DATA POLICY
Who is responsible for the processing of your personal data?
COSMIC LEGENDS PRODUCTIONS, S.L. (hereinafter, "COSMIC LEGENDS") is RESPONSIBLE for the processing of the user's personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of 27 April (GDPR), Organic Law 3/2018, of 5 December (LOPDGDD); and Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE).
How to contact us?
Responsible: COSMIC LEGENDS PRODUCTIONS, S.L.
Registered Office: Fernández de la Hoz, number 52, 6º, C.P. 28003
E-mail: legal@sandiegocomicconmalaga.com
Why do we process your personal data? for how long do we do it? on what legal basis?
We obtain the data directly from the interested party or their legal representative. When users provide personal data through registration forms for COSMIC LEGENDS events/activities, forms on COSMIC LEGENDS web pages or contact forms, their personal data will be processed for the following purposes:
Depending on the case, the communication of the minimum personal data is a prerequisite to fulfill the purpose for which they are requested, so that, if you do not provide the same may not be able to provide the product or service requested. In the event that all the data is not provided, there is no guarantee that the information and services provided will be completely tailored to your needs.
In this sense, you must ensure that the personal data provided to COSMIC LEGENDS are truthful and you are responsible for communicating any changes to them.
Unless you indicate your wish to the contrary, the above-mentioned retention periods for personal data will apply and it is your responsibility to keep them up to date. At the end of this period, and when it is no longer necessary to process them in accordance with the purpose for which they were collected, they will be deleted with appropriate security measures to ensure the anonymization of the data or their total destruction.
What categories of personal data will we process?
In accordance with the above purposes, and in compliance in any case with the principle of data minimization, COSMIC LEGEND may process the following categories of personal data:
Identifying data: name, surname, ID card number
Contact information: telephone number, postal address, e-mail address
Personal and social characteristics data: date of birth, gender, nationality, hobbies, affiliations.
Economic and banking data: credit or debit card.
Internal identifiers generated during registration or participation in events (e.g., registration codes or RegistrationID).
Data resulting from customized reports on your activity with COSMIC LEGEND.
Images captured at the event or by video surveillance.
As well as any other personal data that users provide to COSMIC LEGEND through the forms established on our website and its subdomains.
How will the data of minors be handled?
COSMIC LEGENDS informs users that, in order to proceed with the processing of personal data of children under 14 years of age, the consent of parents, guardians or those who hold parental authority over the minor will be required. Therefore, parents, guardians or legal representatives shall be solely responsible for all acts performed through this website by minors in their care, including the completion of telematic forms with the personal data of such minors and the marking, if any, of the boxes that accompany them.
Therefore, when a minor participates in any event organized by COSMIC LEGENDS or its collaborators, it will be necessary to provide data identifying the parents, guardians or those who have parental authority for the sole purpose of obtaining the necessary consent. COSMIC LEGENDS reserves the right to require the family book or any other document that determines parentage, guardianship or in general parental authority over the minor.
Can the user provide third party data?
When users provide personal data of family members, friends, partners or any other third parties related to the user, they must undertake to inform of the privacy policy of COSMIC LEGENDS and in general of the terms herein and obtain the consent of these third parties for the processing of their personal data.
To whom do we provide personal data?
The communication of personal data to third parties is not foreseen, except when such communication is necessary for the development and execution of the contractual relationship and other purposes described in this Privacy Policy or in compliance with legal obligations, as well as when the user has expressly consented to the transfer of their data such as to sponsors of the event, or in connection with the assignments made for the publication of images on the social networks of COSMIC LEGENDS, as provided in the corresponding section of this Privacy Policy.
In particular, COSMIC LEGENDS may rely on external suppliers acting as data processors, among others, ticketing platforms or ticket sales, registration systems, technological tools, communications services, data hosting or operational management of the event, with which the corresponding data processing contracts have been signed in accordance with current legislation on data protection.
