PRIVACY POLICY

Owner: Viktoria Őzse all rights reserve for Picnic Vibes Mallorca

DNI/NIE: Y5603905S

Address: C/ Robert Graves 6, 07015 Palma de Mallorca, Spain

Email: hello@picnicvibesmallorca.com

Phone: +34 645 216 230

Website: https://www.picnicvibesmallorca.com

1. Legal Notice – Law 34/2002 (LSSI-CE)

In accordance with the obligations established under Law 34/2002, of 11 July, on Services of the Information Society and Electronic Commerce (LSSI-CE), the following information is hereby provided:The domain www.picnicvibesmallorca.comis owned by Viktoria Őzse, operated by Viktoria Őzse, acting as an autonomous service provider.

Picnic Vibes Mallorca provides event decoration and organisation services for private events and picnics.

The company does not prepare, store, or serve any food or drink.

The website’s purpose is to present information about available decoration and event organisation services, and to allow potential clients to contact us for quotations or inquiries.

2. Data Protection (GDPR & LOPDGDD)

In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you of the following:

Data Controller:

Picnic Vibes Mallorca – Viktoria Őzse

Email: hello@picnicvibesmallorca.com

Purpose of processing:

Responding to your inquiries or service requests via the contact form, email, or telephone.Managing bookings or quotations related to event decoration services. Maintaining communication for administrative and contractual purposes.

Legal basis:

Consent of the data subject (Art. 6.1 a GDPR).

Performance of a contract or pre-contractual measures (Art. 6.1 b GDPR).

Data retention:

Personal data will be kept only for as long as necessary to fulfil the purposes above or as required by applicable law.

Data recipients:

No personal data will be shared with third parties except when required by law, or with authorised service providers (e.g., catering partners or logistics companies) who act under a data-processing agreement.

International transfers:

No international data transfers are foreseen. If necessary, transfers will comply with Chapter V of the GDPR.

Rights of the data subject:

You may exercise your rights of access, rectification, erasure, restriction, objection, and data portability by sending a written request to hello@picnicvibesmallorca.com

You also have the right to file a complaint with the Agencia Española de Protección de Datos (AEPD): www.aepd.es

3. Use of cookies

This website uses only essential cookies required for proper technical operation.No profiling, marketing, or analytics cookies are used without prior consent.Users can manage or disable cookies via their browser settings at any time.

4. Disclaimer

Picnic Vibes Mallorca shall not be liable for damages that may result from interference or interruptions in the electronic communications network beyond our control, nor for any inaccuracies or omissions in third-party information displayed on the website.

5. Intellectual Property

All content (images, texts, logos, graphics, design elements) appearing on this website are the property of Picnic Vibes Mallorca or used under licence, and may not be reproduced or distributed without prior written consent.

6. Governing Law and Jurisdiction

This website and its legal notice are governed by Spanish law, specifically Law 34/2002 (LSSI-CE) and relevant data protection legislation.

Any disputes arising from its interpretation or use shall be submitted to the courts of Palma de Mallorca.

WHO IS RESPONSIBLE FOR YOUR DATA?

Our Privacy Notice applies to the personal data that Picnic Vibes Mallorca collects and uses. References in this Privacy Notice to “Picnic Vibes Mallorca”, “we”, “us” or “our” means business owner Viktoria Ozse (self-employed registered in Spain with registration NIE number of Y5603905S). We control the ways your personal data are collected and the purposes for which your personal data are used and are therefore the “data controller” for the purposes of the GDPR 2018, UK Data Protection Act 1998 and any other applicable European data protection legislation.

DATA WE COLLECT

We may collect and process the following categories of information about you:

• First name, last name, date of birth and gender

• Contact details, including telephone numbers and email address

• demographic information such as postcode and address

• credit/debit card details (although we do not retain complete payment card information)

• Your posts and messages on digital platforms/social media

• Your feedback and communication you exchange with us (eg emails, letters, calls, or logs of face to face interactions

• Your bookings/usage of the studio

SPECIAL CATEGORIES OF PERSONAL DATA

In the course of providing services to you, we may collect information that is considered “special categories of personal data” eg completion of a health disclaimer prior to your first session. If you do not allow us to process any special category personal data, this may mean we are unable to provide all or parts of the services you have requested from us.

HOW WE USE YOUR DATA?

To fulfil contractual obligations and provide our services to you.

To communicate with you and manage our relationship with you.

We may need to contact you by email, phone, letter and/or SMS for administrative, customer service or operational reasons, please be aware that these communications are not made for marketing purposes and as such, you will continue to receive them even if you choose not to receive marketing communications. Examples of these include; unplanned studio closure or timetable change. We will use the communications you exchange with us and the feedback you may provide in order to manage our relationship with you as our customer and to improve our services and experiences for other users.

