Privacy Policy

Last updated: March 2026

This Privacy Policy explains how Wellness Rave S.L. (“Wellness Rave”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you visit wellnessrave.com or attend our events. We are committed to complying with the EU General Data Protection Regulation (GDPR), Spain’s Ley Orgánica 3/2018 (LOPD-GDD), and the Ley 34/2002 de Servicios de la Sociedad de la Información (LSSI).

1. Who We Are

Data Controller: Wellness Rave S.L.
Email: hello@wellnessrave.com
Address: [TODO: REGISTERED ADDRESS — complete before publishing]
CIF/NIF: [TODO: CIF/NIF — required before publishing]
Trade Registry: [TODO: TRADE REGISTRY — required before publishing]

No Data Protection Officer (DPO) has been appointed as Wellness Rave S.L. does not carry out large-scale processing of special category data within the meaning of GDPR Article 37. For all data-related enquiries, please contact us at hello@wellnessrave.com.

2. What Data We Collect

We may collect the following categories of personal data:

Name, email address, and phone number — when you sign up for our newsletter via the contact form on our website
Ticket purchase information (name and email address) — processed directly by Luma (luma.com), our ticketing platform; Wellness Rave receives order confirmation data only
Device, IP address, and behavioural/session data — collected automatically via Google Analytics 4 (GA4) through Google Tag Manager (GTM) when you visit our website
Photos and videos — taken at our events for promotional purposes (see Section 5 below)

3. Why We Collect Your Data & Legal Basis

We process your personal data on the following legal bases under GDPR Article 6:

Contract Performance (Art. 6(1)(b)): To fulfil your ticket purchase, send event confirmation, and manage event entry.

Legitimate Interest (Art. 6(1)(f)): To analyse website traffic and improve our services; to communicate with existing customers about upcoming events; to use photos and videos from events for promotional purposes. We have assessed that these legitimate interests are not overridden by your fundamental rights and freedoms.

Consent (Art. 6(1)(a)): To send you our newsletter (you may withdraw consent at any time by unsubscribing).

Legal Obligation (Art. 6(1)(c)): To retain financial records as required by Spanish tax law (Ley General Tributaria).

4. Cookies & Tracking Technologies

Our website uses the following tracking technologies:

Google Analytics 4 (GA4): Measures website traffic, page views, scroll depth, button clicks, and user behaviour. You can opt out using the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.

Google Tag Manager (GTM): Manages and deploys tracking tags on our website. GTM itself does not collect personal data but enables the other tracking tools listed here.

GoHighLevel / LeadConnector: Our CRM and email marketing platform, used to manage newsletter subscriptions and send communications to subscribers.

A full Cookie Policy and consent management banner will be implemented in a future update. In the meantime, you may disable cookies through your browser settings; note that doing so may affect website functionality.

5. Photo & Video Policy

Wellness Rave S.L. photographs and films its events for promotional purposes. This activity is carried out on the basis of our legitimate interest (GDPR Art. 6(1)(f)) in promoting our events and sharing the event experience with our community.

What this means for you:

Photos, videos, and audio-visual recordings taken at our events may be used by Wellness Rave S.L. for our website, social media channels (including Instagram, Facebook, and TikTok), promotional materials, press coverage, and paid advertising campaigns.
No additional compensation is owed to attendees for the use of their image or likeness in this context.
You will be informed of this practice via clearly visible signage posted at the venue entrance before each event.

How to request removal: If you appear in a photo or video and wish to request its removal, please email hello@wellnessrave.com with a description or copy of the image/video. We will review your request and respond within 30 days.

6. Third-Party Data Processors

We share your personal data with the following third-party processors, each of whom is required to handle your data in accordance with GDPR:

Luma (ticketing platform) — tickets purchased on luma.com are subject to Luma’s own privacy policy. Wellness Rave receives order confirmation data only.
Google (Analytics & Tag Management) — GA4 and GTM process website usage data. Learn more: policies.google.com/privacy
GoHighLevel / LeadConnector (CRM & email marketing) — processes newsletter subscriber data. A Data Processing Agreement (DPA) is in place with GoHighLevel.
Meta / Facebook (paid advertising — future) — when our Meta Pixel is deployed, Meta will process website visitor data for ad targeting. A DPA will be established at that time.

We do not sell your personal data to any third party.

7. International Data Transfers

Some of our third-party processors are based in the United States. When your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with GDPR Article 46:

Google (GA4/GTM): Transfers covered by Google’s Standard Contractual Clauses (SCCs).
Luma: Transfers covered by Luma’s Standard Contractual Clauses with EU supervisory authorities.
GoHighLevel / LeadConnector: Transfers covered by GoHighLevel’s Standard Contractual Clauses.

You may request a copy of the applicable transfer safeguards by emailing hello@wellnessrave.com.

8. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

Right of Access (Art. 15): Request a copy of the personal data we hold about you.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
Right to Erasure / “Right to be Forgotten” (Art. 17): Request deletion of your personal data, subject to certain legal exceptions.
Right to Restriction of Processing (Art. 18): Request that we limit how we use your data in certain circumstances.
Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
Right to Object (Art. 21): Object to processing based on legitimate interest or for direct marketing.
Right to Withdraw Consent: Withdraw newsletter consent at any time without affecting prior processing.

To exercise any of these rights, email hello@wellnessrave.com. We will respond within 30 days.

9. Automated Decision-Making & Profiling

Wellness Rave S.L. does not make automated decisions with legal or similarly significant effects on individuals. Google Analytics 4 may perform audience segmentation for analytics purposes; this does not constitute profiling with legal effect within the meaning of GDPR Article 22.

10. Data Retention

Newsletter / CRM data (GoHighLevel): Retained until you unsubscribe, then deleted within 30 days.
Ticketing and order data: Retained for 6 years from the event date (Spanish tax law — Ley General Tributaria, Art. 66).
Website analytics data (GA4): Retained for 14 months (GA4 default retention setting).
Event photos and videos: Retained indefinitely for promotional purposes, unless a removal request is made and honoured.

11. Contact Us & Supervisory Authority

For any questions about this Privacy Policy or to exercise your rights:

Email: hello@wellnessrave.com

You also have the right to lodge a complaint with Spain’s national data protection authority:
Agencia Española de Protección de Datos (AEPD)
Website: aepd.es | Address: C/ Jorge Juan, 6, 28001 Madrid, Spain

We would appreciate the opportunity to address your concerns before you contact the AEPD, so please reach out to us first.