Privacy Policy

The data controller is Asociación Cultural de Bengalís de la India en Madrid, a non-profit cultural association based in Madrid, Spain.

Name: Asociación Cultural de Bengalís de la India en Madrid · Tax ID (NIF): [to be completed] · Registered address: [to be completed], Madrid, Spain.

If you have any questions about this policy or how we handle your data, contact us at utsavmadrid2026@gmail.com.

Contact form and email: we process your name, email address, subject and the message you choose to include, in order to respond to your enquiry. Legal basis: your consent (Art. 6.1.a GDPR). Retention: until your enquiry is answered and, thereafter, for up to one year.

Event registration and participation (for example, Durga Puja or Poila Boishakh): name, email address, phone number and, where applicable, details relating to tickets or donations. Legal basis: performance of the relationship with the participant and your consent (Art. 6.1.b and 6.1.a GDPR). Retention: for the duration of the event and the period required to meet applicable legal, tax and accounting obligations.

Updates and information about activities: when you ask to receive information, we process your email address to send you news about our events. Legal basis: your consent (Art. 6.1.a GDPR). Retention: until you ask to stop receiving these communications.

Website browsing: we may process limited technical data, such as an anonymised IP address and basic usage information, through cookies and similar technologies. Legal basis: your consent (Art. 6.1.a GDPR), except for strictly necessary cookies. See our Cookie Policy for details.

We do not sell or share your data with third parties for commercial purposes. Your data may only be disclosed to public authorities where there is a legal obligation to do so.

To run the website we rely on providers that act as data processors: Cloudflare, Inc., for hosting and delivering the website; GitHub, Inc., for storing and managing the site's source content; and Google (Gmail), as the email service we use to receive and respond to your messages. These providers may involve international data transfers covered by appropriate safeguards, such as the EU-US Data Privacy Framework.

We keep your personal data only for as long as necessary to fulfil the purposes described above and, thereafter, for the periods required by applicable law. You may ask us to delete your data at any time.

You may exercise at any time your rights of access, rectification, erasure, portability, restriction and objection to the processing of your data, as well as withdraw your consent without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, contact us at utsavmadrid2026@gmail.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

We apply reasonable technical and organisational measures to protect your data, including HTTPS encryption for communications, restricted access to systems, and the principle of data minimisation.

We do not knowingly collect data from children under 14. If we become aware that such data has been provided to us, we will delete it.

This policy may be updated. We will publish the current version on this same page, indicating the date of the last update.