Privacy policy

The data that BOS TAUROZOS may collect through the use and browsing of the website, through the enabled forms, by email, through the available contact channels or as a result of the contractual relationship that links you to BOS TAUROZOS, will be considered personal data and will be processed in accordance with current data protection regulations.

When completing the forms available on our website, there may be a series of mandatory data fields, which will be marked with the symbol «*» or identified as mandatory. If such data is not provided, the purposes described for each of the forms cannot be carried out.

We also inform you that, through the simple use and browsing of the website, BOS TAUROZOS may process data relating to:

• IP address.

• Browser version.

• Operating system.

• Date, time and duration of the visit or browsing of the website.

• Technical information derived from the use of cookies or similar technologies, where applicable.

This information may be processed using web analytics tools, such as Google Analytics, if they are implemented on the website, in accordance with the provisions of the Cookie Policy and with the conditions and privacy policies of the corresponding provider.

Likewise, the website may provide the Google Maps utility or other geolocation or map tools, which may access data relating to your location if you allow it, for the purpose of providing you with information about the location of our facilities or access routes. In this regard, the processing of such data will be carried out in accordance with the conditions and privacy policies of the corresponding provider.

BOS TAUROZOS reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review its content each time you access the website.

1. Contact forms.
   a. Purpose: to attend to, manage and respond to queries, requests for information or communications made by users through the forms enabled on the website.
   b. Legal basis: the consent of the data subject, given by voluntarily submitting the form. When the query is related to the purchase or reservation of tickets, the legal basis may be the application of pre-contractual measures requested by the data subject.
   c. Recipients: data will not be transferred to third parties, unless required by law or when necessary for the provision of services linked to the operation of the website, hosting, maintenance or email management.
2. Information provided through the email addresses made available on the website.
   a. Purpose: to attend to, manage and respond to queries or requests sent by users through the email addresses made available on the website.
   b. Legal basis: the consent of the data subject, given by voluntarily sending the communication. When the request is related to the purchase or reservation of tickets, the legal basis may be the application of pre-contractual measures or the performance of a contractual relationship.
   c. Recipients: data will not be transferred to third parties, unless required by law or when necessary to properly manage the communication or the requested services.
3. Purchase or reservation of tickets through the website.
   a. Purpose: to manage the purchase or reservation of tickets for access to the centre, process payment, send tickets or access codes by email, validate tickets at the facilities, attend to incidents related to the purchase or visit and comply with any applicable legal, tax and accounting obligations.
   b. Legal basis: the performance of the ticket purchase or reservation contract.
   c. With regard to processing necessary to comply with legal, tax or accounting obligations, the legal basis will be compliance with a legal obligation applicable to the controller.Recipients: the data may be accessed by the website’s technology providers, the payment platform or gateway, banking institutions or payment service providers, as well as third parties where there is a legal obligation.
4. Exercise of GDPR rights.
   a. Purpose: to attend to and manage requests to exercise rights made by data subjects in relation to data protection.
   b. Legal basis: compliance with a legal obligation applicable to the data controller.
   c. Recipients: data will not be transferred to third parties, unless required by law or when necessary for the formulation, exercise or defence of claims.
5. Security breach.
   a. Purpose: to manage, analyse, document and, where applicable, communicate security breaches that may affect personal data.
   b. Legal basis: compliance with a legal obligation applicable to the data controller.
   c. Recipients: data may be communicated to the Spanish Data Protection Agency, to other competent bodies or to third parties when necessary in accordance with the applicable regulations.
6. WhatsApp channel / chatbot.
   a. Purpose: to attend to, manage and respond to queries, requests for information or communications made by users through the WhatsApp channel or chatbot enabled on the website.
   b. Legal basis: the legal basis for processing will be the application of pre-contractual measures requested by the data subject when the communication is related to the request for information about visits, reservations, tickets or services offered by BOS TAUROZOS. In the case of communications relating to a purchase or reservation already made, the legal basis will be the performance of the contractual relationship. For other general queries received through this channel, the legal basis will be the legitimate interest of BOS TAUROZOS in attending to and managing the communications received through the enabled contact channels.
   c. Recipients: the data may be accessed by technology providers that provide the messaging, chatbot or WhatsApp support service, as well as providers linked to the channel used, when necessary for the management of the communication. In particular, the use of WhatsApp may involve the processing of data by the provider of said service in accordance with its own terms and privacy policies.

