PRIVACY POLICY

At Happybundleloopstr (operating the web portal Happybundleloopstr.homes), we respect your personal privacy and are committed to protecting the personally identifiable information (PII) you share with us. This comprehensive Privacy Policy explains our practices regarding data collection, processing, storage, third-party disclosures, and user rights under the European Union General Data Protection Regulation (GDPR - EU 2016/679) and the California Consumer Privacy Act (CCPA/CPRA).

1. Data Controller Identification

The legal data controller responsible for the processing of your personal data on this platform is:

• Corporate Entity: Happybundleloopstr
• Tax ID / CIF: B-67894210
• Registered Address: Carrer del Foc 14, 08038 Barcelona, Spain
• Data Protection Officer (DPO): [email protected]
• Concierge Contact: [email protected]

2. Categories of Information We Collect

Depending on how you interact with our website and rooftop concierge services, we collect and process several categories of information:

• Directly Provided Information: Full legal name, email address, telephone contact number, preferred booking dates, guest count, and specific venue inquiries provided voluntarily when submitting forms for VIP table access or inquiries.
• Telemetry and Device Data: IP address, browser type and version, language preferences, operating system, referring URL, time spent per club profile, and WebGL rendering capabilities to optimize the 3D skyline canvas.
• Geolocation Data: Broad geographic approximation derived from your IP address to display relevant club venues (e.g., automatically prioritizing Barcelona or Madrid listings).
• Cookies & Tracking Identifiers: Small data files stored on your local browser to record cookie consent preferences and session states.

3. Legal Bases for Data Processing

Under Article 6 of the GDPR, we process your personal information strictly under the following lawful legal grounds:

• Contractual Necessity: To process your requests for VIP rooftop table reservations, concierge introductions to venue managers, or guestlist additions.
• Legitimate Interests: To maintain system security, detect and prevent malicious automated abuse, optimize WebGL rendering performance, and enhance the curated content quality of our nightlife directory.
• Consent: Where you have granted explicit consent for the deployment of non-essential cookies, analytics, or direct marketing communications. You retain the right to revoke consent at any moment.
• Legal Compliance: To comply with applicable tax, fiscal, and corporate reporting requirements established under Spanish and EU laws.

4. Third-Party Service Providers and Data Transfers

We do not sell, rent, or trade your personal information to third-party data brokers. We only share data with vetted service providers who are bound by strict Data Processing Agreements (DPAs):

• Cloud Infrastructure & Hosting: Secure server facilities operating within the European Economic Area (EEA) providing firewall and CDN distribution.
• Partner Venues & Nightclub Concierges: If you explicitly submit an inquiry for VIP table reservations at venues such as W Wet Deck or Destino Pacha, your contact specifications are encrypted and relayed directly to the authorized guest relations director of the respective venue.
• Analytics & WebGL Frameworks: Aggregated, anonymized performance metrics via Three.js runtime logging to debug 3D frame rates without logging individual identities.

5. Data Retention Periods

We retain personal data only for the period necessary to fulfill the purposes for which it was collected. Concierge booking inquiries are preserved for a period of twelve (12) months following the completion of your event reservation for customer care and audit purposes. Server log files are purged automatically on a rolling 90-day cycle.

6. Your Statutory Rights (GDPR & CCPA)

As a data subject residing within the European Economic Area, United Kingdom, or California, you possess distinct legal rights regarding your personal information:

• Right of Access: You may request a verified copy of all personal records we maintain concerning your identity.
• Right to Rectification: You may correct inaccurate or incomplete contact records.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your contact records where no legal obligation supersedes your request.
• Right to Restrict Processing: You may limit the scope of our data operations under specific contestations.
• Right to Data Portability: You may receive your data in a structured, machine-readable format.
• Right to Object: You may contest processing grounded in legitimate interests.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We fulfill verified requests within 30 calendar days at zero cost to the user.