Privacy
Policy

Last updated: June 2026

Who We Are

Juneteenth Barcelona is organised by Asociación Cultural Spanish Harlem BCN (registry no. 73768, Barcelona, Spain) and Kevin Hawkins BV (VAT: NL861820150B01, Amsterdam, Netherlands). References to "we", "us", or "our" in this policy refer to both entities acting as joint data controllers for this event.

This policy explains how we collect, use, and protect personal data submitted through this website, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law.

Data We Collect

We collect personal data only when you voluntarily provide it. This includes:

• Contact form: name, email address, and any information you include in your message.
• Ticket purchases: processed through Luma (lu.ma). When you buy a ticket, Luma collects your name, email address, and payment information on their platform. We receive a copy of your name, email, and ticket tier as the event organiser. See the Ticketing — Luma section below.
• Sponsorship enquiries: name, email address, organisation name, and sponsorship tier of interest.
• Merchandise orders: when you order from our shop, we collect your name, email, phone number, and shipping address, processed via Stripe (payment) and Printful (fulfilment). See the Merchandise Orders section below.

We do not use tracking cookies, advertising pixels, or behavioural analytics on this website. We use Google Translate as an accessibility tool — its use is subject to Google's own privacy policy.

Cookies

A cookie is a small text file stored on your device when you visit a website. This website does not use tracking, advertising, or analytics cookies. The following limited functional cookies may be set:

• Language preference (googtrans): Set by Google Translate when you select a language. This cookie stores your language choice (e.g. /en/es) and is cleared when your browser session ends. It does not identify you personally.
• Form protection: Netlify Forms may set a short-lived session cookie when you submit a form. This is used solely to prevent automated spam submissions and contains no personal identifiers.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or profiling technology.

Third-party cookies

Google Translate is provided by Google LLC. When you use the translation feature, Google may set additional cookies governed by Google's Privacy Policy. You can opt out of Google's use of cookies via Google Ads Settings.

Managing cookies

You can view, block, or delete cookies at any time through your browser settings. Deleting the googtrans cookie will reset your language preference to English on your next visit. Note that blocking functional cookies may affect how the site operates.

Ticketing — Luma

Ticket sales and event registration for Juneteenth Barcelona are managed through Luma (lu.ma), operated by Luma Labs, Inc. When you purchase a ticket or RSVP via Luma, you are submitting your data directly to Luma's platform, and their privacy policy governs that transaction.

Data Luma may collect from you includes:

• Name and email address
• Phone number (if provided)
• Billing and payment information (processed via Stripe)
• Check-in and attendance records

As the event organiser, we receive attendee data (name, email, ticket tier, and attendance status) from Luma in our capacity as event host. We use this data solely to manage attendance, send essential event communications, and fulfil our obligations to ticket holders. We do not use it for marketing, profiling, or share it with any other party.

Luma acts as an independent data controller for the data you submit on their platform. For full details of how Luma handles your data, please review Luma's Privacy Policy.

Payment processing — Stripe

Payments made through Luma are processed by Stripe (Stripe, Inc. / Stripe Payments Europe Ltd). Your card details and billing information are handled directly by Stripe and are never stored by us or by Luma beyond what Stripe retains. Stripe is PCI DSS compliant. For details, see Stripe's Privacy Policy.

Merchandise Orders — Shop

When you place an order in our online shop, we collect the information needed to process and deliver it: your name, email address, phone number, and shipping address. We use this data solely to fulfil your order, send order and delivery updates, and handle any returns or support requests. We do not use it for marketing or profiling.

Orders are processed by two third-party providers, who act as independent or joint controllers/processors for the data needed to complete your purchase:

• Stripe (Stripe Payments Europe Ltd) handles payment. Your card and billing details are entered directly with Stripe and are never stored by us. Stripe is PCI DSS compliant. See Stripe's Privacy Policy.
• Printful (Printful, Inc. and its affiliates) prints and ships your order. We share your name, shipping address, phone number, and order details with Printful so they can produce and deliver it. See Printful's Privacy Policy.

Order confirmation emails are sent from our own email account. We retain order records for as long as necessary to meet our legal, tax, and accounting obligations.

Event Photography, Images & the Online Gallery

Juneteenth Barcelona is photographed and filmed for documentary, promotional, and archival purposes. By attending the Event, you acknowledge that your image and likeness may be captured and used by the Organisers on our website, social media (including Instagram), and in future promotional materials. This processing is based on our legitimate interest in documenting and promoting the Event (Article 6(1)(f) GDPR).

Selected photographs and videos from the Event are published in our online gallery, where visitors can view them and download copies for personal, non-commercial use. These media files are stored in, and served from, a folder hosted by Dropbox (Dropbox, Inc., United States), which acts as our hosting provider for this purpose. When you view or download an item from the gallery, the file is delivered to your browser by Dropbox; because Dropbox is based in the United States, this may involve a transfer of personal data outside the European Economic Area, carried out under appropriate safeguards such as Standard Contractual Clauses. For details of how Dropbox processes data, see Dropbox's Privacy Policy.

If you do not wish to appear in published media, you may notify event staff on the day, or contact us afterwards via the contact page to request that a specific photograph or video be removed from the gallery and our social channels. We will use reasonable efforts to comply promptly with such requests. Please note that once a file has been downloaded by a visitor from the gallery, we cannot control or recall any copies already in their possession.

How We Use Your Data

We use your data solely to:

• Respond to your enquiry or request
• Communicate event information you have asked to receive
• Process sponsorship arrangements you have initiated
• Manage attendance and send essential communications to ticket holders
• Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Legal Basis for Processing

We process your data on the basis of your consent (Article 6(1)(a) GDPR) when you submit a form, on the basis of contractual necessity (Article 6(1)(b) GDPR) when processing your ticket purchase or fulfilling event obligations, and on the basis of legitimate interests (Article 6(1)(f) GDPR) when responding to enquiries.

Data Retention

We retain contact form submissions and enquiry data for up to 24 months after the event, after which they are securely deleted unless a longer retention period is required by law. Attendee data received from Luma is retained for the same period for event administration and legal compliance purposes. To request deletion of your ticketing data, you may also contact Luma directly through their platform.

Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing
• Lodge a complaint with the Spanish data protection authority (AEPD) at aepd.es

To exercise any of these rights, please contact us via the contact page. For rights relating to data held by Luma or Stripe, please contact those services directly.

Data Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Form submissions are handled via Netlify Forms; ticket and payment data is handled by Luma and Stripe respectively — each of which maintains their own security standards. We do not store payment card information.

Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.