Legal Notice and Privacy Policy
Last updated: 7 November 2026
Identity and contact
- Website owner: Associació Cultural i Creativa Espai42
- Responsible contact and representative designated by the association: Victor Masmitjà Prieto
- Representative’s personal Spanish ID (DNI): 46984564A
- Address: Carrer Jaume I, 42, Amposta
- Email: espaicreatiu42@gmail.com
- Web: espai42.org
When you press “Send by email”, your name, message, topic or event and optional contact details are sent to our private inbox. We only confirm receipt after recording it successfully. Preparing WhatsApp is an independent, optional action that does not save your text on our server. You can use either channel or both, in any order. The Gmail notification includes only a reference and private-panel link, not your name, contact details or message.
Purpose and terms of use
Espai42 presents the association’s spaces, creative processes and activities in Amposta, including information about workshops and meetings. Event details may be updated or marked as cancelled. An inquiry alone is not a confirmed booking or a payment.
You may browse and share links to this website. You must not send unlawful content, impersonate others, interfere with the service or access private information without permission. Spanish and European law apply, without limiting any mandatory rights or jurisdiction protections available to users.
Who processes your data and why
The data controller is Associació Cultural i Creativa Espai42, using the contact person and address shown above. We process information you provide to answer questions and communicate about spaces, activities or collaborations. A phone number or email is optional; without it, we may be unable to reply through that channel.
Where relevant, requests about a service are processed to take pre-contractual steps at your request (GDPR Article 6(1)(b)). Other voluntary inquiries rely on the consent you express by sending them (Article 6(1)(a)). Security and abuse prevention rely on the legitimate interest in protecting the service (Article 6(1)(f)). We do not create commercial profiles, serve personalised advertising or make automated decisions with legal effects.
Forms and drafts
Text you write but do not send is not captured by our server. Only if you opt to keep a draft is it saved on your device, separately for each form, event and language. It expires seven days after the last edit and is purged when a form is loaded again. You can delete it earlier; avoid this option on shared devices.
Do not include health information, identity documents, passwords or other sensitive information in your message. The identification details in this notice concern Espai42’s management; we do not ask visitors for those details in our forms.
Retention, providers and security
Communications received by email or WhatsApp are kept as long as needed to handle the request and any resulting legal obligations or responsibilities. Website inbox inquiries are normally retained for 180 days and deleted periodically. Technical records are limited to what is needed to operate and protect the service.
Backups are encrypted before upload to Google Drive, in a repository dedicated to Espai42. The recovery key remains under our control and is not uploaded to the repository. We retain 7 daily, 4 weekly and 3 monthly backups; deleted data may remain in older backups until rotation removes it. When restoring a backup, deletion deadlines must be reapplied before the service is reactivated.
Management access is restricted. Hosting, maintenance and email providers may act as processors as needed to provide those services. We do not sell data or share it with funders or supporting organisations simply because their logos appear here.
Instagram, WhatsApp and external websites have their own terms and privacy policies. You access them when following their links; we do not embed their tracking systems. External services, including email, may involve processing outside the European Economic Area under the respective provider’s safeguards and policies.
Your rights
You can request access, rectification, erasure, restriction or portability, and object where applicable, by contacting espaicreatiu42@gmail.com or the postal address above. You may withdraw consent without affecting the lawfulness of earlier processing. We will only ask for proportionate identity verification if needed to handle your request.
You may also complain to the Spanish Data Protection Agency (www.aepd.es). Browsing does not waive these rights or provide blanket consent for other purposes.
Content, authorship and links
Our own content, partner logos and third-party materials remain subject to their respective owners’ rights. Reference photographs, footage, paper textures and fonts are used under their licences and published credits. Visual material should not automatically be understood as depicting Espai42’s premises.
External links identify organisations or provide further information. Espai42 does not control their content and cannot guarantee that the Internet will be completely free from errors or interruptions. This does not exclude any responsibility imposed by applicable law.
Espai42’s optional analytics
Only if you accept analytics do we send public page visits, sections and predefined actions, such as opening an event, downloading its calendar file or opening WhatsApp. Our server validates fields before forwarding them to self-hosted Umami. We do not send names, contacts, messages, form contents, URL parameters, advertising identifiers or session recordings; only the referring domain is retained.
Processing relies on your consent (GDPR Article 6(1)(a)). The IP address and browser are processed transiently to derive a pseudonymous session that rotates daily; Umami does not store the plain IP address. We do not collect city or region or assign personal identifiers. This is not absolute anonymity: usage statistics are kept for 90 days and purged daily. Encrypted backups may retain older data until rotation.
Accepting and rejecting are equally easy. Change your decision through “Analytics preferences” in any page footer. Withdrawal stops future sends, not automatic deletion of previously sent data. With Do Not Track or Global Privacy Control, analytics stays off by default, but explicit acceptance in this control allows these limited statistics even while the signal remains active. No response, rejection or disabled JavaScript means no statistics are sent.