1. Data controller

The controller responsible for processing the personal data collected through this website is MADRID FLOWER SCHOOL S.L. (hereinafter, “the Owner”), with Tax ID (N.I.F.) B88350822, address at Calle Canillas 34, Bajo B, 28002 Madrid, and email hola@bloomspavilion.com.

2. Purposes of processing

Website visitors:

• Responding to inquiries submitted through our contact forms
• Analyzing browsing behavior for statistical purposes and to improve the website
• Managing the sending of commercial communications, if you have subscribed to our newsletter
  
  

Ticket purchasers:

• Managing the purchase and issuance of tickets to the event
• Processing payment through Stripe
• Sending operational information related to your attendance (schedules, access, last-minute changes)
  
  

Companies applying to participate as exhibitors:

• Managing the participation request and subsequent contact to formalize the terms
• Managing the business relationship and compliance with contractual obligations once participation is confirmed
• Publishing the company’s details (and, where applicable, those of its contact person) in the exhibitor directory section of the website, when the company has given express consent to do so in the registration form
  
  

Press and media:

• Managing accreditations and the sending of press materials

3. Legal basis for processing

• Consent of the data subject: for sending commercial communications/newsletter, for publishing data in the exhibitor directory, and for the use of non-essential cookies (Art. 6.1.a GDPR)
• Performance of a contract: for managing ticket purchases and, where applicable, the contracting of exhibitor space (Art. 6.1.b GDPR)
• Legal obligation: for compliance with tax and accounting obligations (Art. 6.1.c GDPR)
• Legitimate interest: for statistical analysis of browsing activity and website security (Art. 6.1.f GDPR)

4. Retention periods

Data will be retained for as long as necessary to fulfill the purpose for which it was collected and, thereafter, duly blocked for the applicable legal limitation periods (6 years under the Commercial Code, 4 years under the General Tax Law).

Newsletter contact details will be retained for as long as the subscription is not cancelled.

5. Recipients and data transfers

Your data may be shared with:

• Technology providers acting as data processors: Mailchimp (forms and newsletter), Stripe (payment processing), Google (Analytics), Meta (Facebook/Instagram Ads), LinkedIn (Insight Tag)
• Website visitors, in the case of exhibiting companies that have given consent to appear in the public directory
• Public Administrations, Judges and Courts, when there is a legal obligation to do so
• Banking and financial institutions, for the management of collections and payments

6. International transfers

Some of our technology providers (Google, Meta, LinkedIn, Mailchimp, Stripe) may transfer data outside the European Economic Area (EEA), in particular to the United States, under the protection of Standard Contractual Clauses or adequacy frameworks such as the EU-U.S. Data Privacy Framework.

7. Rights of data subjects

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability at any time and free of charge, as well as withdraw any consent given, by writing to hola@bloomspavilion.com, indicating the right you wish to exercise and attaching a copy of an identity document.

If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

8. Minors

The services offered through this website are aimed at a professional audience within the floral sector who are of legal age. We do not knowingly collect data from minors.

9. Changes to this policy

This Privacy Policy may be amended to reflect legislative developments or changes to the website.