Such suppliers shall process the data only according to COSMIC LEGENDS' instructions, and may not use them for their own purposes or for purposes other than those indicated herein, and shall be obliged to adopt the necessary technical and organizational measures to ensure the security and confidentiality of personal data.
In any case, these treatments will be limited to purposes consistent with the nature of the event and the relationship maintained with the User, and will not involve automated decisions with significant legal effects or the transfer of data to third parties for commercial purposes without the express consent of the person concerned.
Are data transferred internationally?
In the processing of your data by our entity, we need to contract external services that may involve your data being stored and/or processed by organizations that are established or operate from outside the European Union, which would imply that we carry out international transfers of your data.
The details of these international transfers are as follows
Newsletter: The Rocket Science Group LLC d/b/a Mailchimp - United States Level of Protection Assured: Adequate Safeguards
Newsletter: "BREVO" / SENDINBLUE - 17 rue de Salneuve, 75017, Paris, France
What are your rights?
Any person has the right to obtain confirmation as to whether or not personal data concerning him/her are processed. On the other hand, any interested party may request the exercise of the following rights by submitting a letter to the postal address at the top of the page:
Right of access: allows the data subject to know and obtain information about their personal data subject to processing.
Right of rectification or suppression: allows you to correct errors, modify data that proves to be inaccurate or incomplete and ensure the accuracy of the information being processed.
Right of cancellation: allows the deletion of data that proves to be inadequate or excessive.
Right of opposition: the right of the data subject not to have his or her personal data processed or to have it stopped.
Limitation of processing: involves the marking of the personal data stored, in order to limit their future processing.
Data portability: provision of the processed data to the data subject, so that he/she can transmit it to another data controller without hindrance.
The right not to be subject to automated individual decisions (including profiling): Right not to be subject to a decision based on automated processing that produces effects or significantly affects.
In relation to the images captured during the celebration of the event or activities organized by COSMIC LEGENDS, we inform you that you may revoke your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. As a consequence, you may request not to appear, you or the minor you represent, in photographs or group images participating in the events and activities, in which case photographs or images in which the person concerned appears will not be used, or the photograph will be subjected to a procedure that does not allow its identification.
The data subject may, at any time, revoke the consent previously granted to use his or her data. In the event that you revoke your consent to store and process your data, we will not be able to provide you with certain services.
In case of neglect of any of the aforementioned rights, the interested party may file the corresponding claim for protection before the Spanish Data Protection Agency (www.aepd.es).
Contact details to exercise your rights: you can contact the RESPONSIBLE party through the contact details provided at the beginning of this Privacy Policy.
What security measures do we implement to protect personal data?
COSMIC LEGEND guarantees that it has implemented the necessary technical and organizational policies to ensure the security of your data and prevent its alteration, loss, processing or unauthorized access, given the state of technology, the nature of the data stored and the risks to which they are exposed. To ensure the security and protection of personal data, the following measures, among others, are implemented:
Ensure the confidentiality, integrity, availability and continuous resilience of data processing systems, restoring access quickly in case of incidents.
Perform periodic verifications of the effectiveness of technical and organizational measures to ensure security.
Apply pseudonymization and encryption in cases of sensitive data.
All systems will comply with current legislation
Risks will be minimized to acceptable levels, balancing security controls with the nature of the information.
Information security awareness and training programs will be implemented for all users with access to data.
Security controls shall be applied in a manner commensurate with the risk and nature of the data processed.
All members of COSMIC LEGENDS shall be responsible for ensuring the security of the information.
In addition, COSMIC LEGEND is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
ACCEPTANCE
The acceptance and provision of this document indicates that you understand and accept all the clauses of our privacy policy and therefore authorize the collection and processing of your personal data under these terms. This acceptance is made in each case by activating the "Acceptance" checkbox in our Privacy Policy.
MODIFICATION
COSMIC LEGENDS reserves the right to modify this Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency, so users are recommended to consult it periodically without prejudice that any change will be reported visibly on the web.
For more information about privacy safeguards, you can contact COSMIC LEGEND using the contact details provided at the beginning of this Privacy Policy.
