Privacy and cookie policy

1. Who is the controller

ALUZ SOLUCIONES INTEGRALES, S.L. (“ALUZ” or “JUSTQRO”) organises the JUSTQRO fair and is the controller of the personal data collected on justqro.mx: the website, the interactive floor plan, the catalogue, the favourites system, the VIP Programme RSVP and accreditation. We process your data under Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD), Spanish Law 34/2002 on information society services (LSSI-CE) and, for people in Mexico, the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, 2025). Section 9 is the privacy notice for Mexico.

2. What data we process, why and for how long

We only ask for the data each service needs. We do not process sensitive data.

3. How “My favourites” works

• You can browse the plan and catalogue without giving any data. Marking favourites does not require signing up either.
• If you give us your name, surname and email, they are stored only on your device (browser local storage) together with your list. We do not create any account.
• Your data only reach us when you tap “Finish my visit”. We then store your request and email you your favourites with photos, the artist and each gallery's details.
• We do not share your name or email with the galleries. Galleries only receive anonymous figures, for example how many people marked a work. If we ever wanted to put you in touch with a gallery because of your favourites, we would ask you first with a separate box.
• News is only sent if you tick the box. You can unsubscribe in every email or by writing to us.
• To delete your favourites from your device, tap “Empty list” or clear the site data in your browser.

4. Other people's data

If you add guests to a VIP RSVP, you confirm that they have authorised you to give us their names and that you will inform them of this policy.

5. Who receives your data

We do not sell or transfer your data. We only share them when needed for the service you request, for example with the gallery that represents a work when you ask us about it, or when required by law. These providers process data on behalf of ALUZ, under contract and only on our instructions:

6. International transfers

Some providers (Google, Meta) may process data in the United States. They do so under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. If you are in Mexico, your data are sent to Spain, where ALUZ is based, and protected under the GDPR.

7. Your rights

You can request access, rectification, erasure, objection, restriction and portability of your data and withdraw your consent at any time, without affecting earlier processing. Write to info@aluzart.es stating the right you wish to exercise. If we cannot confirm your identity from the address you write from, we will ask for a document proving it. We will answer within one month.

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD).

8. Minors and security

Services that collect data (favourites, VIP, accreditation) are intended for people aged 14 or over in Spain and for adults, or minors authorised by their parent or guardian, in Mexico. We apply technical and organisational measures to protect data: encrypted connection, restricted access to the data sheets, filters against automated submissions and validation of what we receive.

9. Privacy notice for Mexico (LFPDPPP)

Identity and address of the controller

ALUZ SOLUCIONES INTEGRALES, S.L., with address at Calle Felipe V, 2º Derecha S/n, 28013 Madrid (Madrid), España, is responsible for processing your personal data. Contact: info@aluzart.es.

Personal data we collect

Identification and contact data: first name, surname and email. Interest data: works and galleries you mark as favourites and the VIP activities you choose. Technical browsing data, only with your consent. We do not collect sensitive personal data.

Purposes

Primary (needed for the service you request): emailing you your favourites; managing your VIP RSVP, the waiting list and its notices; managing your accreditation; answering your artwork enquiries, including putting you in touch with the gallery that represents the work.

Secondary (not needed for the service): sending you news about JUSTQRO and Art Week Querétaro; measuring the use of the website and campaigns. If you do not want your data used for these purposes, leave the news box unticked, reject measurement cookies in the banner or write to info@aluzart.es at any time. Refusing does not affect the services you request.

Transfers

Your data are passed on to the providers listed in section 5, who process them on behalf of ALUZ, and transferred to Spain, the controller's address. We only share your name, email and enquiry with the relevant gallery when you ask us about a work, so that we can answer you. We make no other transfers that require your consent.

ARCO rights, revocation and limiting use

You can access, rectify or cancel your data or object to their processing (ARCO rights), revoke your consent and limit their use or disclosure. To do so, email info@aluzart.es with your name, the right you wish to exercise and a clear description of the data. If we cannot confirm your identity, we will ask for a document proving it. We will answer within the time limits set by law. You can also unsubscribe from news via the link in each email.

Cookies and similar technologies

We use cookies and local storage as described in section 10. You can accept, reject or configure them in the banner.

Changes and authority

We will publish any change on this page, with its update date. If you believe your right to data protection has been infringed, you can contact the competent authority in Mexico, the Secretaría Anticorrupción y Buen Gobierno.

10. Cookies and local storage

When you visit the website you will see a banner to accept, reject or configure non-essential cookies. Analytics and advertising cookies are only activated if you accept them. You can change your choice at any time from the banner or your browser settings.

11. Changes to this policy

We may update this policy when the website, services or regulations change. The date of the last update appears above.