Mundo Pixar Experience LOGO
en
Back

Privacy Policy

Golden Peak´s Privacy Policy 

Last updated: 7 November 2025

Golden Peak España S.L. (“Golden Peak”, “we”, “us”, “our”) is the data controller responsible for the personal data collected through this website (the “Website”) and in connection with your attendance at the Mundo Pixar exhibition (the “Exhibition”). 

This Privacy Policy explains, in clear and comprehensive terms, how we collect your personal data, the purposes for which we process it, the lawful bases on which such processing is carried out, and the length of time we retain your data. The term “Personal Data” comprises all data that can be used to personally identify you. Please review this Privacy Policy carefully prior to visiting or using the pages available on our Website or otherwise providing us with any Personal Data. If you do not provide your Personal Data, we may not be able to effectively provide you with the relevant services.

We are fully committed to protecting your privacy and handling your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR, the Data Protection Act 2018, and the Spanish Organic Law 3/2018 on Data Protection and Digital Rights (“LOPDGDD”) (together, the “Data Protection Laws”).


1. Who we are and how to contact us

Golden Peak España S.L., a company duly incorporated and existing under the laws of Spain, is the legal entity that determines the purposes and means of processing your personal data in relation to the Exhibition and the Website. If you have any questions about this Privacy Policy, or if you wish to exercise your rights as a data subject, you may contact our Data Protection Officer using the following details:


Golden Peak España S.L.

Calle San Germán 10, Planta 2a, Puerta A, Madrid, España

Email address: privacy@goldenpeaklive.com (please include “Personal Data Request” in your subject heading to ensure it receives the correct attention).


2. How we collect your personal data 

We collect your personal data through a variety of channels, depending on how you engage with us.

(a) Contact Form: If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

(b) Cookies: we collect and/or use personal data through tracking cookies, including Google Analytics cookies. Please read section 8 of this Privacy Policy for more information. For more information about cookies in general, you can visit this website: http://www.allaboutcookies.org/. Our website will ask for your consent prior to placing any non-essential cookies.

(c) Promotions: We may request your Personal Data to administer your participation in contests, sweepstakes or other promotions that we organise;

(d) CCTV and Events: When your images are captured by us via CCTV cameras while you are within our property and/or premises, or via photographs or videos taken by us or our representatives when you attend our events;


3. For which purposes do we process your personal data

We have set out below the types of information we may collect, use store and transfer about you together with the purpose and legal grounds for processing. 

(a) Contact Form: We process your personal data to respond to your inquiry, manage our correspondence, and provide the information or assistance requested. This processing is based on our legitimate interest (Article 6(1)(f) GDPR) in communicating effectively with users and potential customers. If your message relates to a potential contractual relationship, processing may be necessary to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

(b) Cookies and Website Analytics: When you visit our Website, we collect information such as IP address, browser type, device identifiers, pages visited and session duration through cookies and pixels. This data is used: To ensure the secure and functional operation of the Website; To analyse usage patterns and improve performance; and To personalise user experience (with consent). Essential cookies are processed based on legitimate interest (Article 6(1)(f) GDPR), whereas analytics and marketing cookies are used only with your prior consent (Article 6(1)(a) GDPR), which may be withdrawn at any time. 

(c) Promotions and Sweepstakes: If you participate in a promotion or contest, we process your data to register and manage your participation, verify eligibility, contact winners, and deliver prizes. Processing is based on the performance of a contract (Article 6(1)(b) GDPR). Any marketing communications associated with such promotions are based on your consent (Article 6(1)(a) GDPR). 

(d) CCTV and Event Photography or Filming: CCTV footage is processed to ensure the safety of visitors and staff, and to prevent or investigate incidents, based on our legitimate interests (Article 6(1)(f) GDPR). Separately, authorised photographers or videographers may capture photographs or videos for promotional purposes. This processing is based on your consent (Articles 6(1)(a) and 7 GDPR; Article 6 LOPDGDD), obtained through clear and visible notices displayed at the venue or through direct consent where required. Such materials may be used on our Website, in press materials, and across official social media channels.


4. How long do we retain your personal data

4.1 Unless a more specific storage period has been specified in this Privacy Policy, your Personal Data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

4.2 In some circumstances you can ask us to delete your data: see your legal rights at paragraph 7 below for further information.

