Privacy & Cookie Statement –
Pal Mundo International B.V.

Pal Mundo International B.V., located at Retiefstraat 75B, 1092VZ Amsterdam, is responsible for processing your personal data. This statement explains how we collect, use, and protect your data across our websites, apps, services, and events. For questions, contact: gdpr@palmundofestival.com.

1. What Personal Data We Process

We may process:
• Identification and contact details: name, email, phone number, address, country of residence
• Demographic data: gender, date of birth
• Preferences: music, artists, clothing size, geo-location (only with consent)
• Transaction data: ticket purchases, merchandise, travel packages
• Device and usage data: IP address, browser type, device identifiers, interaction history

We do not process sensitive data such as race, religion, health, or political views.

2. How We Collect Your Data

We collect data:
Directly from you: when you register, purchase tickets via Paylogic, contact us, or participate in campaigns
Through use of our services: via websites, apps, and event interactions (e.g. camera registration for safety)
From third parties: social media integrations, analytics tools (e.g. Google Analytics), and payment providers (e.g. Paylogic, iDeal)

We may also collect data from international visitors and artists, always in accordance with applicable laws.

3. Legal Basis for Processing

We process your data:
• To deliver services (contractual necessity)
• To comply with legal obligations (e.g. tax record retention)
• Based on legitimate interests (e.g. service improvement, marketing), always balanced against your privacy rights
• With your explicit consent (e.g. for tracking technologies or promotional messages)

You can withdraw consent at any time by contacting gdpr@palmundofestival.com.

4. Use of Cookies and Tracking Technologies

We use cookies and similar technologies to:
• Keep you logged in and store preferences
• Analyze usage and improve performance
• Personalize content and ads based on your behavior across our platforms and third-party sites

Some cookies are placed by third parties (e.g. ad networks, social media platforms) who manage their own data collection. We only place non-essential cookies after obtaining your consent. You can manage or disable cookies via your browser settings. Note: disabling cookies may limit access to certain features.

Technical partners involved include: Google Tag Manager, Webflow, Paylogic, Mailchimp, Facebook and more.

5. How We Use Your Data

We use your data to:
• Provide access to services, websites, apps, and eventsProcess payments and issue invoices
• Personalize your experience through interest-based profiling (e.g. artist recommendations, targeted ads)
• Send service updates, newsletters, and promotional offers via email, SMS, or push notifications

We never share full user profiles. Only anonymized segments (e.g. age range, music preference) may be used for marketing purposes with your consent.

6. Who We Share Your Data With

We may share your data:
• Within the Pal Mundo group, for service delivery
• With trusted service providers (e.g. mailing services, call centers, event partners, technical developers) under strict data processing agreements
• With selected partners for marketing purposes, only with your explicit consentWith authorities or legal entities when required by law or to prevent harm

For international transfers outside the EEA, we use EU-approved Standard Contractual Clauses to ensure adequate protection.

7. Data Retention

We retain your data:
• As long as needed to provide services, process refunds, or maintain contact
• For up to 2 years after account inactivity, to allow easy reactivation
• For 7 years where legally required (e.g. tax records)

Data may be anonymized for statistical purposes beyond retention limits.

8. Data Security

We apply appropriate technical and organizational measures to protect your data against loss, misuse, or unauthorized access. All third-party processors are contractually bound to meet our security standards.

For questions about data protection, contact: gdpr@palmundofestival.com

9. Your Rights

You have the right to:
• Access, correct, or delete your personal data
• Object to marketing communications
• Restrict or transfer your data
• File a complaint with the Dutch Data Protection Authority

You can exercise these rights via your account settings or by contacting us. We aim to respond within four weeks.

10. Changes to This Statement

We may update this statement from time to time. Significant changes will be announced via our platforms. The latest version is always available at: palmundofestival.com/privacy Last updated: October 1, 2025

The latest version is always available at: palmundofestival.com/privacy

Last updated: October 1, 2025