Party Itineraries
Compliance & Data Protection

Privacy Policy

Effective Date: January 1, 2026. This comprehensive document outlines how Indexzippyfed Media SL collects, processes, and protects your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and global privacy standards.

1. Data Controller Information

The entity responsible for the processing of personal data gathered via Indexzippyfed.store is:

Indexzippyfed Media SL
Passeig Marítim de la Barceloneta 38, Planta 4
08003 Barcelona, Spain
Company Registration Number: ES-B67891244
Designated Data Protection Officer (DPO) Contact: [email protected]

2. Categories of Personal Data Collected

We collect and process personal information strictly necessary to provide our curated editorial content, VIP concierge consultations, and digital services:

  • Directly Provided Data: Full name, professional title, contact email address, telephone numbers, and inquiry details submitted through our contact and concierge booking forms.
  • Automated Telemetry & Technical Data: Anonymized Internet Protocol (IP) addresses, browser type, operating system parameters, referral URLs, language preferences, page navigation metrics, and timestamp access records.
  • Preferences & Interaction Data: Regional nightlife interests (e.g., preference for Ibiza superclubs versus Mykonos sunset beach clubs), itinerary requests, and newsletter preferences.

3. Legal Bases for Processing (GDPR Article 6)

We process personal data only when an established lawful basis applies under the General Data Protection Regulation:

  • Consent (Art. 6(1)(a)): Explicit consent provided by you when submitting inquiries or accepting analytical cookies.
  • Contractual Performance (Art. 6(1)(b)): Execution of requested concierge booking consultations or itinerary development.
  • Legitimate Interests (Art. 6(1)(f)): Maintaining site security, preventing fraudulent activity, optimizing site performance, and refining editorial quality.
  • Legal Obligations (Art. 6(1)(c)): Compliance with European commercial accounting and digital regulatory requirements.

4. Third-Party Data Processors & Transfers

We do not sell, rent, or trade your personal data. We disclose information strictly to vetted third-party service providers bound by strict Data Processing Agreements (DPAs):

  • Cloud Infrastructure: European data center servers compliant with ISO/IEC 27001 standards.
  • Web Analytics: Privacy-focused European telemetry analytics for aggregate site optimization without cross-site consumer profiling.
  • Transactional Email Services: Secure SMTP relay infrastructure utilized solely to respond to user-initiated inquiries.

5. Data Retention Schedules

Personal data is retained only for the duration strictly necessary to fulfill the purposes for which it was gathered. Concierge and contact inquiry communications are maintained for a maximum of 24 months from the last active correspondence, after which records are permanently deleted or fully anonymized, unless statutory commercial record-keeping mandates a longer retention period.

6. Your European Statutory Rights

Under Chapter III of the GDPR, visitors within the European Economic Area possess the following actionable rights regarding their personal data:

  • Right of Access (Art. 15): Request a copy of all personal data held concerning you.
  • Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal records.
  • Right to Erasure / 'Right to be Forgotten' (Art. 17): Request deletion of your personal data where retention is no longer justified.
  • Right to Restriction of Processing (Art. 18): Restrict processing under specified legal disputes.
  • Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
  • Right to Object (Art. 21): Object at any time to data processing based upon legitimate interests.

To exercise any of these statutory rights, submit a written request accompanied by verification of identity to [email protected]. You also hold the right to lodge a formal complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es.

7. Updates to this Policy

Indexzippyfed Media SL reserves the right to amend this Privacy Policy periodically to reflect technological adjustments or regulatory revisions. Any modifications will be posted directly to this page with an updated revision date.