BILBAO PRIVACY POLICY

LAST UPDATED: JUNE 15, 2022

For the purposes of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ["GDPR"] and Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights ("LOPDPGDD") and its implementing regulations, you are informed that by accepting the accompanying check box, you expressly authorize your personal data, including those related to your image and voice, to be incorporated for strictly confidential processing in a file whose controller is Fundación Industrias Creativas. (hereinafter, "the company"), with Tax ID G01614494, whose address is located in Bilbao (Bizkaia), at Camino de la Ventosa, 46, 1º D, for the purpose of managing your participation and/or attendance at the BIME PRO event (hereinafter, "the event"), carrying out profile segmentation in order to improve and optimize the experience associated with such events, as well as to inform you of other products and services offered by the company and the rest of the companies in the LAST TOUR group detailed below.

The legal bases that legitimize the processing of your personal data are:

• Compliance with a contract and/or commercial relationship.
• The informed consent that you expressly, freely, and unequivocally grant us when you accept this PRIVACY POLICY by sending us the corresponding form.
• For compliance with various legal obligations that are mandatory for the company.
• Due to legitimate interest derived from all types of security reasons, improvement of our products and services, management of your information requests, complaints, and fraud management.

The data we request from you is adequate, relevant, and strictly necessary to carry out the purposes described. You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You also guarantee the authenticity, accuracy, and truthfulness of all the information you provide to us, committing to keep the data you provide updated so that it responds, at all times, to your real situation; you will also be solely responsible for false or inaccurate statements and for the damages they may cause.

We will retain the data as long as there is a contractual or commercial relationship with you, or as long as you do not exercise your right to deletion, cancellation, and/or limitation of data processing; after said retention period, the company will delete, destroy, block, or pseudonymize your personal data. In the case of blocking, your information will always be maintained without any use or processing, while such information may be necessary for the exercise of claims or some type of legal, legal, or contractual liability may derive from its processing that must be addressed and for which reason it is necessary to proceed with its recovery.

DATA TRANSFERS:

The data you provide may be transferred to the following companies of the LAST TOUR group for the correct management of the services indicated above, as well as to inform you of products and services that may be offered in the future:

LAST TOUR CONCERTS, S.L., LASTUR BOOKIN, S.L., MIDDLE GROUND, S.L., CULTURA ROCK, S.L., EVENTOS Y FESTIVALES SONIDO RURAL, S.L., LAST TOUR IBERIA, S.L., LAST TOUR EUROPA, S.L., ACTUACIONES MUSICALES 2020, A.I.E., OSO POLITA RECORDS, S.L., YUUKII RECORDS, S.L., IMCOM MEDIA, S.L., ARF VITORIA GASTEIZ, S.L, KALORAMA FESTIVAL UNIPESSOAL LDA, HOUSE OF FUN ENTERTAINMENT, LDA, LAST TOUR PORTUGAL, SOCIEDADE POR QUOTAS and LAST TOUR AMÉRICA, S.A.S. As well as to any other entity that replaces any of the above, and/or linked or integrated in the LAST TOUR group, and/or that is linked or integrated with it in the future.

If you pay by credit card, the data will be encrypted and transferred to our payment partners. Any personal data about you will only be used internally within the LAST TOUR group and will not be transferred to companies and third parties other than those expressed here, as applicable.

Finally, in the case of submitting a curriculum vitae for job applications, this will become part of a file owned by the company. The purpose of the file is personnel selection, and by spontaneously sending us this information, you are granting us your express consent for your data to be available in future hiring processes or personnel selection. In addition, this data may be transferred to LAST TOUR CONCERTS, S.L. and BALKBONE TOUR, S.L. for the same purpose, as well as to any other entity referred to in point 1 of this clause, and/or that replaces any of them, and/or that is linked or integrated in the LAST TOUR group, and/or that is linked or integrated with it in the future.

EXERCISE OF RIGHTS:

You may exercise the rights of access, rectification or deletion, limitation of processing, cancellation or opposition, as well as your right to portability, at the company, Camino de la Ventosa, 46, 1º D, CP 48013 in Bilbao, dpo@lasttour.org. You also have the right to file a complaint with the Spanish Data Protection Agency. The exercise of your rights contemplated in the data protection legislation may be carried out in the Basque, Spanish, and English languages.

SECURITY MEASURES:

In order to safeguard the security of your personal data, we inform you that the company has adopted all necessary technical and organizational measures to guarantee the computer security of the personal data provided, including (among others):

• The pseudonymization and encryption of personal data when appropriate.
• The ability to ensure the confidentiality, integrity, availability, and permanent resilience of processing systems and services.
• The ability to restore the availability and access to personal data quickly in the event of a physical or technical incident.
• A process of regular verification, evaluation, and assessment of the effectiveness of technical and organizational measures to ensure the security of processing.

BOGOTÁ PRIVACY POLICY

The objective of this Personal Data Processing Policy (hereinafter the "PDTP") is to develop and establish the terms and conditions with which LAST TOUR AMERICA S.A.S. (hereinafter "Last Tour"), as Data Controller, processes the Personal Data of Data Subjects. In harmony with the provisions of Article 15 of the Political Constitution of Colombia, Law 1266 of 2008, Law 1581 of 2012, Decree 1377 of 2013, Law 1266 of 2008, Decree 886 of 2014, Sole Decree 1074 of 2015, and all those regulations that regulate, add, repeal or modify them, this PDTP sets out the business policies with which Last Tour processes the Personal Data of Data Subjects, the purposes of Processing, the rights of Data Subjects, and the mechanisms available to Data Subjects to know, update, rectify, delete, and generally enforce their rights as Personal Data Subjects.

The Personal Data of Data Subjects will be processed with special observance of the principles of legality, purpose, freedom, truthfulness or quality, transparency, restricted access and circulation, security, and confidentiality.

Data Subjects, by authorizing the Processing of their Personal Data, fully accept this PDTP and its additions or modifications, which will be communicated to them through suitable means, in accordance with current regulations.

