Legal
Privacy and cookie policy
Last updated: 9 September 2026
This English text is a translation provided for information only. The Spanish version is the legally binding one and prevails in the event of any discrepancy.
1. Data controller
| Owner | Santiago Fernández |
|---|---|
| Tax ID (NIF) | 13456799M |
| Registered address | Calle del Amparo 33, 28012 Madrid, España |
| Activity | Illusion and mentalism entertainment services |
| info@magosantiago.com | |
| Website | magosantiago.com |
No Data Protection Officer has been appointed, as none of the circumstances set out in Article 37 of the GDPR apply.
2. What data is processed and for what purpose
2.1 Contact form
We process the data that you voluntarily provide in the form: name, email address, type of event and the content of your message.
- Purpose: to deal with your enquiry and prepare a quote.
- Legal basis: taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
- Consequence of not providing it: it would not be possible to reply to your enquiry.
2.2 Booking a show
- Purpose: to manage the booking, invoicing and the associated tax and accounting obligations.
- Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
2.3 Web analytics
- Purpose: to understand, in aggregate, which sections are visited and from what type of device, in order to improve the website.
- Legal basis: your consent (Art. 6(1)(a) GDPR).
- Withdrawal: at any time, without affecting the lawfulness of processing carried out beforehand. See section 6.
No automated decision-making or profiling with legal effects is carried out. No special categories of data are processed. The website is not aimed at children under 14.
3. Recipients and processors
Your data is not sold or disclosed to third parties for commercial purposes. Only the following providers are involved, as processors and under a contract complying with Article 28 of the GDPR:
| Provider | Service | Location |
|---|---|---|
| Vercel Inc. | Website hosting | USA (with safeguards, see section 4) |
| Cloudflare, Inc. | DNS management | USA (with safeguards, see section 4) |
| Resend, Inc. | Delivery of contact form messages | USA (with safeguards, see section 4) |
Data may also be disclosed to the Spanish Tax Agency and to banks where required by a legal obligation.
4. International transfers
Some of the providers above are established in the United States. These transfers are covered by the European Commission's Adequacy Decision of 10 July 2023 on the EU-US Data Privacy Framework and, additionally, by the Standard Contractual Clauses approved by the European Commission.
5. Retention periods
- Contact form enquiries: while the enquiry is being handled and for one year afterwards, unless you request erasure sooner.
- Client and invoicing data: six years, under Article 30 of the Spanish Commercial Code, and four years for tax purposes under the Spanish General Tax Act.
- Record of cookie consent: up to 24 months, after which consent is requested again.
- Analytics data: up to 14 months in Google Analytics 4.
6. Cookies and similar technologies
6.1 Technical or necessary
This website stores in your browser, using local storage, your answer to the cookie notice and whether you have already seen the welcome animation. This information does not leave your device, is not sent to the controller and is essential for the website to behave as expected, so it is exempt from consent under Article 22.2 of the Spanish Information Society Services Act (LSSI).
6.2 Analytics
If you accept them, Google Analytics 4 is loaded, which sets first-party measurement cookies
(_ga and _ga_<id>) lasting up to 24 months. IP addresses are
processed in anonymised form. Google's script is not downloaded until you click Accept: if
you reject, no Google resource is loaded at any point during your visit.
6.3 No other cookies
No advertising, remarketing or social network cookies are used. Videos and images are served from this same domain, without embedded third-party players.
6.4 How to withdraw or change your choice
You may withdraw your consent at any time by clearing this domain's site data from your browser settings. The notice will be shown again and analytics will remain disabled until you accept it again. You can also block or delete cookies from the settings of Chrome, Firefox, Safari or Edge.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to info@magosantiago.com and stating the right you wish to exercise. You will receive a reply within one month.
If you consider that the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, C/ Jorge Juan 6, 28001 Madrid.
8. Security
Appropriate technical and organisational measures are applied to ensure a level of security appropriate to the risk, including encryption of communications via HTTPS. However, no system is infallible, so absolute security cannot be guaranteed.
9. Changes to this policy
This policy may be updated to reflect changes in the law or new processing activities. If a change affects processing that requires consent, consent will be requested again.