Privacy policy

1. Data controller

• Controller: Hashim Mohammed Almadani (None Prods)
• Tax ID (NIF/NIE): Y08605050B
• Address: Calle Iglesia 180, 1-1, 08860 Castelldefels (Barcelona), España
• Contact: noneprodsbcn@gmail.com

2. What data we process

• If you write to us: your name, email address and the content of your message.
• If you are a band, artist, venue, agency or supplier: the contact and professional details needed to organise shows and manage agreements (for example name, phone, email and billing details).
• When you browse the websites: aggregated, anonymous visit statistics (Vercel Web Analytics, no cookies) and the technical logs our hosting provider keeps for security, which may include your IP address.

We do not ask for special categories of data. Tickets are bought on external platforms, which process buyers' data as independent controllers under their own policies.

3. Purposes and legal basis

• Answering your enquiries: your consent when you write to us and our legitimate interest in replying (art. 6.1.a and 6.1.f GDPR).
• Organising shows and managing our relationship with bands, venues and suppliers: performance of the agreement or pre-contractual steps (art. 6.1.b GDPR).
• Keeping the websites secure and understanding their use in aggregate: our legitimate interest (art. 6.1.f GDPR).
• Meeting legal obligations, such as tax and accounting (art. 6.1.c GDPR).

We do not make automated decisions or build profiles that affect you, and we do not use your data for advertising.

4. Retention

Enquiry data is kept for as long as needed to answer and for at most one year afterwards. Data linked to agreements is kept for the duration of the relationship and then for the legal limitation and tax/accounting retention periods. Technical logs are kept for short periods set by the hosting provider.

5. Recipients and service providers

We do not sell or share your data. We disclose it only when the law requires it, or to providers that process it on our behalf:

• Vercel Inc. (web hosting and anonymous statistics).
• Sanity AS (website content management; it receives no visitor data).
• Google LLC (Google Workspace: email, calendar and working documents).
• Artificial intelligence providers used in our internal management tools (see section 6).

Some of these providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

6. Google account data and internal tools

None Prods uses its own internal tools that, with the explicit authorisation of each account owner, access the team's Google accounts (Gmail, Google Calendar, Google Drive, Docs and Sheets). This access is used only for the promoter's internal work: reading and organising email, preparing reply drafts, managing the calendar and creating or updating documents.

Data obtained through Google APIs is not sold, not shared with third parties, not used for advertising and not used to train general-purpose artificial intelligence models. When a task needs an artificial intelligence service, the data is processed only to complete that task and under terms that exclude its use for model training. Use of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Account owners can revoke access at any time at https://myaccount.google.com/permissions.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to noneprodsbcn@gmail.com. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (https://www.aepd.es).

8. Security

We apply reasonable technical and organisational measures to protect data against loss, unauthorised access or misuse.

9. Children

The websites are not aimed at children under 14 and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy to reflect legal changes or changes to our activity. The date of the last update is shown at the top of the page.