Privacy
Policy
Last updated: April 2026
Who We Are
Juneteenth Barcelona is organised by Asociación Cultural Spanish Harlem BCN (registry no. 73768, Barcelona, Spain) and Kevin Hawkins BV (VAT: NL861820150B01, Amsterdam, Netherlands). References to "we", "us", or "our" in this policy refer to both entities acting as joint data controllers for this event.
This policy explains how we collect, use, and protect personal data submitted through this website, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law.
Data We Collect
We collect personal data only when you voluntarily provide it. This includes:
- Contact form: name, email address, and any information you include in your message.
- Ticket purchases: processed through Luma (lu.ma). When you buy a ticket, Luma collects your name, email address, and payment information on their platform. We receive a copy of your name, email, and ticket tier as the event organiser. See the Ticketing — Luma section below.
- Sponsorship enquiries: name, email address, organisation name, and sponsorship tier of interest.
We do not use tracking cookies, advertising pixels, or behavioural analytics on this website. We use Google Translate as an accessibility tool — its use is subject to Google's own privacy policy.
Cookies
A cookie is a small text file stored on your device when you visit a website. This website does not use tracking, advertising, or analytics cookies. The following limited functional cookies may be set:
- Language preference (
googtrans): Set by Google Translate when you select a language. This cookie stores your language choice (e.g./en/es) and is cleared when your browser session ends. It does not identify you personally. - Form protection: Netlify Forms may set a short-lived session cookie when you submit a form. This is used solely to prevent automated spam submissions and contains no personal identifiers.
We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or profiling technology.
Third-party cookies
Google Translate is provided by Google LLC. When you use the translation feature, Google may set additional cookies governed by Google's Privacy Policy. You can opt out of Google's use of cookies via Google Ads Settings.
Managing cookies
You can view, block, or delete cookies at any time through your browser settings. Deleting the googtrans cookie will reset your language preference to English on your next visit. Note that blocking functional cookies may affect how the site operates.
Ticketing — Luma
Ticket sales and event registration for Juneteenth Barcelona are managed through Luma (lu.ma), operated by Luma Labs, Inc. When you purchase a ticket or RSVP via Luma, you are submitting your data directly to Luma's platform, and their privacy policy governs that transaction.
Data Luma may collect from you includes:
- Name and email address
- Phone number (if provided)
- Billing and payment information (processed via Stripe)
- Check-in and attendance records
As the event organiser, we receive attendee data (name, email, ticket tier, and attendance status) from Luma in our capacity as event host. We use this data solely to manage attendance, send essential event communications, and fulfil our obligations to ticket holders. We do not use it for marketing, profiling, or share it with any other party.
Luma acts as an independent data controller for the data you submit on their platform. For full details of how Luma handles your data, please review Luma's Privacy Policy.
Payment processing — Stripe
Payments made through Luma are processed by Stripe (Stripe, Inc. / Stripe Payments Europe Ltd). Your card details and billing information are handled directly by Stripe and are never stored by us or by Luma beyond what Stripe retains. Stripe is PCI DSS compliant. For details, see Stripe's Privacy Policy.
How We Use Your Data
We use your data solely to:
- Respond to your enquiry or request
- Communicate event information you have asked to receive
- Process sponsorship arrangements you have initiated
- Manage attendance and send essential communications to ticket holders
- Comply with legal obligations
We do not sell, rent, or share your personal data with third parties for marketing purposes.
Legal Basis for Processing
We process your data on the basis of your consent (Article 6(1)(a) GDPR) when you submit a form, on the basis of contractual necessity (Article 6(1)(b) GDPR) when processing your ticket purchase or fulfilling event obligations, and on the basis of legitimate interests (Article 6(1)(f) GDPR) when responding to enquiries.
Data Retention
We retain contact form submissions and enquiry data for up to 24 months after the event, after which they are securely deleted unless a longer retention period is required by law. Attendee data received from Luma is retained for the same period for event administration and legal compliance purposes. To request deletion of your ticketing data, you may also contact Luma directly through their platform.
Your Rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing
- Lodge a complaint with the Spanish data protection authority (AEPD) at aepd.es
To exercise any of these rights, please contact us via the contact page. For rights relating to data held by Luma or Stripe, please contact those services directly.
Data Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Form submissions are handled via Netlify Forms; ticket and payment data is handled by Luma and Stripe respectively — each of which maintains their own security standards. We do not store payment card information.
Changes to This Policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.