Last update: April 16, 2026
COSMIC LEGENDS PRODUCTIONS, S.L. All rights reserved.
PRIVACY POLICY
Who is responsible for the processing of your personal data?
COSMIC LEGENDS PRODUCTIONS, S.L. (hereinafter, “COSMIC LEGENDS”) is RESPONSIBLE for the processing of the user’s personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of 27 April (GDPR), Organic Law 3/2018, of 5 December (LOPDGDD); and Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE).
How to contact us?
-
- Responsible: COSMIC LEGENDS PRODUCTIONS, S.L.
-
- Registered address: Fernández de la Hoz, number 52, 6th floor, postcode 28003
-
- E-mail: legal@sandiegocomicconmalaga.com
Why do we process your personal data? for how long do we do it? on what legal basis?
We obtain the data directly from the interested party or their legal representative. When users provide personal data through registration forms for COSMIC LEGENDS events/activities, forms on COSMIC LEGENDS web pages or contact forms, their personal data will be processed for the following purposes:
| Inquiries: | |
| Purpose: | To attend to orders, requests, resolution of doubts, presentation of complaints or suggestions or any type of request that is made from users through the forms available on the website or emails. |
| Time limit: | Your personal data will be kept for the entire duration of the management of your inquiry, request or complaint and even after, until the eventual liabilities arising from it expire. |
| Legitimate basis: | The consent given, or the execution of the contractual relationship, the fulfillment of a legal obligation on our part (when it comes to claims related to service or data protection) or for the defense of our legitimate interests. |
| Newsletter: | |
| Purpose: | To include you in our database in order to send you the newsletter when you sign up for the newsletter through the form on the Web. These communications will be made by COSMIC LEGENDS and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data. |
| Term: | Your data will be retained until the user withdraws their consent at the address legal@sandiegocomicconmalaga.com, as well as in each mail you receive in the “unsubscribe” section. |
| Legitimate basis: | Consent given. |
| Participation in the event and organized activities: | |
| Purpose: | To manage the contracted services and process the user’s participation in the same, including the control of attendees, ticket sales and sending information about the organization. |
| Term: | Your data will be retained for the duration of the contractual relationship, that is, for the duration of the event/activity in which you register and, once the same has ended, for the period of limitation of the legal actions that may arise from the same. |
| Legitimate basis: | The execution of the contractual relationship and the fulfillment of legal obligations. |
| Surveys: | |
| Purpose: | To perform aggregated data reporting, for statistical and analytical purposes in order to improve our services. |
| Deadline: | Your data will be retained until the study that prompted the survey is completed. |
| Legitimate basis: | The legitimate interest of COSMIC LEGENDS. |
| Participation in sweepstakes or contests: | |
| Purpose: | To manage your participation and perform accounting, tax and administrative management, as well as to add participants as new subscribers to commercial communications. |
| Term: | Your data will be retained for the duration of the sweepstakes or contest in which you enter and, after the end of the sweepstakes or contest, for the statute of limitations period for any legal actions that may arise therefrom. |
| Legitimate basis: | The execution of the contractual relationship and the fulfillment of legal obligations. |
| Sending information and news: | |
| Purpose: | To provide you with personalized information about services, campaigns, events in which the user participates or COSMIC LEGENDS organizes. |
| Deadline: | Your data will be retained unless otherwise indicated or the interested party exercises their right to oppose the sending of information, as well as the preparation of personalized reports on your activity with COSMIC LEGENDS, to the address legal@sandiegocomicconmalaga.com As well as in each mail you receive in the “unsubscribe” section bajas@sandiegocomicconmalaga.com |
| Legitimate basis: | The legitimate interest of COSMIC LEGENDS on the basis of the exception provided for in Article 21.2 of Law 34/2002 of July 11, 2002, on information society services and electronic commerce (LSSICE). |
| Images: | |
| Purpose: | The recording and incorporation of the image and voice during the event of both attendees and guests, artists or exhibitors hired, both in the production and in promotional material and advertising pieces of brands associated with the event, will be made without time, territorial or media limits. This recording may be reproduced in streaming and OTT platforms, covering the activities, environment and development of the event. The images and content related to the event may be disseminated for informative, informative, commercial and advertising purposes. This will include publication on social networks, as well as in the media and press covering the event. |
