Privacy policy
Last updated: 13 September 2026
This policy explains what personal data L'Alternativa collects through the Alternativa Pro mobile app and the alternativapro website (together, "the service"), why, and what your rights are.
Who is responsible
The service is operated by L'Alternativa, Festival de Cinema Independent de Barcelona ("we"). You can reach us at info@alternativa.cccb.org.
What we collect
- Account data: email address, password (stored hashed), name, company, and the language you choose.
- Profile data you add: photo, biography, website, public email, phone number and whether it is visible, profession, languages, country, and what you are looking for at the festival.
- Accreditation data: the answers you gave on the accreditation form and the status of your industry accreditation.
- Activity in the service: events you add to your schedule ("likes"), tickets and reservations linked to your accreditation, programme tracks you are assigned to, and messages you exchange with other professionals.
- Device data: a push notification token if you allow notifications, and standard server logs (IP address, time, request) kept for security.
We do not collect your location, contacts, or calendar. When you add an event to your calendar, the app opens your phone's calendar editor; nothing is read back from it.
Why we use it
- To run the industry programme: schedule, personal agenda, tickets, chat and the professionals directory.
- To show your public profile to other accredited professionals in the directory. Your email and phone are shown only if you choose to make them visible.
- To send notifications you asked for, such as new messages or schedule changes.
- To manage accreditations and, where applicable, their payment through our ticketing provider.
- To keep the service secure and to answer your requests.
The legal basis is the performance of the accreditation agreement with you (art. 6.1.b GDPR) and, for notifications and the visibility of your contact details, your consent (art. 6.1.a), which you can withdraw at any time.
Who we share it with
- Other accredited professionals see your public profile and the messages you send them.
- Service providers that host and run the service on our behalf: Heroku (Salesforce) for hosting, Redis Cloud for caching, Bugsnag for error reporting, Expo and Google Firebase for delivering push notifications, and CodeTickets for accreditation payments.
- Public authorities when the law requires it.
We do not sell personal data and we do not use it for advertising or tracking.
How long we keep it
Account and profile data are kept while your account exists. Chat messages are kept while both accounts exist. Server logs are kept for up to 90 days. Accreditation records are kept for the legal retention period applicable to invoices.
Your rights
You can access, correct, or delete your data, restrict or object to its processing, and ask for a copy in a portable format. You can edit your profile in the app or on the website, and delete your account from the app's settings or by writing to us. You can also complain to the Spanish Data Protection Authority (AEPD) or the Catalan Data Protection Authority (APDCAT).
Children
The service is intended for professionals aged 18 or over.
Changes
We will post any change to this policy on this page and update the date above.
