to anti-money laundering legislation: 10 years.

Your rights

As the data subject, you may exercise the following rights:

  • Right of access: to know whether we are processing your personal data.
  • Right to rectification and erasure: to correct inaccurate data or request its deletion when it is no longer necessary.
  • Right to object: to object to the processing of your data in certain circumstances.
  • Right to restriction of processing: to request a restriction on the use of your data in certain cases.
  • Right to data portability: to request the transfer of your data to another controller in certain circumstances.

You may exercise these rights free of charge.

Complaints

If you believe that your data is not being processed correctly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).

Security

MIRA applies the security measures required by law to protect personal data against unauthorised access, loss or alteration.

  • Pseudonymisation and encryption of personal data.
  • Measures to ensure confidentiality, integrity and availability.
  • Rapid recovery in the event of an incident.
  • Regular assessment of security measures.
  • Control of access to and processing of data.

Confidentiality

Any personal data collected will be treated with absolute confidentiality, and the necessary measures will be adopted to prevent unauthorised access.

Acceptance and consent

The user declares that they have been informed and accept the processing of their personal data in accordance with this policy.

Changes to the privacy policy

MIRA reserves the right to modify this policy in order to adapt it to legal developments or industry practices. Any changes will be published on this page with reasonable prior notice.