Legal notice and privacy policy

In compliance with Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), this website is owned by: Sumeria Global, S.L.U. Tax ID: B93980084 Registered address: C/ Bolos, 15, 17800 Olot (Girona), Spain Email: [email protected] concerts.cat is a concert and live music agenda for Catalonia. The website provides information about music events, venues, and artists.

In compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD), we inform you of the following: Data controller: Sumeria Global, S.L.U. (Tax ID B93980084) Contact: [email protected] Browsing the site needs no account and we do not ask you for any data. We do not process payments and we do not track users across websites. Browsing does generate the technical data described below, and if you want the follow emails we ask for your email address (section 3). Analytics: we measure site usage with our own cookieless analytics, which does not store your IP address and only shows us aggregated figures. Ticket clicks: when you click a link to buy tickets, it goes through our server, and we record the link, the time of the click, your IP address, your browser's user agent and the page you came from. We do this to filter out fraud and automated (bot) traffic and to compile aggregated statistics that we share with venues. IP addresses are anonymised after 30 days. Error reports: if you report a mistake in a listing, we keep what you tell us (the kind of mistake and any note you write) and a hash of your IP address to prevent abuse. A copy of the report, with your email masked, reaches us by email through Resend (United States, under standard contractual clauses). We keep the report for 90 days. "Contact us" messages: if you write to us through the "Contact us" button, we keep the message, the category you pick, the page you sent it from, the site language and, only if you give it, your email address, which we use solely to reply to you. To prevent abuse we also keep a hash of your IP address made with a key that changes every day, and we clear it after 90 days. Messages, email included, are deleted 12 months after they are sent. The legal basis is legitimate interest (Art. 6.1.f GDPR) in improving the site and answering your requests and, for the optional email, the consent (Art. 6.1.a GDPR) you give by typing it in. So we can answer quickly, a copy of each message (without the address) reaches us by email through our email provider, Resend (United States, under standard contractual clauses), and we delete that copy once the message is handled. If you tick the news box, we also use the email to send you concerts.cat news, based on your consent (Art. 6.1.a GDPR), until you unsubscribe with the link in every email; the email is then kept as a follow (section 3) and is not deleted with the message after 12 months. Legal basis: legitimate interest (Art. 6.1.f GDPR) for analytics, ticket-click records and error reports, and technical necessity for the language preference cookie. Delivery and security: traffic passes through Cloudflare, Inc. (United States), which acts as our content delivery network and security provider and, to do so, processes your IP address and the technical data of each request. Transfers to the United States rely on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses. All other data is stored in the European Union. We do not make automated decisions about you.

If you subscribe to follow a venue or an artist: What we collect: your email address, the language, what you follow (the venue or artist), source page and, where applicable, the form's anonymous assignment. To limit abuse and count impressions we store a daily hash of your IP address; the IP address itself is never stored. We also record delivery status (sent, delivered, opened, clicked, bounced or complained) and, if you report incorrect concert information, the report type and note you provide. Why: to confirm your request, send one weekly email with new concerts for what you follow, manage unsubscribes and issues, check delivery, and limit form abuse. Legal basis: your consent (Art. 6.1.a GDPR), with double opt-in. We send nothing until you click the confirmation link, and that link expires after seven days. How long: for as long as you follow something. If you unsubscribe we keep the opt-out record until you exercise erasure, so we do not write to you again. Impressions carrying an IP hash are deleted after 90 days and only the aggregate daily count remains; anti-abuse counters use a key that changes daily and never contain the plain IP address. Recipients and transfers: emails are sent by Resend (Resend Labs, Inc.). Resend primarily processes data in the United States under the EU Standard Contractual Clauses and is certified under the EU-U.S. Data Privacy Framework. Cloudflare may also process data in the United States under the Data Privacy Framework and, where applicable, Standard Contractual Clauses. Your rights: every email we send links to your follows page. From there you can unfollow anything, unsubscribe from everything, and delete all of your data immediately, without writing to us.

You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability, and you may withdraw consent at any time, without affecting the lawfulness of prior processing. For follow emails the fastest route is your follows page, linked in the footer of every email. For any other request, write to [email protected]; we reply within one month. When you delete your data it leaves the live database at once; backups are kept for up to 35 days, so a copy can remain in them until they expire. You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).

This site uses only technical or functional storage and cookieless analytics. See the cookie policy for details.

The design and original content of concerts.cat are the property of Sumeria Global, S.L.U.. Concert information is obtained from public sources and presented for informational purposes.

We reserve the right to modify this policy at any time. Last updated: 24 September 2026.