The information provided by Data Subjects will be used by virtue of the contractual relationship or link that arises with Last Tour and in accordance with the purposes indicated later in this PDTP. If the Personal Data provided is of a financial, credit, or commercial nature, it will be processed to carry out transactions arising from the contractual relationships that are generated. Furthermore, if Data Subjects provide information through the website https://bime.org/, Last Tour will use the information to send cookies to your hard drive, with the aim of providing a service according to the preferences of the Data Subject.

FIRST: DEFINITIONS

For the purposes of interpreting the terms of this PDTP, the following rules will be observed:

1. Terms with initial capital letters will have the meaning assigned to them.
2. Terms that denote the singular also include the plural and vice versa, whenever the context so requires.
3. Terms that are not expressly defined will be understood in the sense attributed to them by technical language, or in their natural sense, according to their general use.
4. References to applicable laws or legal provisions include all applicable laws or legal provisions added, extended, consolidated, modified, or replaced from time to time and to any order, regulation, instrument, or other provision made under them.
5. The titles and/or sections included in this Personal Data Processing Policy have been incorporated for convenience and will not be considered part of it nor will they limit the scope of the terms and provisions of it.
6. Any enumeration or relation of concepts where the disjunctive conjunction "or" exists should be understood to include some or all of the elements of such enumeration or relation. Likewise, any enumeration or relation of concepts where the copulative conjunction "and" exists should be understood to include each and every one of the elements of such enumeration or relation.

Without prejudice to the other definitions found in this PDTP, in accordance with current regulations, the following definitions will be used:

1. "Authorization": prior, express, and informed consent of the Data Subject for Last Tour to carry out the Processing of their Personal Data, which may be requested through different mechanisms and technical means and may be (i) in writing; (ii) orally; or (iii) through unequivocal behaviors of the Data Subject that reasonably allow for the conclusion that authorization was granted.
2. "Privacy Notice": verbal or written communication generated by the Controller, addressed to the Data Subject for the Processing of their personal data, through which they are informed about the existence of the PDTP, how to access the PDTP, and the purposes of the Processing that Last Tour will give to Personal Data, published in the Service Channels.
3. "Database": organized set of Personal Data that is subject to Processing by Last Tour.
4. "Personal Data": any information linked or that can be associated with one or several determined or determinable natural persons. Last Tour will process the Personal Data established in Section Six of this PDTP.
5. "Public Data": data that is not semi-private, private, or sensitive. Public Data is considered, among others, data relating to the name and surname, identification number, date of birth, marital status of people, their profession or trade, and their quality as a merchant or public servant. By their nature, Public Data may be contained, among others, in public records, public documents, gazettes and official bulletins, and duly executed judicial sentences that are not subject to reserve.
6. "Sensitive Data": those that affect the privacy of the Data Subject or whose improper use may generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership in unions, social organizations, human rights or that promote interests of any political party or that guarantee the rights and guarantees of opposition political parties, as well as data relating to health, sexual life, and biometric data.
7. "Data Processor": natural or legal person, public or private, who by themselves or in association with others, performs the Processing of personal data on behalf of the Data Controller.
8. "Data Controller": natural or legal person, public or private, who by themselves or in association with others, decides on the Database and/or the Processing of Personal Data, for the purposes of the PDTP, when referring to the Data Controller, it will refer to Last Tour.
9. "Data Subject": natural person whose Personal Data is subject to Processing. Data Subjects are defined in Section Six of this PDTP.
10. "Transfer": the transfer will take place when the Controller and/or Processor of personal data, sends the information or Personal Data to a recipient, who in turn is a Controller and is located inside or outside the country.
11. "Transmission": Processing of Personal Data that implies the communication of the same within or outside the territory of the Republic of Colombia when its purpose is the realization of Processing by the Data Processor on behalf of the Data Controller, that is, whose sender is the Data Controller and its recipient is the Data Processor.
12. "Processing": any operation or set of operations on personal data, such as collection, storage, use, circulation, or deletion that will be carried out only for the purposes established in this PDTP with prior Authorization from the Data Subject.

SECOND: SCOPE OF PERSONAL DATA AND SENSITIVE DATA PROCESSING

In the ordinary course of its business and management for the development of its corporate purpose, whether permanently or occasionally, Last Tour will process the Personal Data and Sensitive Data of Data Subjects and will carry out operations of collection, use, storage, circulation, deletion, Transmission or Transfer of Personal Data and Sensitive Data of Data Subjects and in general of any third party with whom it has some type of contractual relationship or link of any nature.

The express or unequivocal authorization of Data Subjects for the Processing of their Personal Data and/or Sensitive Data implies acceptance for the Processing of their Personal Data, which will be carried out in accordance with the provisions of this PDTP. In any case, this PDTP may NOT be interpreted in any way contrary to applicable laws and/or the rights that correspond to Data Subjects.

Likewise, the purposes, measures, and procedures established for the Processing of Personal Data of Data Subjects are established, as well as the mechanisms available to Data Subjects to know, update, rectify, delete, and generally enforce their rights as Personal Data holders.

Last Tour, as responsible for the processing of Personal Data, will make its best professional effort to maintain under adequate standards of quality, protection, and security of information, all Personal Data received from Data Subjects, especially Sensitive Data. Likewise, it will endeavor to ensure that the Personal Data and/or Sensitive Data collected have the necessary technical and legal protection to guarantee their security, integrity, access, and confidentiality. In that order of ideas, by authorizing the Processing of their Personal Data, Data Subjects expressly authorize Last Tour to store their Personal Data and/or Sensitive Data in the manner it deems pertinent and adequate and comply with the security required for the protection of Personal Data and Sensitive Data, according to normal and reasonable standards applicable to ticketing issuance and provision services for mass transportation, public shows, parks, and public and private recreation sites and other activities included in its corporate purpose.

THIRD: IDENTIFICATION OF THE DATA CONTROLLER

Last Tour is a company primarily dedicated to the issuance and provision of tickets for mass transportation, public shows, parks, and public and private recreation sites. This PDTP is of obligatory and strict compliance for Last Tour, whose information is as follows:

Corporate Name: LAST TOUR AMERICA S.A.S.

