Privacy statement

1Who processes your data

Massive Pro AV is responsible for the personal data processed through cubalibreparty.com and around Cuba Libre 2026.

We do not have a data protection officer. Your questions arrive at the address above and are handled there.

2What data we process

If you use the contact form: your name, your email address, your phone number if you fill it in, the subject you pick, your message, the date and your IP address. The IP address comes along in the email we receive and we only use it against abuse and spam.

If you call or message us: your phone number and what you tell us about your booking.

If you buy a ticket or a table: your name, email address, order details and the status of your ticket. Payment runs through the ticket shop. We do not see full payment details and we store no card or bank data.

If you are at the party: the scan of your ticket at the entrance, and camera footage in and around the venue. The camera surveillance and part of the photos at the entrance belong to Villa Thalia. The privacy statement of Villa Thalia applies to those.

3Why, and on what legal basis

• Answering your question and arranging your booking. Basis: performance of the contract or your request to that end.
• Access control at the door. Basis: performance of the contract.
• Safety of visitors and staff, including camera surveillance. Basis: legitimate interest.
• Preventing ticket abuse. Basis: legitimate interest.
• Sending event information to people who hold a ticket, for example a change of date or times. Basis: performance of the contract.
• Sending announcements about future editions of Cuba Libre to people who emailed us or bought a ticket. Basis: legitimate interest, within the exception for existing customers and contacts in the Dutch Telecommunications Act. It only covers our own parties, and every email has an unsubscribe link. You can also unsubscribe straight away through info@cubalibreparty.com.
• Visitor statistics for this website, so we know what works and what does not. Basis: consent, which you give through the cookie bar and can withdraw again in section 6.
• Measuring whether our ads on Facebook and Instagram work, and showing those ads to people who visited this site. Basis: consent, which you give through the cookie bar and can withdraw again in section 6.
• Our bookkeeping and tax obligations. Basis: legal obligation.

4How long we keep data

• Messages from the contact form: up to two years after the last contact.
• Ticket and booking data: up to seven years, because the Dutch tax authority requires this for our records.
• Camera footage: four weeks at most, unless an incident is on it. In that case we keep the footage for as long as the case runs.
• Email addresses on the mailing list for future editions: until you unsubscribe, or up to three years without you opening an email or buying a ticket. After that we take you off the list ourselves.
• Visitor statistics in Google Analytics: 14 months at most. Your choice in the cookie bar stays in your own browser for 180 days.
• Ad measurement at Meta: the Meta Pixel cookies stay in your browser for 90 days at most. Meta keeps the events themselves according to its own retention periods.

5Who we share data with

We do not sell your data. We only share it with parties that carry out something for us, and only what is needed for that:

• the ticket shop that handles the sale and the e-tickets;
• our hosting company and our email provider;
• the security company and the venue, for access and safety on site;
• Meta Platforms Ireland Limited, if you accepted the cookie bar, for measuring our ads (see section 6);
• our accountant;
• police or supervisory authorities, if the law obliges us to.

We have data processing agreements with these parties where those are needed. Data is in principle processed within the European Economic Area.

6Cookies and external services on this site

This website does not pass your data on to ad networks. We do measure visits and the effect of our own ads, and that only happens after you say yes to it yourself. If you choose Refuse, or choose nothing, nothing is placed and nothing goes to Google or Meta.

• Visitor statistics (Google Analytics 4). We measure how many people visit the site, which pages they look at, which channel they arrive through and whether they click a ticket button. On your first visit you see a bar at the bottom with Accept and Refuse. As long as you choose nothing, or choose Refuse, the statistics cookie stays off and Google only receives an anonymised signal without a cookie. If you choose Accept, Google Analytics places cookies that recognise you for two years at most. Ad personalisation is off and we do not use the data to identify you as a person. We keep the measurement data for 14 months at most. The processor is Google Ireland Limited, with which a data processing agreement applies. Google can also process data outside the European Economic Area, on the basis of the standard contractual clauses of the European Commission.
• Ad measurement (Meta Pixel and Conversions API). We advertise this party on Facebook and Instagram. To see which ad actually leads to a ticket click, and to be able to show visitors of this site an ad again, we use the Meta Pixel. It only loads if you click Accept. What is measured: the visit to the page, viewing the ticket block, the click through to the ticket shop and sending the contact form. Alongside the pixel in your browser we send the same event from our own server to Meta (the Conversions API), because the pixel is often blocked by an ad blocker. Both times it is the same event with the same identifier, so nothing is counted twice. What is sent along: your IP address, your browser type, the page you were on and the Meta cookies from your browser. If you fill in the contact form, we also send your email address, phone number and name, but encrypted only (SHA256). Meta can only compare those encrypted values with what it already holds; we never send readable data. Controller alongside us is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Meta can process data outside the European Economic Area on the basis of the standard contractual clauses of the European Commission. More about this in the privacy policy of Meta.
• Changing your choice. Your choice stays in the storage of your own browser for 180 days. Changed your mind? Open the cookie choice again. You can also erase the stored choice by deleting this site's data in your browser.
• Fonts. The Archivo typeface is loaded through Google Fonts. Google sees your IP address in the process.
• Video. The aftermovie only loads once you click the play button yourself, and then through youtube-nocookie.com. If you do not click, YouTube records nothing.
• Map. The directions button opens Google Maps in a new tab. From that moment the terms and the privacy policy of Google apply.
• Ticket shop. If you click a ticket button, you go to the ticket shop, which has its own privacy policy and its own cookies.

7Your rights

You may always ask us for access to your data, for correction, for erasure, for restriction of the processing, and for transfer of your data to yourself or to another party. You may also object to processing based on legitimate interest, and withdraw consent you have given.

Send your request to info@cubalibreparty.com. You get an answer within a month. We may ask you to identify yourself, so that we do not hand data to the wrong person.

If you and we cannot work it out, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) through autoriteitpersoonsgegevens.nl.

8Security

The site runs over a secure connection. Access to email and ticket data is limited to the people who need it for their work. If you think something is wrong with the security of our site or your data, email info@cubalibreparty.com. We respond within two working days.

9Photos by Villa Thalia

Villa Thalia also takes photos in the club, for its own promotion. If you are in one and you do not want that, email marketing@thepartygroup.nl. Put the date and the location where the photo was taken in your email and attach the photo itself. They will take it down as soon as they can.

If it is a photo or video of ours, email info@cubalibreparty.com.

10Minors

Cuba Libre is an event for ages 18 and over. We do not knowingly collect data from children. If you think we hold data on a minor, let us know and we will delete it.

11Changes

If anything changes in the way we handle data, we update this statement. The date at the top of the page shows when that last happened.

This statement exists in Dutch and in English. Where the texts differ, the Dutch text prevails.