| Term: | The images and/or videos, with or without sound, will be retained as long as you do not exercise your rights to that effect and the purposes for which they were collected persist. The data are kept in the social network itself in accordance with its privacy policies. |
| Legitimate basis: | The execution of the contractual relationship and the consent of the data subject. |
| Video surveillance: | |
| Purpose: | Security and access control to the site of the facility. |
| Deadline: | Recorded images will be kept for one month from the date of recording. |
| Legitimate basis: | The legitimate interest of COSMIC LEGENDS and the public interest. |
| Sponsor information: | |
| Purpose: | In case of transferring your data to the sponsors, they will be able to send User commercial communications of their own products and services. |
| Deadline: | Your data will be treated in accordance with the privacy policies of those companies. You may revoke your consent at any time by contacting us at the addresses indicated in those policies. |
| Legitimate basis: | Consent given. |
| Cookies, pixel and tracking: | |
| More detailed information in the Cookies Policy | |
Depending on the case, the communication of the minimum personal data is a prerequisite to fulfill the purpose for which they are requested, so that, if you do not provide the same may not be able to provide the product or service requested. In the event that all the data is not provided, there is no guarantee that the information and services provided will be completely tailored to your needs.
In this sense, you must ensure that the personal data provided to COSMIC LEGENDS are truthful and you are responsible for communicating any changes to them.
Unless you indicate your wish to the contrary, the above-mentioned retention periods for personal data will apply and it is your responsibility to keep them up to date. At the end of this period, and when it is no longer necessary to process them in accordance with the purpose for which they were collected, they will be deleted with appropriate security measures to ensure the anonymization of the data or their total destruction.
What categories of personal data will we process?
In accordance with the above purposes, and in compliance in any case with the principle of data minimization, COSMIC LEGEND may process the following categories of personal data:
-
- Identifying data: name, surname, ID card number
-
- Contact information: telephone number, postal address, e-mail address
-
- Personal and social data: date of birth, gender, nationality, hobbies, affiliations, etc.
-
- Financial and banking information: credit or debit card
-
- Data resulting from customized reports on your activity with COSMIC LEGEND
-
- Images captured at the event or by video surveillance
As well as any other personal data that users provide to COSMIC LEGEND through the forms established on our website and its subdomains.
How will the data of minors be handled?
COSMIC LEGENDS informs users that, in order to proceed with the processing of personal data of children under 14 years of age, the consent of parents, guardians or those who hold parental authority over the minor will be required.
Therefore, parents, guardians or legal representatives shall be solely responsible for all acts performed through this website by minors in their care, including the completion of telematic forms with the personal data of such minors and the marking, if any, of the boxes that accompany them.
Therefore, when a minor participates in any event organized by COSMIC LEGENDS or its collaborators, it will be necessary to provide data identifying the parents, guardians or those who hold parental authority for the sole purpose of obtaining the necessary consent. COSMIC LEGENDS reserves the right to require the family book or any other document that determines parentage, guardianship or in general parental authority over the minor.
Can the user provide third party data?
When users provide personal data of family members, friends, partners or any other third parties related to the user, they must undertake to inform of the privacy policy of COSMIC LEGENDS and in general of the terms herein and obtain the consent of these third parties for the processing of their personal data.
To whom do we provide personal data?
No communication of personal data to third parties is foreseen except, if necessary for the development and execution of the purposes of processing, to our service providers related to communications with whom COSMIC LEGENDS has signed confidentiality and/or data processor contracts required by the privacy regulations in force.
The foregoing is without prejudice to those assignments of personal data that are necessary for the execution of the contractual relationship, or in compliance with legal obligations, or when the user has expressly consented to the transfer of their data such as event sponsors, or assignments made for the publication of images on the social networks of COSMIC LEGENDS.
