Legal Notice, Privacy Policy (GDPR), Terms of Use and Cookies

Last update: 25/08/2025

1) Identification of the Data Controller

Data Controller: Alejandro Durán Mediavilla (hereinafter, “BUO FullDome”).

Websites: www.buofulldome.com and shop.buofulldome.es

Whatsapp: +34 626 103 025

This document regulates information on data protection (GDPR and Spanish LOPDGDD), site terms of use and cookies policy.

2) Principles and Legal Bases

We process data in accordance with the principles of lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity and confidentiality.

Legal bases (Art. 6 GDPR):

Contract performance: order management, subscriptions, streaming, support and billing.

Legal obligation: tax, accounting and security obligations.

Legitimate interest: service security, fraud prevention and unauthorized access, website improvement.

Consent: commercial communications only if explicitly requested by the user.

3) Data We Process and Source

Account and orders: identification, contact, address, tax ID (if applicable), payment method (tokenized by gateway), order history.

Customer support: queries via web, e-mail or Whatsapp.

Web browsing: public IP address, user agent, operating system, date/time, referrer URL, through cookies/similar technologies (see Cookies).

Streaming / Usage vouchers (anti-fraud measure): access date and time or event registration date, public IP, order/voucher ID, client ID (if applicable) and minimal technical data required for security.

Source: the data subject; in browsing, data collected automatically (cookies/logs).

4) Purposes

Distance selling and services: order management, shipping/returns, support and billing.

Streaming area and vouchers: verify that access is made by the voucher/key holder and prevent fraudulent use (e.g. key sharing or abnormal simultaneous access).

Support: respond to queries, incidents and claims.

Security: maintain technical logs, detect abuse and prevent fraud.

Communications: information on order/service status. We do not send advertising unless expressly requested by the user.

We do not make automated decisions with legal effects. Security blocks are reviewed by human intervention where appropriate.

5) Retention

Account/orders/billing: during contractual relationship and legal deadlines (e.g. tax/accounting).

Support: as long as necessary to manage the request and related incidents.

Web access logs: minimum period required for security and operation.

Streaming/vouchers – IP: up to 6 months from last event; up to 12 months if there is fraud or security investigation.

After these periods, the IP is deleted or pseudonymized (hash) for statistics.

6) Recipients and Processors

We may share data with processors providing services to BUO FullDome (hosting, IT maintenance and security, payment gateways like PayPal, accounting/advisory, courier/transport, anti-fraud tools).

These entities only access necessary data, under contract and confidentiality obligation.

Authorities: data will be provided when there is a legal obligation or valid request.

International transfers: not foreseen outside the EEA; if necessary, Standard Contractual Clauses or other safeguards will be ensured.

7) Data Subject Rights

You may exercise access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw consent when consent is the legal basis.

How to exercise (free):

E-mail: hola@buofulldome.es

Whatsapp: +34 626 103 025

If unsatisfied, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

8) Minors

Our services are not directed to minors but to private companies or public institutions. We do not intentionally collect minors’ data. If detected, such data will be deleted immediately.

9) Security Measures

We apply appropriate technical and organizational measures (TLS/SSL encryption, access controls, backups, event logging, pseudonymization where applicable and internal policies). Proof of identity may be required before granting certain rights.

10) Third-Party Links

The website may include links to third-party sites (e.g. social networks or brands). BUO FullDome does not control such sites or their policies. Review their privacy policies before using those services.

11) Site Terms of Use

11.1 Hyperlinks

Do not make false, inaccurate or unlawful statements about BUO FullDome.

Do not include content contrary to law, morality, public order or third-party rights.

The link does not imply relationship, approval or supervision by BUO FullDome.

11.2 Intellectual and Industrial Property

Content (texts, images, trademarks, logos, videos, code, etc.) is protected. Reproduction, distribution, public communication or transformation is not allowed except for private non-commercial use or express authorization by the owner.

11.3 Availability and Liability

BUO FullDome does not guarantee continuous availability of the site and may interrupt it for maintenance or force majeure. It is not responsible for interruptions, unauthorized third-party access, transmission of elements affecting IT systems or content inaccuracies.

12) Commercial Communications

We do not send advertising unless expressly requested by the user. You may revoke consent at any time. Courtesy messages (e.g. annual greetings) will only be sent if there is sufficient legal basis or your consent.

13) Cookies (Summary)

We use own and third-party cookies for technical functions (session, cart, security), personalization (language/display) and browsing analysis (e.g. Google Analytics).

You can configure or reject cookies in your browser. Without consent, cookies are not linked to identifying data.

More detail and list of cookies in the Cookies Policy.

Browser help to manage cookies:

14) Streaming Area and Vouchers – IP Logging (Anti-Fraud)

Data processed: access date and time or event registration, public IP, voucher/order ID, client ID (if applicable) and minimal technical data (browser/OS).

Purpose: verify legitimate use of voucher/license and prevent fraud (key sharing, abnormal simultaneous or out-of-condition access).

Legal basis: Contract performance (Art. 6.1.b GDPR) and Legitimate interest (Art. 6.1.f GDPR).

Retention: IP stored up to 6 months (or 12 if incidents occur). Then deleted or pseudonymized.

Recipients: hosting/security provider and authorities when legally required.

No automated decisions with legal effects are made. Blocks are reviewed by human intervention.

This processing is also informed in the event/streaming registration flow.

15) Online Dispute Resolution (ODR)

According to Regulation (EU) 524/2013, you may access the ODR platform to resolve online disputes: https://ec.europa.eu/consumers/odr/

16) Modifications

We will review this policy at least once a year or when legislation or our processes change. If we have your contact details, we may inform you of relevant changes and, if necessary, request your renewed consent.

Contact

For any questions about privacy or this legal notice: hola@buofulldome.es · +34 626 103 025