Tax ID: 901.470.694-5

You can contact Last Tour at:

• Address: Calle 84 # 15 – 45 Of 501, Bogotá, D.C.
• Phone: +57 3175670672
• Email: pqrs@diez.live
• Website: https://bime.org/

FOURTH: PERSON AND AREA RESPONSIBLE FOR HANDLING PETITIONS, CONSULTATIONS AND CLAIMS

The designated area arranged by Last Tour for handling petitions, consultations, and claims, and in general for Data Subjects to exercise their rights, will be the Customer Service Area. The person in charge will be the head of this area who can be contacted by Data Subjects or their successors for handling their consultations, claims, requests for rectification, updating, and deletion of their Personal Data, directly in Bogotá, through physical communication to Calle 84 # 15 – 45 Of 501, Bogotá, D.C., or through express request to the email pqrs@diez.live

FIFTH: SERVICE CHANNELS

Last Tour may carry out the operation of collecting Personal Data of Data Subjects in any of the following service channels:

1. Call Center – Telephone service center.
2. National network of points of sale.
3. Online sales through the website https://bime.org/
4. Directly at the administrative headquarters.

These service channels represent the ways in which Last Tour collects Personal Data from Data Subjects (1, 2, 3, and 4 hereinafter as the "Service Channels").

SIXTH: DATA SUBJECTS AND PERSONAL DATA SUBJECT TO PROCESSING

Last Tour will process the Personal Data of the following persons (for all purposes of this PDTP they will be referred to as Data Subjects):

1. Clients – Buyers or promoters.
2. Employees – Active or inactive collaborators.
3. Former employees.
4. Pensioners.
5. SENA apprentices.
6. Job vacancy applicants.
7. People in selection processes.
8. Family members of employees or former employees, such as their spouse, permanent partner, or children.
9. Mission workers.
10. Suppliers.
11. Contractors.
12. Inactive practice personnel.
13. Third parties with commercial relationships.
14. Representatives of public entities.
15. Representatives of the competition.
16. Business allies.
17. Partners.

By voluntarily providing their Personal Data and/or Sensitive Data in the manner indicated in this PDTP and in the express, verbal, written authorization or through unequivocal behaviors, Data Subjects expressly or unequivocally authorize Last Tour to process their Personal Data and/or Sensitive Data and any other information they provide, in accordance with this PDTP, the law, and for the purposes established in this PDTP (Section Seven) or any additional purpose authorized by the Data Subjects.

In general, Last Tour may collect:

1. Location data

Physical location of the Data Subject, such as residential address, domicile, address, and name of the company where they work, among others.

2. Contact and communication data

Telephone and cell phone numbers, as well as email address and identification on social networks.

3. Labor data

Information of a labor and academic nature, which allows accrediting the experience and training of its Data Subject.

4. Registration data

In cases of browsing the website https://bime.org/, certain information will be stored automatically, including search queries made, IP address of internet users, system activity, computer failures, browser type, specifications that characterize requests, etc.

5. Sensitive Data

Last Tour may carry out the Processing of biometric data, such as fingerprints or images (understood as figure, total or partial physiognomy of the Data Subject's body) of the Data Subjects. Sensitive Data, in relation to the Processing that Last Tour may carry out, will be those unique traits of the Data Subjects that individualize them against other people. Sensitive Data will be used for the purposes of: (a) identifying the Data Subject when making purchases at points of sale; (b) surveillance and security reasons at the administrative headquarters or points of sale of Last Tour.

Last Tour informs the Data Subjects of Sensitive Data that providing sensitive information is merely optional and they are not obliged to provide information related to their Sensitive Data.

The Authorization of Data Subjects for the Processing of their Personal Data will be granted by: (a) the Data Subjects, who must prove their identity through the means in which Last Tour requests them; b) the successors or guardians of the Data Subject, who must prove their quality as successors of the Data Subject; and c) the representative and/or attorney of the Data Subject, after accreditation of the representation or power of attorney; and d) another in favor of or for which the Data Subject has stipulated.

Data Subjects who provide their Personal Data or Sensitive Data in any of the Service Channels, authorize Last Tour to process their Personal Data and/or Sensitive Data. Last Tour may carry out the Processing of:

1. If they are clients, prospects, or business allies, of any nature, in any of the Service Channels:

• Name.
• Address.
• Fixed line telephone number.
• Mobile line telephone number.
• Email address
• Date of birth.
• Preferences registered in Vive Last Tour.
• Fingerprint.
• Image.

2. If they are employees, former employees, pensioners, interns, SENA apprentices, applicants, mission workers, suppliers, contractors, active or inactive collaborators, job vacancy applicants, third parties with labor or commercial relationship, students, practice personnel, Family members of employees or former employees, such as their spouse, permanent partner or children, third parties with labor or commercial relationship, or business allies, in any of the Service Channels:

• Name.
• Address.
• Fixed line telephone number.
• Mobile line telephone number.
• Email address
• Date of birth.
• Professional background.
• Labor background.
• Fingerprint.
• Image.

3. If they are representatives of public entities or representatives of the competition, in any of the Service Channels:

• Name.
• Address.
• Fixed line telephone number.
• Mobile line telephone number.
• Email address
• Date of birth.
• Fingerprint.
• Image.

The Authorization may be contained in a physical, electronic document, in any other format that allows guaranteeing its subsequent consultation, or through a suitable technical or technological mechanism by which it can be concluded unequivocally that, had it not been for a conduct of the Data Subject, the Personal Data would never have been captured and stored in the Database.

Last Tour will adopt the necessary measures to maintain records or suitable technical or technological mechanisms of when and how it obtained authorization from the Data Subjects.

SEVENTH: PURPOSES OF PROCESSING

The Personal Data and Sensitive Data collected by Last Tour have as a general purpose:

1. carry out the pertinent procedures for the development of its corporate purpose in what has to do with the fulfillment of the object of the contract celebrated with the Data Subject; (b) compliance with current regulations; (c) educational and academic purposes; (d) establish communication with Data Subjects for any purpose related to the purposes established in this PDTP, whether through calls, text messages, emails and/or physical; (f) sending information about products or services marketed by Last Tour, as well as, news, publications and promotions of its own or third parties, invitations to events and offering new products and services; (g) send information about its own and third-party programs; (h) conduct studies or scientific research for academic or commercial use; (i) either directly or through third parties: consult, carry out administrative procedures, send commercial information, request completion of surveys, collect, store, use, circulate, delete, process, contact, survey, compile, exchange, publish, audit, update and/or dispose of the Personal Data that the Data Subjects provide to incorporate them into the different Databases of Last Tour; (j) manage requests, complaints or claims.

