Privacy Policy

1. Who we are

The controller for website visitors, leads and organizer accounts is the business named at the bottom of this page. Contact: info@latinario.com.

For data that organizers upload about their artists, staff and attendees, the organizer is the controller and we are the processor (see the DPA). Artists should contact the festival organizer first for those requests.

2. What we collect and why

• Early access / demo requests — name, organization, country, email, expected size and your message. Used to reply to you and offer the Service (legal basis: steps before a contract and our legitimate interest).
• Account data — name, email, login details and role. Used to provide and secure your account (contract).
• Festival data uploaded by organizers — e.g. artist contacts, travel, accommodation, passports and contracts, schedules and finances. Processed only on the organizer’s instructions.
• Security and audit logs — e.g. who viewed or downloaded a sensitive document and when. Used to protect data (legitimate interest and legal obligations).
• Emails — correspondence with info@latinario.com and notification emails we send.

3. Who we share it with

We do not sell personal data. We use service providers who process data on our behalf:

• Lovable — website and app hosting, database, login and transactional email (notify.latinario.com).
• Google Workspace — our business mailbox.

Some providers may process data outside the EEA; in that case transfers rely on safeguards recognized under the GDPR, such as Standard Contractual Clauses. We may also disclose data where the law requires it.

4. How long we keep it

• Sensitive festival documents: deleted automatically 30 days after the event’s end date.
• Leads who don’t become customers: up to 24 months after our last contact.
• Account and billing records: for the customer relationship and as long as tax law requires.

5. Security

Access is role-based, each festival’s data is separated from other organizers, sensitive document views are logged and previews are watermarked. No system is perfectly secure; we will notify affected customers and authorities of a personal data breach as the law requires.

6. Your rights

You can ask to access, correct, delete, restrict or port your data, and object to processing based on legitimate interest. Write to info@latinario.com; we answer within one month. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).

7. Cookies

See our Cookie Notice.