4.3 In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.


5. The sharing and transfer of your personal data

Please note that Personal Data we are holding about you may be shared with and processed by:

  • Golden Peak Group of Companies. Insofar as we share your personal data within the Golden Peak Group, we make sure that your personal data is subject to the same level of security within all of the Golden Peak Group’s companies.
  • regulators, fraud prevention agencies or other third parties for the purposes of monitoring and/or enforcing our compliance with any legal and regulatory obligations, including statutory or regulatory reporting or the detection or prevention of unlawful acts;
  • any third party in the context of actual or threatened legal proceedings, provided we can do so lawfully (for example in response to a court order);
  • other parties and/or their professional advisers involved in a matter where required as part of the conduct of the services;  
  • our own professional advisers and auditors for the purpose of seeking professional advice or to meet our audit responsibilities;
  • third parties we engage with to help us provide services and host events which may include promotors of the Exhibition and our affiliate third party ticketing providers; 
  • our service providers and agents (including their subcontractors) or third parties which process information on our behalf (e.g. internet service and data storage and security platform providers, our bank, payment processing providers and those organisations we engage to help us send communications to you) so that they may help us to provide you with the applications, products, services and information you have requested; and


6. Security

We use commercially reasonably physical, electronic and procedural safeguards to protect against unauthorized use, access, modification, destruction, disclosure, loss or theft of your Personal Data in our custody or control in accordance with applicable law.

We have agreements and controls in place with third party service providers requiring that any information we provide to them must be safeguarded and used only for the purpose of providing the service we have requested the company to perform.

We remind you, however, that no data transmission over the Internet, or Website can be guaranteed to be secure from intrusion.


7. Your rights

You have certain rights under existing Data Protection Laws. You may be entitled to exercise, subject to applicable legal exemptions, the following rights by contacting our Data Protection Officer at privacy@goldenpeaklive.com:

  • Request access to your Personal Data. This enables you to receive a copy of the Personal Information we hold about you.
  • Request correction of your Personal Data. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing processing it.
  • Object to processing of your Personal Data (where we are relying on a legitimate interest).
  • Request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Information, for example if you want us to establish its accuracy or the reason for processing it.
  • Request the transfer of your Personal Data to another party.
  • Withdraw your consent at any time if your Personal Information is processed on the basis of consent. If you withdraw your consent, this will not affect the lawfulness of how we used your Personal Information before you withdrew consent.

Please note that in some circumstances, we may not be able or required by law to comply with your request, but in such cases we will still respond to notify you of that decision and provide an explanation. In some cases, we may also need you to provide us with additional information, which may include Personal Information, to verify your identity and the nature of your request.

If you consider that the processing of your Personal Data infringes applicable law, you may lodge a complaint with a competent supervisory authority. We request that you contact us in the first instance so that we can consider your complaint.

Your Personal Data may be transferred to a third party, including as an international transfer to a third country without an adequacy decision issued by the European Commission or United Kingdom, as applicable. In such circumstances, Golden Peak shall ensure adequate safeguards are in place which may include, as necessary, the use of standard contractual clauses. Where we rely upon such clauses, we shall provide you with a copy upon request.


8. Cookies and similar technologies

8.1 Our Website uses cookies and similar technologies. Cookies are small text files stored in your computing or other electronic devices when you visit our Website for record keeping purposes. Cookies are stored in your browser’s file directory, and the next time you visit the Website, your browser will read the cookie and relay the information back to the Website, platform or element that originally set the cookie. Depending on the type of cookie it is, cookies may store user preferences and other information.

8.2 Web beacons (also known as pixel tags and clear GIFs) involve graphics that are not apparent to the user. Tracking links and/or similar technologies consist of a few lines of programming code and can be embedded in our Website. Web beacons are usually used in conjunction with cookies and primarily used for statistical analysis purposes. This technology can also be used for tracking traffic patterns on our Website and platforms, as well as finding out if an e-mail has been received and opened and to see if there has been any response.

8.3 Golden Peak deploys different types of cookies. We use the following categories of cookies:

(a) Essential cookies: required for the Website to operate securely and properly (for example, to manage sessions, security, or load balancing). These are processed on the basis of our legitimate interest in providing a functional and secure service (Article 6(1)(f) GDPR).
(b) Performance and analytics cookies: to collect aggregated data on how visitors use our Website, such as page views, time spent, and navigation paths. These help us improve functionality and user experience. The use of these cookies is based on your consent (Article 6(1)(a) GDPR).
(c) Marketing cookies: to track visits and measure the effectiveness of our marketing campaigns, including advertising on platforms such as Facebook and Instagram via Meta Pixel. The use of these cookies is based on your consent (Article 6(1)(a) GDPR). For more information on the specific cookies and tracking technologies we use, please see our Cookie Policy, which forms an integral part of this Privacy Policy.

