Legal

Privacy policy

1. Identification of the data controller

Starlite Music Group, S.L., with registered office at Urbanización Señorío de Gonzaga, Bloque 13 Apartamento 6 A, Nueva Andalucía, 29660 (Marbella), NIF: B65900771, acts as joint controller of the personal data processed on the website https://starlitefestival.com.

Privacy contact: privacidad@starliteuniverse.com

2. Need to provide personal data

Browsing the website does not require personal information, except for specific features that require cookies. However, requests, purchases or bookings do require personal data. Refusal to provide such data prevents the requested services from being processed.

STARLITE uses the information to: manage ticket purchases, delivery, offer services, process payments, contact you about orders, promotional offers, update records, maintain user accounts, display personalised content, recommend products, improve the platform, prevent fraud, and enable third-party technical support.

3. Responsibility of the data subject

Users warrant that the data provided is true, accurate, complete and up to date. They are liable for any false or inaccurate information and for any resulting damage. When providing data relating to third parties, they declare that they have obtained such parties' consent and undertake to pass on this privacy policy to them, releasing STARLITE from any liability.

4. Purposes of processing and legal bases

Purpose	Legal basis	Data
Registration as a user	Performance of a contract (Art. 6(1)(b) GDPR)	Identification and contact
Purchase of tickets/services	Performance of a contract	Identification, contact, financial
Management of access to the venue	Performance of a contract	Identification
Sending the Newsletter	Consent (Art. 6(1)(a) GDPR)	Identification and contact
Commercial information, offers, promotions, loyalty campaigns, electronic communications	Legitimate interest (Art. 6(1)(f) GDPR) — "to enhance marketing and customer loyalty"	Identification and contact
Commercial information from STARLITE Group entities	Consent	Identification and contact

STARLITE builds basic commercial profiles in order to personalise offers relating to products/services already contracted. This profiling does not result in the denial of services and has no binding legal effects. Objecting does not restrict access to the full catalogue.

5. Third-party recipients of the data

The data may be disclosed to:

Public authorities: in accordance with legal obligations
Courts and Tribunals: in accordance with legal obligations
Law enforcement agencies: in accordance with legal obligations
IT and website maintenance providers: for the provision of services
Banking service providers: management of purchases
STARLITE Group entities: internal administrative purposes

STARLITE guarantees that access is exclusively for the purposes described, in compliance with data protection regulations and applying technical and organisational security measures.

6. Source of the data

The information comes directly from the user (forms, purchases) and from information on online browsing habits, subject to prior authorisation. Users who provide data relating to third parties declare that they have informed them of this processing. In the case of minors, they warrant that the consent of the legal representative has been obtained.

7. Retention period

STARLITE retains the data for as long as necessary to handle requests and fulfil the purposes described. Data used for commercial communications is processed until the user objects or withdraws consent. Once the provision of services has ended, data is retained for the periods legally required in respect of any resulting liabilities.

8. Exercise of rights

By submitting a request to privacidad@starliteuniverse.com (attaching a copy of your national ID card or identity document), you may:

Obtain confirmation as to whether STARLITE is processing your personal data
Access your personal data
Rectify inaccurate or incomplete data
Request the portability of your data
Object to processing in particular circumstances (especially processing based on legitimate interest)
Withdraw consent (this does not affect the lawfulness of prior processing)
Restrict processing where the regulatory conditions are met
Obtain human intervention in order to express your point of view and contest automated decisions
Request the erasure of data where it is no longer necessary

Complaints: Spanish Data Protection Agency (Agencia Española de Protección de Datos), Calle Jorge Juan 6, 28001 Madrid.

9. International transfers

STARLITE does not carry out international transfers of data. Should any such transfers take place, it will implement the mechanisms provided for in the GDPR to safeguard rights and guarantee a sufficient level of security, duly informing users.

10. Security measures

STARLITE processes data with absolute confidentiality and under a duty of secrecy, adopting technical and organisational measures to guarantee security and prevent alteration, loss, and unauthorised processing or access, in line with the state of the art and the existing risks.

11. Updates to this policy

STARLITE will amend this policy to adapt it to new legislation, publishing the changes on the website so that users have permanent access to them.

Last updated: October 2025