Privacy policy
Last updated: 26 October 2026
Data controller
Freedom Asociación LGBT, with tax ID (CIF) G76245430 and registered address at Avenida Estados Unidos 54, 35100 Playa del Inglés, Las Palmas (Spain), organizer of Maspalomas Pride by Freedom, is the controller of the personal data collected through www.pridebyfreedom.com and the «Pride by Freedom» app.
Contact for privacy matters: contabilidad@freedom-asociacion.org
What data we process
- If you make a purchase: name, email and phone number, the tickets, passes and products purchased, the amount and the payment method. If the ticket is personalised, the name, email and ID document of each attendee. Your card details are received directly by Stripe; they never reach us.
- If you have an account in the app: first name, surname, email, encrypted password, language and, if you add them, date of birth, profile photo, description and Instagram, X or TikTok usernames. If you sign in with Google or Apple, we receive your name and email from them.
- If you use the community: your chat messages, the conversations you take part in, reports, blocks and votes.
- At event entry: when your ticket was validated.
- From your phone: push notification identifier, operating system, app version and language.
- If you visit the website and accept audience measurement: the pages you view, the type of device and browser, where you came from and your approximate city or country.
What we use it for
- To sell and send you your tickets, give you access, manage refunds and assist you (performance of the contract).
- To keep the sales records required by tax law (legal obligation).
- To maintain security, prevent fraud and moderate the chat and profile photos (legitimate interest).
- To send you festival alerts by push notification, only if you allow them on your phone (consent).
- To measure app usage with Google Analytics for Firebase, only if you enable it in the app Settings; it is off by default and does not use the advertising identifier (consent).
- To measure website visits with Google Analytics, only if you accept it in the cookie notice. You can change your decision at any time in «Cookie settings», at the bottom of every page (consent).
Artificial intelligence
The website and the app automatically translate the festival texts and, when you tap «Translate message», the app translates chat messages. Profile photos are automatically reviewed before they are published. To do this, only the text or the photo, without your name or email, is sent to Anthropic, which does not use them to train its models and deletes them within 30 days, unless its security systems flag them as misuse: in that case it may keep them for up to 2 years.
Automatic translations may contain errors: in case of doubt, the Spanish text prevails.
If the automatic review has doubts about your profile photo, it remains pending until a person from our team reviews it. If it is rejected, we will tell you why and you can upload another one or request from the app that a person review it. Photos containing nudity, violence or hate symbols are always rejected.
Who else processes your data
The website, the app, the tickets and the payments run on the Ticketoke platform, owned by Sundance Events, S.L.U., which processes the data on our behalf. Ticketoke in turn uses these providers:
- OVH (France): servers, database and encrypted backups.
- Stripe Payments Europe (Ireland): payments and refunds.
- Amazon Web Services (Sweden): sending emails.
- Vercel (Germany and global network): website hosting.
- Anthropic Ireland (Ireland, with processing in the United States): automatic translation and photo moderation.
- Google Firebase (EU and United States): push notifications, sign-in with Google or Apple and, if you enable it, app usage statistics.
- Google Analytics (Ireland and United States): measurement of website visits, only if you accept it.
- Sentry (Germany): technical error alerts, without personal data.
Transfers to the United States are covered by the European Commission's standard contractual clauses, in the case of Anthropic, and by the EU-U.S. Data Privacy Framework or those same clauses, in the case of Google and Vercel. The full list is available at www.ticketoke.com/es/privacy.
At some events, tickets are sold by promoters who collaborate with Freedom Asociación LGBT. Those promoters have their own privacy policies.
How long we keep them
- Your account, for as long as you keep it open. When you delete it, your profile, your photo and your devices are erased, and your chat messages become anonymous.
- Sales, for up to 6 years due to legal obligation.
- The log of emails sent, 90 days.
- The data from each visit in Google Analytics, for a maximum of 14 months.
- Encrypted backups are renewed and deleted after a maximum of 12 months.
Cookies
The website stores in your browser only what is essential for it to work (the cart, your purchase confirmation and your choice about cookies) and uses Stripe cookies during payment, which prevent fraud. Only if you accept it does it also use Google Analytics audience measurement. It does not use advertising cookies. The details are in the Cookie Policy, in the legal section of this same site.
Your rights
You can request access to, rectification, erasure, restriction or portability of your data, or object to its processing, by writing to contabilidad@freedom-asociacion.org. You can delete your account from the app Settings. We will reply within a maximum of one month. If you are not satisfied, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
All connections are encrypted, the database is not accessible from the internet, passwords are stored encrypted, and backups are encrypted and stored in a different data centre.