Are data transferred internationally?
In the processing of your data by our company, we need to hire external services that may involve your data being stored and/or processed by organizations that are established or operate from outside the European Union, which would imply that we make international transfers of your data. Below, we indicate all the details of these international transfers, (they only appear if they are carried out):
-
- Newsletter: The Rocket Science Group LLC (Mailchimp) – United States. Level of protection: Adequate safeguards.
What are your rights?
Any person has the right to obtain confirmation as to whether or not personal data concerning him/her are processed. On the other hand, any interested party may request the exercise of the following rights by submitting a letter to the postal address at the top of the page:
-
- Right of access: allows the data subject to know and obtain information about their personal data subject to processing.
-
- Right of rectification or suppression: allows you to correct errors, modify data that proves to be inaccurate or incomplete and ensure the accuracy of the information being processed.
-
- Right of cancellation: allows the deletion of data that proves to be inadequate or excessive.
-
- Right of opposition: the right of the data subject not to have his or her personal data processed or to have it stopped.
-
- Limitation of processing: involves the marking of the personal data stored, in order to limit their future processing.
-
- Data portability: provision of the processed data to the data subject, so that he/she can transmit it to another data controller without hindrance.
-
- Right not to be subject to automated individual decisions (including profiling): the right not to be subject to a decision based on automated processing that produces effects or significantly affects. In relation to the images captured during the celebration of the event or activities organized by COSMIC LEGENDS, we inform you that you may revoke your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. As a result, you may request not to appear, you or the minor you represent, in photographs or group images participating in events and activities, in which case photographs or images in which the person concerned appears will not be used, or the photograph will be subjected to a procedure that does not allow its identification. The interested party may, at any time, revoke the consent previously granted to use his or her data. In the event that you revoke your consent to store and process your data, we will not be able to provide you with certain services. In case of neglect of any of the above rights the data subject may file a claim for protection before the Spanish Data Protection Agency (www.aepd.es).
-
- Contact details to exercise your rights: you can contact the RESPONSIBLE party through the contact details provided at the beginning of this Privacy Policy.
In connection with images captured during events, you may request not to appear in them or not to use them. Withdrawal of consent will not affect previous processing.
You can also file a complaint with the AEPD (www.aepd.es).
What security measures do we implement to protect personal data?
COSMIC LEGEND guarantees that it has implemented the necessary technical and organizational policies to ensure the security of your data and prevent its alteration, loss, processing or unauthorized access, given the state of technology, the nature of the data stored and the risks to which they are exposed. To ensure the security and protection of personal data, the following measures, among others, are implemented:
-
- Ensure the confidentiality, integrity, availability and continuous resilience of data processing systems, restoring access quickly in case of incidents.
-
- Perform periodic verifications of the effectiveness of technical and organizational measures to ensure security.
-
- Apply pseudonymization and encryption in cases of sensitive data.
-
- All systems will comply with current legislation
-
- Risks will be minimized to acceptable levels, balancing security controls with the nature of the information.
-
- Information security awareness and training programs will be implemented for all users with access to data.
-
- Security controls shall be applied in a manner commensurate with the risk and nature of the data processed.
-
- All members of COSMIC LEGENDS shall be responsible for ensuring the security of the information.
In addition, COSMIC LEGEND is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Acceptance
The acceptance and provision of this document indicates that you understand and accept all the clauses of our privacy policy and therefore authorize the collection and processing of your personal data under these terms. This acceptance is made in each case by activating the “Acceptance” checkbox in our Privacy Policy.
Modification
COSMIC LEGENDS reserves the right to modify this Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency, so users are recommended to consult it periodically without prejudice that any change will be reported visibly on the web.
For more information about privacy safeguards, you can contact COSMIC LEGEND using the contact details provided at the beginning of this Privacy Policy.
Last update: July 17, 2025
COSMIC LEGENDS PRODUCTIONS, S.L. All rights reserved.