The specific purposes, depending on the relationship with each Data Subject, for which Last Tour will process the Personal Data of the Data Subjects, are:

1. Inform Data Subjects about news, news, promotions of their own and/or third parties; specify, analyze and optimize existing and future products and services, own and/or third parties; report information on credit risks and control and prevention of money laundering; carry out archiving, updating, storage and processing activities, directly or through third parties with whom they contract for this purpose; promote and market own and/or third-party products and services.
2. Identify ways in which Last Tour can offer you better service, such as providing you with information about products and services more effectively.
3. Processing and administration of transactions as a client or member of Vive Last Tour, also establishing a communication channel to inform you of the news that may occur with respect to the products and services offered, such as cancellation of events, change of dates, change of programming, etc.
4. Offer Data Subjects products and services, prepare marketing, market segmentation and statistical studies and know their consumption habits, tastes and preferences in order to offer them those products that are suitable for Data Subjects; send them promotions, advertising and discount coupons for products or services, as well as those products of the companies with which Las Tour has a corporate relationship; and invite you to participate in contests or sweepstakes and activities.
5. Marketing and research.
6. Offer you the products you have requested as a customer.
7. Provide you with a range of products and services offered by Last Tour.
8. Comply with the obligations contracted by Last Tour with Data Subjects, in relation to the payment of salaries, social benefits and other remuneration enshrined in the employment contract.
9. Offer corporate welfare programs and carry out business activities, for the Data Subject and their beneficiaries, such as children, spouse or permanent partner)
10. Send to the address registered at the time of choosing the shipping method the commercial products and services.
11. Transfer Personal Data or Sensitive Data to third parties with whom there is a data processing contract, or whose contractual purpose requires the transfer of Personal Data.
12. Transfer Personal Data to third parties or service providers necessary for Last Tour to develop its corporate purpose.
13. Transfer to third parties that provide operation services of Last Tour's computer systems, to send physical mail or emails or to companies that perform data analysis, to generate marketing strategies, segmentation of demographic groups and other information of the Data Subjects that allow them to be characterized demographically according to their "genres of interest".
14. Transfer to third parties that administer, operate or own venues or scenarios where events are held, for which Data Subjects buy tickets with the purpose of offering promotional material about upcoming events.
15. Transfer Personal Data to third parties with which Last Tour has contractual relationships and that is necessary for the fulfillment of the contracted object, such as the transfer to the promoter or promoters of the events for which the Data Subject acquired tickets so that they, as controllers of the processing, process the Personal Data.
16. Offer Data Subjects the products and services of Last Tour (including, to process your online purchases), to contact them in the case of an event cancellation, or a change of venue, and for marketing purposes.

Last Tour does not verify, nor assumes the obligation to verify the identity of who provides their Personal Data or Sensitive Data, nor the validity, sufficiency and authenticity of the Personal Data or Sensitive Data that the Data Subject provides about himself, therefore, Last Tour has no responsibility whatsoever for damages and prejudices of any nature that could be generated by the lack of truthfulness, validity, sufficiency or authenticity of the information provided. This includes damages and prejudices that may be generated by the impersonation of a third party. This PDTP applies to any processing of Personal Data and/or Sensitive Data collected in any of the Service Channels.

Among the Personal Data collected by Last Tour are those relating to the interests and preferences of Data Subjects, as well as that relating to the browser used and the devices implemented to navigate the web. According to the stated purposes, Personal Data may be made available to the personnel in charge of the corresponding work at Last Tour.

EIGHTH: EXCEPTIONS TO AUTHORIZATION FOR PERSONAL DATA PROCESSING

Last Tour will not require authorization from Data Subjects for the Processing of Personal Data in the following cases:

• (a) When the information is requested from Last Tour by a public or administrative entity that is acting in exercise of its legal functions or by judicial order;
• (b) When dealing with data of a public nature because these are not protected by the scope of application of the rule;
• (c) Events of medical or health emergency duly proven;
• (d) In those events where the information is authorized by law to comply with historical, statistical and scientific purposes;
• (e) When dealing with data related to the civil registry of people because this information is not considered to be of a private nature.

Likewise, Last Tour may provide information without the need for authorization from the Personal Data subjects in the following cases:

• (a) To the data subjects, their heirs or representatives at any time and through any means when they so request Last Tour;
• (b) To judicial or administrative entities in the exercise of functions that make some requirement to the company for the information to be delivered to them;
• (c) To third parties who are authorized by some law of the Republic of Colombia; and
• (d) To third parties to whom the Data Subject expressly authorizes to deliver the information and whose Authorization is delivered to Last Tour.

NINTH: RIGHTS OF DATA SUBJECTS

The rights of Data Subjects referred to in this Personal Data Processing Policy are contained in Law 1581 of 2012 and Decree 1377 of 2013. In particular, the rights of Data Subjects as established in article 8 of Law 1581 of 2012 are:

1. Know, update and rectify their personal data before Last Tour, as Data Controller or Data Processors.
2. Request proof of the authorization granted to Last Tour, as Data Controller, except when expressly exempted as a requirement for Processing, in accordance with the provisions of article 10 of Law 1581 of 2012.
3. Be informed by Last Tour, as Data Controller or the Data Processor, upon request, regarding the use that has been given to their Personal Data.
4. Submit complaints to the Superintendence of Industry and Commerce for infractions of the provisions of current regulations.
5. Revoke the Authorization and/or request the deletion of Personal Data when the Processing does not respect constitutional and legal principles, rights and guarantees. The revocation and/or deletion will proceed when the Superintendence of Industry and Commerce has determined that in the Processing, Last Tour or the Data Processor, incurred in conducts contrary to the law or the Constitution.
6. Refrain from answering questions about Sensitive Data. Last Tour is transparent with Data Subjects and informs them that the delivery of Sensitive Data will be optional, as well as refraining from giving answers that deal with data of children and adolescents.
7. Access free of charge to their Personal Data that have been processed by Last Tour.

