Privacy notice

Who we are

The data controller is Aura Silent Disco S.L. (CIF B10724623), Via Laietana 48a, 1.3, 08003 Barcelona, Spain. For any privacy question, write to info@aura-events.co.

What we collect

When you request a quote or contact us: your name, email, phone, and the event details you share (date, headcount, venue, type). If you consent, analytics and advertising cookies that tell us how the site is used. And the content of messages you send us by form, WhatsApp or email.

Why we use it, and the legal basis

To answer you and prepare a quote (steps taken at your request before a contract, art. 6.1.b GDPR). To manage your booking if you go ahead (performance of a contract). Analytics and marketing cookies only with your consent (art. 6.1.a), which you can withdraw at any time. To meet our legal, accounting and tax obligations (art. 6.1.c).

Who we share it with

Service providers who process data on our behalf under contract: our CRM and database provider, our website hosting, and our email provider. Only with your consent, analytics and advertising providers (Google, Meta). With your consent to marketing cookies, we also share a limited set of pseudonymised (hashed) identifiers, such as your email or phone and an internal customer reference, directly from our servers with Meta through its Conversions API, solely to measure how our ads perform; you can withdraw this consent at any time in the cookie banner. Some providers may process data outside the EU under appropriate safeguards such as the European Commission's Standard Contractual Clauses. We do not sell your data.

Our service providers

These are the providers that process personal data for us, and what each one is used for:

• Supabase: our database and file storage.
• Vercel: hosting for our website and booking pages.
• Stripe: card payments. Your card details go directly to Stripe and we never see them.
• Resend: emails about your quote, booking and invoices.
• Google: our business email (Gmail), address suggestions in our forms (Google Maps) and, only with your consent, Google Analytics and Google Ads. When you send us a form with that consent, Google Ads also receives a hashed (encrypted) copy of your email and phone, only to measure which ads bring enquiries.
• Meta: WhatsApp Business, when you message us on WhatsApp, and, only with your consent, the Meta Pixel and Conversions API.
• Anthropic: AI assistance that helps us read and answer enquiries.
• A speech-to-text provider: transcribing voice notes you send us on WhatsApp.
• Upstash: security and abuse protection on our forms, which processes your IP address.
• Packlink and Sendcloud: shipping labels when we send equipment by courier (name, delivery address and phone).
• Luma: registrations if you sign up for one of our events.
• Odoo: invoicing and accounting records.
• Hetzner: servers in the EU that run our internal automation.
• End2End Solutions S.L.: our accountants.
• The Spanish Tax Agency (AEAT) receives invoice records where the law requires it.

How long we keep it

For as long as we need it to answer you and run your event, and after that for the periods required by law (for example accounting and tax records). You can ask us to delete it sooner where no legal duty requires us to keep it.

Your rights

You can access, correct, erase, restrict, port, or object to the processing of your data, and withdraw consent at any time. Email info@aura-events.co and we will respond. You also have the right to complain to the Spanish Data Protection Agency (AEPD, www.aepd.es).

Cookies

Essential cookies that make the site work are always on. Analytics and marketing cookies load only after you accept them in the cookie banner. You can change your choice at any time.

Changes to this notice

We may update this notice as our services or the law change. The date at the top shows the latest version.