7. Exclusively for professional contacts.
   a. Purpose. To maintain and manage the existing professional, commercial or collaborative relationship between third-party professionals, suppliers, service providers or collaborators and BOS TAUROZOS.
   b. Legal basis. The legitimate interest pursued by the data controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.
   c. Recipients. Data will not be transferred to third parties, unless lawful in accordance with current data protection regulations.
8. Exclusively for contacts through social media
   a. Purpose. At BOS TAUROZOS, we process your personal data for the following purposes:— To answer queries, requests or petitions.— To manage the requested service, answer the request, or process a petition.— To establish a user-controller relationship and create a community of followers.
   b. Legal basis. The processing of the personal data available on the user’s profile and of any data provided by the user when interacting with the profiles of BOS TAUROZOS on social media will be carried out to answer queries, requests, comments or interactions made in that environment, in accordance with the terms of use and privacy policies of the corresponding social network. The legal basis for the processing will be the legitimate interest of BOS TAUROZOS in managing its corporate social media channels and responding to communications received through those channels, without prejudice to the fact that certain interactions carried out voluntarily by the user may involve the processing of data that the user has made public or has chosen to communicate within the environment of the social network itself.c. Recipients. Data will not be transferred to third parties, unless lawful in accordance with current data protection regulations. However, we recommend reviewing the privacy policy of the social networks we mainly use, as these social networks, being North American, may transfer data to the United States.
9. Exclusively for clients.
   a. Purpose.− Invoices, delivery notes, quotations and contracts. At BOS TAUROZOS, we process your personal data for the purpose of managing the services derived from the contractual relationship, as well as the commitments arising from the contract.
   b. Legal basis.− Invoices, delivery notes, quotations and contracts. The performance of a contract to which the data subject is a party or the application, at their request, of pre-contractual measures, the performance of the service provision contract itself and compliance with the following legal obligations that apply to us:✓ The retention periods for your data once the contractual relationship has ended are based on compliance with the provisions of the Commercial Code.✓ Communication of your data when requested by the Tax Inspectorate is covered by Law 58/2003, of 17 December, General Tax Law.c. Recipients.− Invoices, delivery notes, quotations and contracts. Data will not be transferred to third parties, unless lawful in accordance with current data protection regulations. In those cases where necessary, client data may be transferred to the following bodies, in compliance with a legal obligation:

   ✓ Data necessary to comply with the legal obligation may be transferred to the Spanish Tax Agency.

   ✓ To the corresponding banking institutions, in order to keep payments up to date.

10. Exclusively for visitors and users of the centre.
    a. Purpose. To manage the in-person visit to the centre, control access by validating tickets or access codes, organise visit slots and attend to incidents related to the provision of the service.
    b. Legal basis. The performance of the contractual relationship or provision of the requested service.
    c. Recipients. Data will not be transferred to third parties, unless required by law or when necessary for the management of the visit or the defence of claims.

BOS TAUROZOS does not plan to carry out international data transfers. If they become necessary, they will only be made to entities covered by the EU-U.S. Data Privacy Framework (Adequacy decision EU-US Data Privacy Framework_en.pdf (europa.eu)), more information:
www.dataprivacyframework.gov, to entities that have demonstrated that they comply with the level of protection and guarantees required under the parameters and requirements set out in current data protection regulations, such as the European Regulation, or when there is a legal basis for carrying out the international transfer, such as the consent of the data subject. In any case, the corresponding information will be provided to the data subject.

As a data subject, you have the right to obtain confirmation as to whether your data is being processed, to access your personal data, to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected or when you, as the data subject, withdraw the consent granted. BOS TAUROZOS will process and retain your data in accordance with current regulations, without prejudice to your right, as the data subject, to request the restriction of the processing of your data in any case. In certain circumstances, you may exercise your right to data portability, in which case the data will be provided to you or to the new data controller you designate in a structured, commonly used and machine-readable format. You have the right to withdraw your consent at any time for any of the processing activities for which you have granted it.

To exercise your rights, please contact us at the email address infobostaurozos@gmail.com. We have forms available for the exercise of all the rights indicated above; however, you may also use those prepared by the Spanish Data Protection Agency. You have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that the exercise of your rights has not been properly addressed. The maximum period for resolution will be one month from receipt of your request. In the event of any change to your data, we kindly ask you to notify us properly in writing so that we can keep your data up to date.

Latest version: 3 June 2026