Data Subjects may, at any time, access the Personal Data stored by Last Tour and the details of the Processing, as well as rectify them if they are inaccurate or incomplete, and delete them when they consider that they are not required for any of the purposes indicated in this PDTP, when they are being used for unauthorized purposes, or simply oppose the Processing.

TENTH: DATABASE SECURITY

The security measures that Last Tour has seek to protect the Personal Data of Data Subjects, in order to prevent their adulteration, loss, unauthorized uses and access. For this, Last Tour, diligently implements administrative, legal and technical protection measures that are reasonably within its reach. Data Subjects expressly accept this form of protection and declare that they consider it convenient and sufficient for all purposes.

Similarly, third parties contracted by Last Tour are obliged to adhere to and comply with the information security policies and manuals, as well as the security protocols that Last Tour applies to all its processes.

Any Last Tour contract with third parties (contractors, external consultants, temporary collaborators, etc.) that involves Processing, includes a confidentiality agreement that details their commitments for the protection, care, security and preservation of the confidentiality, integrity and privacy of it.

Last Tour protects Personal Data, in proprietary data format, which can only be read with proprietary tools. In storing information, Last Tour has taken a series of measures to protect Personal Data from misuse, loss, unauthorized access, modification or disclosure. Personal Data collected online is stored in a Microsoft SQL Server database, a secure data protection center that cannot be accessed via the Internet.

Last Tour encrypts the data sent from the Data Subject's computer to its systems during Internet transactions and the Data Subject's access through networks.

Last Tour also employs firewalls, intrusion detection systems and virus detection tools to protect Personal Data from unauthorized access or viruses. In addition, Last Tour takes reasonable measures to definitively destroy Personal Data when it is no longer needed. It also imposes strict security and confidentiality requirements on all third parties as to how to store and handle Databases.

ELEVENTH: HANDLING OF PETITIONS, CONSULTATIONS AND CLAIMS

For the filing and attention of your petition, consultation or claim, the Data Subject must provide the following information:

1. Full name and surnames.
2. Physical address.
3. Email.
4. Telephone number (fixed line).
5. Mobile number.
6. Means to receive response to your request.
7. Reason(s)/fact(s) giving rise to the claim with a brief description of the right you wish to exercise (know, update, rectify, request proof of the authorization granted, revoke, delete, access information).
8. Signature (if applicable) and identification number.

In case the Data Subject acts through a representative, the documents that accredit the identity and capacity of their representative.

Data Subjects may present their petitions, consultations and claims, in any of the following channels:

1. Go from 08:00 to 5:00, Monday to Friday, to the administrative headquarters, where you can present it directly to the area in charge, at the address: Calle 84 # 15 – 45 Of 50.
2. By sending a written communication to the address: Calle 84 # 15 – 45 Of 501 in the city of Bogotá, D.C.
3. By telephone call to the number: +57 3175670672
4. By email to the address: pqrs@diez.live

Data Subjects or their successors may exercise their rights or submit petitions, consultations or claims in accordance with the procedures established in this Section. The petition, consultation or claim will be attended within a maximum term of fifteen (15) business days counted from the date of receipt. When it is not possible to attend the consultation within said term, the interested party will be informed, expressing the reasons for the delay and indicating the date on which their consultation will be attended, which in no case may exceed eight (8) business days following the expiration of the first term.

The Data Subject or their successors who intend to exercise their rights such as the correction, updating or deletion of their Personal Data that are subject to Processing by Last Tour, may submit their request, in accordance with the procedure established in this Section. Last Tour will attend to any request within the maximum term provided by law of fifteen (15) business days, counted from the day following the date of its receipt. When it is not possible to attend to the claim within said term, the interested party will be informed of the reasons for the delay and the date on which their claim will be attended, which in no case may exceed eight (8) business days following the expiration of the first term.

For more information about your privacy and consumer protection visit: www.sic.gov.co. If Last Tour totally or partially prevents the exercise of the right by the Data Subject, they may go to the Delegation for Personal Data Protection of the Superintendence of Industry and Commerce.

TWELFTH: NEW USES

Last Tour may request authorization for the use or circulation of Personal Data of Data Subjects or other type of information, for purposes different from those expressed in this PDTP, for which it will publish in any public medium that it deems convenient as the case may be.

THIRTEENTH: PERSONAL DATA OF CHILDREN AND ADOLESCENTS

When Personal Data of children and adolescents is obtained, Authorization will be obtained from the parents or guardian of the minor.

FOURTEENTH: TEMPORALITY

Last Tour will use, process, and store the collected Personal Data and Sensitive Data until it fulfills its purposes, which in any case will not be less than 80 years, and this is the scope of the authorization granted by the Data Subjects.

FIFTEENTH: MODIFICATIONS

Without prejudice to constitutional rights and applicable legal and regulatory provisions, especially those contained in Law 1581 of 2012, and Decree 1377 of 2013, Last Tour may modify this PTDP at any time. Such modifications will be informed to the Data Subjects through any other directed or non-directed mass dissemination mechanism.

SIXTEENTH: INTELLECTUAL PROPERTY 

Databases, or different types of electronic repositories, are intellectual creations subject to copyright protection. Last Tour is the owner of the Databases it uses, for which it fully complies with the regulations on Personal Data protection and habeas data contained in Law 1581 of 2012, Decree 1377 of 2013, Law 1266 of 2008, Decree 886 of 2014 and the Unified Decree 1074 of 2015 and other regulations that modify or complement them. Consequently, Last Tour, as the rights holder over the Databases, is the only one with the authority to authorize the use, reproduction, or disposal of them to third parties.

SEVENTEENTH: VALIDITY 

Last Tour reserves the right to modify this PTDP at any time, which is why we invite you to regularly or periodically consult our website https://bime.org/, through which the latest version of this PTDP will be kept available to you. However, pursuant to the provisions of article 5 of Decree 1377 of 2013, when substantial changes are made to the PTDP, referring to the identification of the responsible party and the purpose of the Processing, which affect the content of the authorization, it will be necessary to communicate these changes to the Data Subject and Last Tour will obtain a new authorization from the Data Subject. The data provided will be used for the period necessary to fulfill the uses and purposes described in this Processing Policy and in the Terms and Conditions of the Platform.