8.4 Some cookies we use are from third party companies to provide us with web analytics and intelligence about our Website. These companies collect information about your interaction with our Website. We use such information to compile statistics about visitors who interact with the Website and other Golden Peak online content, to gauge the effectiveness of our communications, and to provide more pertinent information to our visitors.

8.5 If you do not agree to such use of cookies, you can adjust your browser settings. Unless you have adjusted your browser settings to block cookies, our system will issue cookies as soon as you visit our Website or click on a link in a targeted email that we have sent you, even if you have previously deleted our cookies. If you are located in the EEA or UK, you can select your cookie preferences using the cookie banner that will appear when you access our Website.

8.6 If you do not agree to our use of cookies and other technologies as set out in this Privacy Policy, you should delete or disable the cookies associated with our Website and platforms by changing the settings on your browser accordingly, or if you are located in the EEA or UK, by changing your cookie settings through the cookie banner. However, you may not be able to enter certain part(s) of our Website. This may also impact your user experience while on our Website.


9. Analysis Third-Party tools and advertising.

In addition to cookies, we use a limited number of third-party tools and tracking technologies to analyse Website performance, optimise user experience, and measure the effectiveness of our communications and marketing campaigns. These technologies only operate once you have granted your consent via our Cookie Banner. Below you will find detailed information about these tools and how we use them.

9.1. Google Tag Manager.

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

Google Tag Manager is a tool that allows us to integrate and manage tracking and analytics tools on our Website. The Google Tag Manager itself does not create user profiles, store cookies, or carry out independent analyses. However, it may collect your IP address, which can be transferred to Google’s parent company in the United States. The processing is based on our legitimate interest in the quick and efficient integration and administration of Website technologies (Article 6(1)(f) GDPR). Where appropriate consent has been obtained, processing may also rely on Article 6(1)(a) GDPR..

9.2. Google Analytics 4.

This Website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

Google Analytics helps us analyse how visitors use our Website by collecting information such as pages visited, time spent on pages, device type, browser, and approximate location (city or country). The data collected is aggregated and anonymised. IP anonymisation is activated by default, ensuring that your full IP address is not stored. Data collected via GA4 is retained in aggregated form for up to 14 months, after which it is automatically deleted.

Google Analytics may use cookies or other technologies that allow recognition of users for statistical purposes. Data may be transferred to Google LLC servers in the United States. Such transfers are safeguarded by the European Commission’s Standard Contractual Clauses (SCCs). For more information, please visit: https://privacy.google.com/businesses/controllerterms/mccs/.

The use of Google Analytics is based on your consent (Article 6(1)(a) GDPR). You may withdraw this consent at any time. To opt out of Google Analytics tracking, you can install the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=en.

Further details about data processing by Google Analytics can be found at: https://support.google.com/analytics/answer/6004245?hl=en.

9.3. Meta Pixel.

We use Meta Pixel, a service provided by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California, USA, to measure the effectiveness of our Facebook and Instagram advertising campaigns. Meta Pixel tracks user interactions such as page views and conversions in a pseudonymised manner. The data collected does not allow us to identify individual users directly but helps us understand the effectiveness of our ads and optimise future campaigns. 

Data may be transferred to Meta servers located in the United States. These transfers are protected through the implementation of Standard Contractual Clauses (SCCs) approved by the European Commission. The use of Meta Pixel is based on your consent (Article 6(1)(a) GDPR), which you can withdraw at any time via our Cookie Banner. 

9.4. Hotjar.

We use Hotjar, a service provided by Hotjar Ltd., Level 2, St. Julian’s Business Centre, 3, Elia Zammit Street, St. Julian’s STJ 1000, Malta. 

Hotjar helps us understand user behaviour by providing heatmaps, scroll tracking, and anonymised session recordings. These insights help us improve the usability and content of our Website. Hotjar does not record personal information or keystrokes entered in forms. 

Data processed by Hotjar is stored for up to 12 months and is aggregated and anonymised. The use of Hotjar is based on your consent (Article 6(1)(a) GDPR). You can opt out of Hotjar data collection at any time by visiting: https://www.hotjar.com/legal/compliance/opt-out. 

All third-party providers engaged by Golden Peak process personal data in accordance with our instructions and under appropriate contractual safeguards, including data processing agreements that ensure compliance with the GDPR and UK GDPR. Where international transfers occur, adequate protection measures such as SCCs are implemented. You may contact us at any time for more information about these safeguards.


10. Third-Party Sites

Our Website may contain links to other websites operated by third parties, including for example our business partners. We are not responsible for the data protection practices of websites operated by third parties that are linked to our Website. We encourage you to learn about the data protection practices of such third party websites. Some of these third party websites may be co-branded with our logo or trade mark, even though they are not operated or maintained by us. Once you have left our Website, you should check the applicable privacy policy of the third party website to determine how they will handle any information they collect from you.