To inform you about news and send notifications

• We will send promotional emails if a client opted in to our email newsletter

• We will send notifications&reminder email if clients opted in to our notification&reminder emails (such as appointment reminders)

• some emails are considered operational, and will be sent regardless of whether a client has opted out of communication preferences (such as appointment confirmation, purchase receipt, etc)

To improve our services, for administration purposes and to protect our business interests

The business purposes for which we will use your information include accounting, budgeting, billing and audit, credit or other payment card verification, safety, security, statistical and marketing analysis, systems testing, maintenance, ordering of supplies, planning and development. To comply with any other legal obligations.

WE MAY ALSO SHARE SOME OF YOUR PERSONAL DATA WITH, OR OBTAIN YOUR PERSONAL DATA FROM, THE FOLLOWING CATEGORIES OF THIRD PARTIES:

• Postal or digital mailing company – to send out communication to you on our behalf

• Bank/credit or debit card companies – in order to process your payments for services

• Web servers/website providers – hosting/storing some personal data

• Event/class booking websites – we’re passed your details if you book a class via a third party website

• Social media/digital marketing channels

• Booking system

We will not share your personal information to any other third parties than stated in this policy unless we have your permission or are required by law to do so.

DETAILED INFORMATION ON THE PROCESSING OF PERSONAL DATA

Personal Data is collected for the following purposes and using the following services:

Managing contacts and sending messages

This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.

These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.

MailChimp (The Rocket Science Group, LLC.)

MailChimp is an email address management and message sending service provided by The Rocket Science Group, LLC. Personal Data collected: email address / first name / last name / phone number

Place of processing: US – Privacy Policy

Analytics

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. Personal Data collected: Cookies and Usage Data. Place of processing: US –Privacy Policy

Interaction with external social networks and platforms

This type of service allows interaction with social networks or other external platforms directly from the pages of this Application. The interaction and information obtained through this Application are always subject to the User’s privacy settings for each social network. This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it.

Facebook Like button and social widgets (Facebook, Inc.)

The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: US – Privacy Policy

Hosting and Platform Services

This type of service has the purpose of hosting data and files that enable this Application to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of this Application.

Squarespace (Squarespace Ireland Ltd.)

Squarespace is a web hosting and website building platform that provides the technical infrastructure for this Application.

Personal Data collected: various types of Data as specified in the privacy policy of the service (such as Cookies, Usage Data, and any Data voluntarily provided by the User through forms).

Place of processing: EU (Ireland) and US – Privacy Policy

Address: Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland

Payment Processing

Payment processing services enable this Application to process payments by credit card, bank transfer or other means. To ensure greater security, this Application shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction.

PayPal (PayPal Holdings, Inc.)

PayPal is a payment service provided by PayPal Holdings, Inc., which allows Users to make online payments.

Personal Data collected: various types of Data as specified in the privacy policy of the service, including payment information and billing details.

Place of processing: US – Privacy Policy

Address: PayPal Holdings, Inc., 2211 North First Street, San Jose, CA 95131, USA

Stripe (Stripe, Inc.)

Stripe is a payment processing service provided by Stripe, Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service, including payment and billing information.

Place of processing: EU (Ireland) and US – Privacy Policy

Address: Stripe Payments Europe, Ltd., The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland

SECURITY OF YOUR PERSONAL DATA

We are committed to taking appropriate technical and organisational measures to maintain the high standards of security and data handling practices in line with the General Data Protection Regulation, 2018. We protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage to personal data

CONFIDENTIALITY OF PROCESSING

Picnic Vibes Mallorca shall ensure that any person who is authorized to access Customer Data (including its staff) shall be under an appropriate obligation of confidentiality. No other party than stated in this policy will have access to any personal data provided by our clients.

YOUR RIGHTS

Your rights are as follows (noting that these rights don’t apply in all circumstances):

• The right to request access to your personal data and information about how we process it

• The right to rectification – we will correct your personal data if it’s inaccurate and complete any incomplete personal data. It is your responsibility to ensure that you submit true, accurate and complete information to us. You have the ability to change information via your Account.

• The right to erasure – you have the right to request that we delete personal data that we hold about you.

• The right to restrict processing

• The right to object to processing – if you would like us to stop processing your personal data, you can do this in a number of ways; If you do not wish to reveice promotional emails, please unsubscribe at the bottom of our marketing emails; If you wish to opt out of notifications&reminder emails, you can always send us an email to hello@picnicvibesmallorca.com

LINKS TO OTHER WEBSITES

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement.

UPDATES TO OUR PRIVACY POLICY

We may update this Privacy Notice to reflect changes to our information practices or in line with new legislation. We encourage you to periodically review the Privacy Notice on our website for the latest information on our privacy practices.

Latest update: October 22, 2025