1. OWNERSHIP
2. SERVICE DESCRIPTION
3. ACCESS CONDITIONS TO THE BIME PLATFORM
4. GENERAL ENTRY CONDITIONS
5. CODE OF ETHICS
6. RESPONSIBILITIES
7. INTELLECTUAL PROPERTY
8. PRIVACY POLICY AND PERSONAL DATA
9. MODIFICATION AND DURATION OF LEGAL NOTICE
10. APPLICABLE LEGISLATION AND JURISDICTION

1.OWNERSHIP

In accordance with the provisions of Art. 10.1 of Law 34/2002 of July 11, on information society services and electronic commerce, it is hereby stated that the owner of the Website is LastTour.

These conditions contain the general regulation of the services provided by LastTour through the website https://bime.org, which constitute an agreement between LastTour, owner of the BIME service, and the User or Client (hereinafter, the "USER").

By accessing and using any part of the service, the USER accepts to be bound by these general conditions, as well as all modifications made to them to adapt them to new versions of the software.

LastTour reserves the right to modify the configuration of the Website, access to the services and products offered, as well as the general conditions for the use of the Portal.

2.SERVICE DESCRIPTION

LastTour offers, through the BIME platform (https://bime.org), information about BIME, an international Music Industry event held in Bilbao (Basque Country) and Bogotá (Colombia), as well as how to access the event. Likewise, this platform offers a constellation of content and services: a collection of multimedia resources, news, and the Music Industry Map are some examples of the available utilities.

It is not necessary to register on https://bime.org to purchase tickets or to visit certain pages of the platform. However, it will be necessary to access certain services and content and to actively participate in the platform.

3.ACCESS CONDITIONS

3.1 Access requirements

To create a user account on https://bime.org you must be at least 18 years old. By registering, you declare that you meet this requirement and are able to understand and accept the access conditions and the code of ethics. LastTour may request documentation (such as ID) at any time to verify your age. Otherwise, we reserve the right to block your account.

Note: If it is found that a person under 18 years of age is registered as a user, their profile will be deleted or blocked.

You must choose access keys (username and password), and you will be responsible for their use. LastTour is not responsible for misuse by third parties.

We reserve the right to restrict usernames that violate third-party rights or are offensive.

3.2 Registration procedure. Registration on the BIME platform

To sign up, you can register by invitation or by accessing the "Register" link. Personal and access data will be requested.

By registering you accept:

• To provide truthful, accurate, and up-to-date information.
• To promptly update such information.

If inconsistencies are detected, your account may be suspended. The processing of personal data is governed by our Privacy Policy.

Note: To purchase tickets, it is not mandatory to register on https://bime.org. You can do so through the "Tickets" link, which redirects to the corresponding gateway.

You can unsubscribe through the means provided by LastTour.

3.3 Unsubscribe procedure from the BIME platform

You can cancel your account by writing to pro@bime.org. By doing so, your profile will be deleted along with the associated information.

LastTour may interrupt access or services at any time without prior notice. By accepting these conditions, you accept this possibility.

We are not responsible to the user or third parties for the suspension or modification of access.

4.GENERAL ENTRY CONDITIONS (BIME EVENT)

4.1 Identification of the Promoter

Name: Fundación Industrias Creativas (hereinafter, "the company").
CIF: G01614494
Address: Camino de la Ventosa, 46, 1º D, CP 48013, Bilbao (Bizkaia)
Phone: 944 15 45 51
Email: sales@lasttour.org

The sale of tickets is understood to be carried out at the company's registered office. The purchase implies the acceptance of these general conditions (without prejudice to others applicable if the sale is made through another platform or entity).

4.3 Access to the venue

4.3.1. Access to the venue will be made upon display of the ticket or voucher, which will be scanned for verification. The ticket or voucher may be exchanged for a wristband, card, or other access mechanism, medium, or system. For the delivery of the access system, in addition to the ticket, the ID (or equivalent identification document) will be required. Only one access system per person will be delivered. This mechanism will in no case be delivered without being placed on the user's wrist by the organization's staff.

• Access to the festival will only be made after reading the ticket or voucher and/or displaying the corresponding access system.
• For access to the venue, in addition to the ticket or access system, the display of ID (or equivalent identification document) will also be necessary. This document must also be displayed, if requested, inside the venue by the organizer or security personnel.
• The ticket and/or access system must be kept in perfect condition, without any type of deterioration, in order to access the venue. Furthermore, if at any time during the duration of the event it is detected that a user does not have the ticket, voucher and/or access system, said user may be required by security personnel to prove the access system used and, in case of not doing so, and/or if the access system is not valid and/or correct, they may be expelled from the venue.
• The access system is personal and non-transferable.
• Information will be provided, where appropriate, about the spaces and schedules for exchanging the ticket for the corresponding access system, through the website, social networks and/or usual communication media associated with the event.
• Access to the venue will not be allowed after 3:00 AM or after the time determined for each specific event. Once this time has passed, no new access will be allowed, and any exit will not allow return if the same is attempted after the indicated time.

4.3.2. Without prejudice to the above, in the event that some cashless payment mechanism is used, linked or not to the access system, the access and/or payment system must be preserved, as well as all the data and information associated with it, in order to return the amounts that, where appropriate, correspond.

4.3.3. Having reserved the right of admission, access to the venue will be prevented and denied, or users will be expelled from it, if any of the following circumstances occur:

• The user lacks an access system.
• The access system is incomplete, amended, damaged, deteriorated, broken and/or with signs of forgery.
• The user shows a violent, annoying attitude or that publicly incites hatred, violence, or discrimination based on birth, race, sex, religion, opinion, disability, sexual orientation, gender identity or any other social and/or personal condition or circumstance, and, especially, the bearer who behaves aggressively, violently, disruptively and/or causes disturbances outside, at the entrance and/or inside, who carries weapons or objects that may be used as such and who wears clothes, objects and/or symbols that incite violence or constitute an apology for activities contrary to the fundamental rights recognized in law and the Constitution.
• The user shows symptoms of drunkenness, intoxication (apparent or potential) and/or of consuming or having consumed drugs and/or narcotic substances.
• The exercise of the right of admission will not, in any case, entail the denial of access for reasons of birth, race, sex, religion, opinion, disability, sexual orientation, gender identity and/or any other personal or social circumstance or condition.
• In case it can reasonably be presumed that a situation of risk or danger will be created for the user themselves or other attendees.
• Access may be denied or users may be expelled from the venue, in case of non-compliance with the instructions of the organization's staff as well as those responsible for control, surveillance, and security of the event.
• There is a breach of the requirements related to the access of minors.