11.Updates to this Privacy Policy

We may update this Privacy Policy from time to time. We may change this Privacy Policy to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We will always update this Privacy Policy on our Website, so please try to read it when you visit the Website (the “last updated” reference tells you when we last updated our Privacy Policy). 


Universe Privacy Policy 

Our Commitment to You

You are at the heart of everything we do. Our goal is to maintain your trust and confidence by handling your personal information with respect and putting you in control.

It's important that you know what personal information Universe Experiences Inc. (known here as "we" or "Universe") collects about you, and how we use it. If you are a customer outside North America, the data controller (referred to here as “we” or “Universe”) is the Ticketmaster entity based in the market in which the event takes place:

‍

CountryCompany

Aland Islands

Ticketmaster Suomi OY

Andorra

Ticketmaster Spain S.A.U.

Australia

Ticketmaster Australasia Pty Ltd

Austria

Ticketmaster GmbH

Belgium

N.V. Ticketmaster Belgium S.A.

Denmark

Ticketmaster Danmark A/S

Finland

Ticketmaster Suomi OY

France

Ticketmaster SAS

Furstentum Liechtenstein

Ticketmaster Schweiz AG

Germany

Ticketmaster GmbH

Isle of Man

Ticketmaster UK Limited

Mexico

Venta de Boletos por Computadora, S.A. de C.V.

Netherlands

Ticketmaster BV

Northern Ireland

Ticketshop (NI) Limited trading as Ticketmaster

Norway

Billettservice AS

Svalbard and Jan Mayen

Billettservice AS

Spain

Ticketmaster Spain S.A.U.

Sweden

Ticketmaster Sverige AB

Switzerland

TTicketmaster Schweiz AG

United Kingdom

Ticketmaster UK Limited

‍

We've done our best to make our explanations short and easy to understand. But, if you'd like further information, or have any questions, please contact our Data Protection Officer using the details in the ‘Contact' section below.

If we ever make any major changes to our privacy practices, we'll let you know. If necessary, we'll also ask for your permission.

Our Privacy Promise

As an open ticketing platform, Universe hosts listings and sells tickets on behalf of companies or individuals. We refer to these individuals or companies who set up events on the Universe platform as "Sellers". Events are created and administered by Sellers and Universe hosts these events on our platform. In order to purchase a ticket for a Seller's event, you may need to create a Universe account. If you have any questions about an event or a Seller's use of your data, please contact the Seller directly.

Privacy Notice

Our Privacy Policy has been designed with you in mind. How the policy applies to you will depend on the way in which you interact with us. For example, if you:

~1. purchase a ticket from us, we will use the information you provide us to fulfil both our and the Seller's obligations to you in delivering that service, and, where permitted, keep you up to date about other events that may be of interest to you; and
~2. when you browse our sites, we use cookies to tailor your experience and hopefully provide you with a seamless experience.

Your choices and rights under each scenario are explained in more detail below.

Summary

Click on each icon for more information or scroll down to read the full policy.

‍

What information we have and where we collect it from

We collect and store different types of information about you when you create an account, buy tickets, contact us, and use our websites, apps and social media.
Learn More

How we use your information

We collect and use your information for lots of reasons such as helping you get into the events you love, sharing news, for marketing and as otherwise required by law.
Learn More

Who we share information with

We may share your information with Sellers- as well as other third parties associated with the service provided.
Learn More

Your choices and rights

Among other rights, you can choose whether to receive marketing from us. You also have the right to access the information we have about you.

Learn More

How we look after your information

We're always taking steps to make sure your information is protected and to delete it securely when we no longer need it.
Learn More

Questions and feedback

If you have any questions or feedback about this policy, or how we handle your information, get in touch with us.
Learn More

