LEGAL

This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and what rights you have over it.

Who is responsible

Anastasiia Gavrylova, trading as Primitive Thing, is the data controller for the personal data collected through this website. Full identification and contact details are set out in the Aviso legal section above. For anything related to your data, write to primitive.thing.party.madrid@gmail.com.

What we collect

When you submit a form, we collect the details you enter: your name, your email address, and the answers you choose to give us. Nothing in the form is collected without you typing it.

We also receive limited technical data when you browse the site, such as browser type, device information, approximate location and the pages you visit. This is collected by our analytics providers without cookies and is only ever seen by us in aggregate — it does not identify you personally and is not used to build a profile.

Why we use it, and on what basis

We use your data for the following purposes, each with its legal basis under the GDPR:

• Reviewing and replying to your enquiry — based on your consent, given when you submit the form.

• Confirming and managing your attendance at an event — based on the performance of our agreement with you.

• Understanding how the site is used so we can improve it — based on our legitimate interest in maintaining and improving the site, using analytics that set no cookies on your device.

• Meeting our legal and accounting obligations — based on compliance with the law.

We do not use your data for automated decision-making or profiling.

How long we keep it

Enquiry and attendance data is kept for up to 24 months after our last contact with you, then deleted. Data we are legally required to retain, such as records tied to invoicing, is kept for the period the law requires.

Who we share it with

We never sell, rent or trade your personal data. We share it only with the service providers we need to run this site and our events: Framer for website hosting and visitor statistics, Cloudflare for content delivery and visitor statistics, Luma for event bookings and payments, and Google for our email. Each of them acts on our instructions and is bound to protect your data. We may also disclose data where the law obliges us to.

Data outside the European Union

Some of these providers are based outside the European Union. Where data is transferred outside the EU, the transfer relies on the European Commission Standard Contractual Clauses or an equivalent safeguard.

How we protect it

We apply reasonable technical and organisational measures to keep your data safe from unauthorised access, loss or disclosure. Access is limited to the people directly involved in running this website and our events.

Your rights

You can ask us to give you access to your data, correct it, delete it, or send it to another provider. You can also ask us to restrict how we use it, or object to our using it at all. Where we rely on your consent, you can withdraw that consent at any time, which does not affect anything done before you withdrew it. To exercise any of these rights, write to primitive.thing.party.madrid@gmail.com.

If you believe we have handled your data badly, you have the right to complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es.

Links to other sites

This website links to third-party sites, including Luma. We are not responsible for how those sites handle your data, and we encourage you to read their privacy policies.

Changes to this policy

We may update this policy from time to time. Any change is published on this page and takes effect once published.

Last updated: 18 September 2026