4.3.4. At the entrance to the venue, the public may be subject to and/or undergo a search according to the Law. The entry of objects that may be considered dangerous by those responsible for access control and security of the event or are prohibited by current regulations is not allowed.

• For security reasons, it will not be allowed to enter the venue with motorcycle helmets, suitcases, bags and/or backpacks of large dimensions. It will be possible to access the venue with smaller items, such as small bags or backpacks (without prejudice to the examination and registration of the same, in accordance with what is indicated in the preceding paragraph). Other objects with which it is not allowed to access the venue, without being exhaustive, are: bottles, cans, laser pointers, professional photo or video equipment, drones and/or weapons of any kind.

4.3.5. Access to the venue with food and/or beverages from outside will not be allowed. Without prejudice to the above, in the event that any user has special needs, for health reasons or other similar ones, they must justify it previously to the organization, so that it can give them the corresponding instructions.

4.3.6. Drinking water will be available to users free of charge.

4.3.7. In any case, users will be personally responsible for their own actions, as well as for the consequences that could derive from them.

4.4 GENERAL TICKET CONDITIONS

The acquisition of the ticket implies the acceptance of the following conditions:

4.4.1. Once the ticket has been purchased, it will only be changed or its amount refunded in case of cancellation of the event. In all other cases, refunds will not be accepted (including installment sales).

• In case of cancellation, the purchaser may request a refund within a period not exceeding 15 calendar days from the date of the public communication of the cancellation, in the manner specified. For these purposes, cancellation shall be considered to be the suspension of more than half of the program, either before the start of the event or once it has started.
• In no case will the organization refund the distribution cost that could be applied by the sales channels through which the tickets are marketed, given that the organization is not, in any way, a provider of the service through the sales channel, nor a recipient of said amount.
• The amount of the ticket will not be refunded in case of cancellation of the event due to bad weather conditions, natural disasters, closure of Spanish airspace or other causes of force majeure or similar reasons.

4.4.2. The organization reserves the right to alter or modify the program (both its content and its order).

4.4.3. The organization does not guarantee the authenticity of the ticket if it has not been purchased at the official points of sale. The festival organization assumes no responsibility in case of loss or theft of the ticket. The ticket must be kept by the user until the day of the event. The beneficiary of the ticket or the person in whose name the ticket is personalized, assumes all responsibility in case their ticket is presented in duplicate, photocopied and/or falsified, losing all the rights that it grants them to access the event. Only the first ticket presented and its code validated will be valid. Any ticket with the same code, which is presented later, will be totally invalid.

4.4.4. Ticket resale is not allowed.

4.4.5. The possession of the ticket and/or the corresponding access system does not give the user, holder and/or third parties the right to use it and/or its content for advertising, marketing or promotional purposes (including contests, gifts and/or draws).

• In the case of events not promoted by the company, the rules established by the promoter/organizer of the corresponding event will apply, who will be the sole holder of rights and obligations in relation to it.

4.5MINORS

4.5.1. Minors under 16 years of age will not be allowed access to the venue, unless they are accompanied by their parents, guardians or legally responsible persons.

• The companion or companions of the minor must present, for access to the venue, as well as at any time when they are required to do so inside it, an ID and family book or legal document that accredits the relationship with the minor, and previously, fill out the following form: authorization.
• In the case of foreigners, they must provide the appropriate documents from their country of origin, equivalent to the above.
• In the event that the companion is neither the father, nor the mother, nor the guardian or legal responsible for the minor, they must present the following authorization signed by the father, mother, guardian or legal responsible, together with a photocopy of the ID of the father, mother, guardian or legal responsible and family book.
• During their stay at the venue, parents or legal guardians will be responsible for any action that the minor performs, as well as for any consequences derived from them. On the other hand, the father, mother or legal guardian must sign a discharge document whereby they take responsibility for the minor while they are inside the venue.
• 4.5.2. In addition to the corresponding documents, parents or legal guardians, as well as the minor, must have purchased the corresponding ticket and have a valid access system.
• Without prejudice to what is stated in the preceding paragraphs, minors under the age determined for each specific event may access the event/venue for free.

4.5.3. Current legislation expressly prohibits the sale of alcohol and tobacco to minors under 18 years of age, so it will not be possible for minors of that age to buy alcohol or tobacco. The minor must carry their ID at all times.

4.5.4. Failure to comply with the above requirements will result in expulsion from the venue without the right to any refund of the price paid for the ticket.

4.6IMAGE

For the purposes of the provisions of Organic Law 1/1982, of May 5, on civil protection of the right to honor, personal and family privacy and one's own image, you are informed that your access to the venue and attendance at the event implies consent and express authorization for the capture, reproduction, distribution and publication of your image, including for promotional, advertising and/or commercial purposes, and through any medium, including electronic media. Participants assign the rights to their own image, derived from their attendance at the event, for the creation of audiovisual materials in any type of support (including electronic media) and for their use, exploitation and dissemination by any procedure of technical reproduction or system of exploitation of image and sound. This assignment is made free of charge and without time or territorial limitation, in favor of the promoter and the companies of the LAST TOUR group, and in favor of the media and press authorized at the event.

4.7 PROHIBITION OF TAKING PHOTOGRAPHS, FILMING AND RECORDINGS

• All image and intellectual and industrial property rights relating to the content of the event, as well as to the participants and attendees, are reserved.
• Taking photographs, as well as making films and/or audiovisual recordings inside the venue, and/or of the content of the event, of the participants in it and of its attendees, is prohibited, except with express authorization.
• Without prejudice to the above, the exploitation of any eventual photograph, film or audiovisual recording of the interior of the venue and/or of the content of the event, including that of the participants and attendees, is also prohibited.