What information we have & where we get it

  • Creating an Account & Buying tickets. When you create an account, buy a ticket, register for a presale or have a ticket transferred to you by a friend, we will collect your information which depending on service we are providing, may include your contact and billing information.
  • Using our websites and apps. When you use our websites or apps, we collect information such as the browser and device you're using, your IP address, your location, the site you came from, what you did and didn't use our site/app for, or the site you visit when you leave us. For more information on how we collect this information, see our Cookies Policy.
  • Fan experience & customer support. When you contact our Customer Services teams with a query or provide us with feedback, we record that interaction for evidentiary purposes.
  • Using social media. When you use a social media feature within our website or apps, and you post to social media platforms, the social media site will provide us with some information about you.
  • Accessibility. If you have accessibility requirements, we want to make sure you have the best experience when attending events. To do this, we need to collect details of your requirements (which may involve you providing information about your mental or physical health).
  • Processing children’s data. In the few instances where we collect personal information from children, we always seek parental consent and will only ever collect such information for the purposes specified when we collect it.
  • Geodemographic data suppliers. We use suppliers who collate geodemographic data which assists us in better personalising our services to you. If you’d prefer that we do not do this, see the ‘Your Rights & Choices’ section below.
  • Fan Images and CCTV. When attending an event at a venue or festival we collect your image and likeness whether this is through CCTV cameras or videographers or photographers on venue of festival sites. This is primarily collected for the safety and security of our fans; however, we sometimes use these images in our marketing or social media posts. If you wish to object to images being used for marketing visit the ‘Your Rights & Choices’ section below.

Who we share your data with & why

  • Live Nation Entertainment. Within the Live Nation Entertainment Group and associated family of companies who provide services for us such as marketing, profiling, reporting and technical and product support.‍
  • Data processors. Our third-party service providers (sometimes known as data processors) such as cloud computing providers who provide the IT infrastructure on which our products and systems are built.‍
  • Sellers. Sellers are the entities who use Universe’s open ticketing platform to list events to be sold. We share your information with Sellers so that they can run the event and for other reasons described in their privacy policies. We will name the Seller when you purchase a ticket so you know who will receive your data, and you will be given the option to subscribe to receiving marketing from them.‍
  • Third party products. If you have bought any goods and services fulfilled by third parties (e.g. ticket insurance or merchandise), we’ll share data with them so that they can process and fulfil your orders.‍
  • Commercial Partners. These are third parties we work with to provide additional value-add services. As the type of Commercial Partners we work with varies, we use just-in-time information to let you know when data will be shared with them and that it will be processed in accordance with their privacy notice.‍
  • Disclosures under law. Government agencies or other authorised bodies where permitted or required by law.‍
  • Successors. Any successor to all or part of our business.

Your choice & rights

Your choices

Where you have given us your consent, you can withdraw it by doing the following:

  • To stop receiving our marketing you can change your preferences within your account, follow the unsubscribe instructions in any of the emails we send you or contact us and we will do it for you.
  • To opt out of the use of cookies and tracking tools, please see our Cookies Policy.
  • To opt out of location tracking and push notifications, you can change the settings on your device or keep your location off. To stop web push notifications, you will need to use your browser settings.

Where we have relied on a legitimate interest, you can object to it by doing the following:

  • To object to personalisation you can change your preferences within your account. If this option is not available, you can contact us and we will do it for you.
  • To object to being contacted as part of fan feedback, you can unsubscribe through the mechanisms in the messages to you or contact us and we will do it for you.

Your rights

You also have rights over how your personal information is used including:

  • The right to request that your information be erased or restricted from further use.
  • The right to request a copy of the information we hold about you.
  • The right to correct, amend or update information you have given us (where you have an account with us you can also do this by logging in and updating your information).
  • The right to contest any automated decision we make about you. An automated decision is a decision taken without any human intervention which has legal consequences (e.g. credit checking). We don’t typically carry out automated decision making but, if we do, we will make it clear where such decisions are being made.

To exercise any of the above rights please contact us using our Webform. Please use the email associated with your account so we can locate your personal data. Please note that whilst we will carefully assess every request we receive, your rights and the time period for actioning a right may differ according to your place of residence and we may not always have to comply. When this happens, we will explain why.

Looking after your information

We have security measures in place to protect your information. The security measures we use will depend on the type of information collected.

We only keep your information for as long as required to provide you with the services you request, for the purposes outlined in this policy and for any legal purposes for which we are obliged to keep the information. We will securely delete your information when it is no longer required for these purposes, in line with our company policies.

As a part of a global group of companies, we rely on shared services, some of which are located outside of Europe. At the same time, when world-class acts are touring, in order to provide you a seamless experience, your information may be transferred internationally.

When transferring information in this way, there are strict rules in place to ensure your data is still protected to a high standard. Where we do this, we will ensure that appropriate safeguards are put in place. Where your information is transferred outside of the European Economic Area, we will use one of the mechanisms listed below.

  • Standard Contractual Clauses approved by the European Commission
  • Binding Corporate Rules
  • Binding Corporate Processor Rules

For more information, or to get a copy of the relevant documentation please contact us.

Contact us

If you have any questions about the above, or our approach to privacy, our dedicated Privacy Office, including our Data Protection Officer, is here to help: privacy@universe.com

There’s also your local data protection regulator, which you can find here, although we encourage you to try and let us help you first.