4.8 INTELLECTUAL AND INDUSTRIAL PROPERTY

The entire content and elements that make up the ticket, the access system, as well as any document and/or element prior to the delivery of the above, necessary for their acquisition, and/or associated with them (that is, both the texts and the graphic elements linked to it -design, source code, brands, logos, photographs, buttons, color combinations, and in general any element that constitutes a novel intellectual creation- as well as its presentation, structure, ordering, configuration, and assembly), are the exclusive property or are licensed to the owner, and are protected by Royal Legislative Decree 1/1996, of April 12, which approves the consolidated text of the Intellectual Property Law. The above may not be exploited, reproduced, distributed, modified, publicly communicated, assigned or transformed, unless there is express authorization from the indicated owner or owners of the rights. The acquisition and/or possession of the ticket and/or access system does not grant users any prerogative, nor any ownership over the intellectual or industrial property rights relating to the elements included in it.

5.CODE OF ETHICS

The following code constitutes the framework for the proper use of the BIME platform. This code of ethics includes the rules of coexistence within the network that favor a positive environment for the exchange of work, opinions and values.

Its main objective is to establish guidelines that allow maximum protection of privacy, rights that are recognized by law and the global experience of the network, being a complement to the access conditions.

If you detect any violation by a third party of the network rules, you can inform us by sending an email to pro@bime.org

At BIME we favor the exchange of knowledge freely and without any type of initial restriction. However, there are legal and contractual limitations regarding content and behavior between users.

5.1 User identity

You must provide us with true data when creating your profile and not lie to us about your age. As you know, in accordance with the provisions of the access conditions, minors under 18 years of age should not access the Website.

5.2 Contents

In accordance with the provisions of the access and use conditions, you must not exchange, share, store or favor, through our network, materials, opinions or comments that violate legal regulations and customs.

5.3 Invitations to the platform

Platform administrators may invite the people they deem appropriate to be a member of it. If the administrators believe that the rules of the community have been violated by any of the invited people, they can suspend or cancel both profiles to safeguard the general interests and the integrity of the BIME platform.

5.4 Community uses

The invitation and use of the different spaces and communities managed by the BIME platform cannot be used for commercial purposes, unless LastTour expressly allows it.

5.5 Acts not allowed

It is prohibited, and therefore will be your exclusive responsibility, to access or use the Service for illegal or unauthorized purposes. More specifically, and without the following list being absolute, it is prohibited to:

• Defame, harass, intimidate or threaten other users of the BIME platform or third parties outside it.
• Use personal and intimate data from other people for purposes other than those determined by the environment of the community to which you belong.
• Use the network as a tool for exchanging materials or information that are obscene, illicit, libelous, immoral and/or inappropriate.
• Exchange materials that according to the intellectual property law belong to a third party without their consent. Similarly, you may not remove legal notices about copyright, trademarks or other related rights.
• Use the Website as a virus spreader, spam sending, malicious programs, as well as files and/or programs that interrupt, damage or limit the operability of the network itself or any software, hardware or telecommunications equipment. Similarly, you will not perform any action that may damage, overload or deteriorate the BIME platform.
• Create an account with a false identity or by usurping the identity of another person or entity.
• Use any tool or service of the Website as an instrument to publish, repeat or duplicate system and/or automatically content.

The performance of any of the above behaviors on your part will allow LastTour, depending on the severity and according to its criteria, to suspend or cancel your profile immediately and, where appropriate, remove content in profiles that violate this list of acts not allowed.

If necessary, in application of the provisions of the previous paragraph, LastTour will automatically suspend or cancel your profile. Such an act would not give you the right to any compensation. For all these purposes, we inform you that LastTour may inform and collaborate appropriately with the competent police and judicial authorities if it detects any infringement of current legislation or if it suspects a crime.

Finally, we want to remind you that LastTour is not responsible for the opinions, declarations, manifestations and comments that you make from the different tools that we make available to you on this platform, the holder of the access keys to the network being directly responsible.

6.RESPONSIBILITIES

Both access to the web, as well as the use that may be made of the information contained therein are the exclusive responsibility of whoever performs it. LastTour will not be responsible for any consequence, damage or harm that could arise from said access or use of information, with the exception of all those actions that result from the application of legal provisions to which it must submit in the strict exercise of its powers.

Specifically, LastTour is not responsible for the opinions, declarations, manifestations and comments that you make from the different tools that we make available to you in this social network, the holder of the access keys to the platform being directly responsible.

To achieve the purposes for which the platform has been created, it is prohibited to use user profiles for acts that are considered illegal or unauthorized, that are an attack on other users, fraudulent, defamatory or that breach our code of ethics.

LastTour reserves the right to deactivate usernames and accounts that have been inactive for more than 6 months.

LastTour assumes no responsibility derived from the connection or content of third-party links referred to on the website. In this sense, on the BIME platform, the user may find links that will lead them to web pages, materials or sites on the web not managed by LastTour and over which it has no control, not being responsible for the content, services or products offered from them, the veracity of the information that third parties offer or any other type of content that is offered.

7.INTELLECTUAL PROPERTY

LastTour is the owner or has the corresponding license to use the exploitation rights of intellectual and industrial property of the Website, as well as the content available through it. In no case, shall it be understood that the fact of allowing users access to the Website implies a waiver, transmission, license or assignment, in whole or in part, of such rights, by LastTour. It is prohibited to modify, copy, reuse, exploit, reproduce, publicly communicate, make second or subsequent publications, upload files, send by mail, transmit, use, process or distribute in any way all or part of the content included in this Website for public or commercial purposes if you do not have the express written authorization of LastTour.

8.PRIVACY POLICY AND PERSONAL DATA

See privacy policy.

9.MODIFICATION AND DURATION OF THE LEGAL NOTICE

LastTour reserves the right to make, without prior notice, the modifications it deems appropriate on the Website, being able to change, delete or add as much content and services provided through it, as the way in which these appear represented or located in the portal.

10.APPLICABLE LEGISLATION AND JURISDICTION

The unauthorized use of the information contained in this website, as well as damages and breaches to the intellectual and industrial property rights of LastTour will give rise to the exercise of the actions that legally correspond to said Administration and, where appropriate, to the responsibilities that derive from said exercise.