Privacy Policy

Last updated: November 2026

This Privacy Policy explains how LAYERS OF REALITY, SL processes personal data in connection with the website www.dinosauriumexperience.com, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

In short: this website has no forms, no user accounts, no cookies, no analytics and no tracking. Fonts, images and the trailer video are served from our own server, so visiting it does not send your data to third parties. We only process personal data when you write to us by email and, for technical reasons, in the access logs of our web server.

1. Data controller

For any question about data protection, write to hola@layersofreality.com.

2. What data we process

• Email enquiries. If you write to us — to hola@layersofreality.com or to our International Partnerships contacts — we process the data you send: your name, email address, organisation and position, and the content of your message.
• Server access logs. Like any web server, the server that hosts this website automatically records technical data for each request: IP address, date and time, page or file requested, response code, referring page and browser type. We do not use these logs to identify or profile visitors.

We do not use cookies, local storage, pixels, analytics, advertising tools, social media plugins or embedded third-party content (see our Cookies Policy). The trailer is a video file hosted on this website and only downloads when you press play. We do not make automated decisions or create profiles.

Links to other websites. Tickets are sold on the websites of each venue. When you follow those links you leave this website, and the processing of your data there is governed by the privacy policy of the website you visit.

3. Purposes and legal bases

Purpose	Data	Legal basis (GDPR)
Answering your enquiries and managing professional relationships with venues, promoters and partners	Email enquiries	Steps taken at your request before entering into a contract (Art. 6.1.b) and our legitimate interest in answering the messages we receive (Art. 6.1.f)
Sending you information about the exhibition, only if you ask us to	Name and email address	Your consent (Art. 6.1.a), which you can withdraw at any time
Delivering the website and keeping it secure (preventing attacks and abuse)	Server access logs	Our legitimate interest in the security and proper functioning of the website (Art. 6.1.f)
Complying with legal obligations and defending legal claims	Any of the above, only when necessary	Legal obligation (Art. 6.1.c) and legitimate interest (Art. 6.1.f)

Providing your data is voluntary. If you do not give us your contact details, we will not be able to reply to you.

4. How long we keep your data

• Email enquiries: for as long as needed to answer you and, where applicable, to manage the professional relationship that follows. Afterwards they are kept blocked only for the periods during which legal liabilities may arise (Article 32 LOPDGDD), and then deleted.
• Information you have asked to receive: until you withdraw your consent.
• Server access logs: only for the short period needed for security purposes, after which they are deleted, unless they are needed to investigate a specific security incident.

5. Recipients and international transfers

We do not sell your data or give it to third parties, except where required by law (for example, to public authorities, judges or courts). Our hosting and email providers process data on our behalf as data processors, under a contract that meets Article 28 GDPR. If a provider processes data outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or on the standard contractual clauses approved by the Commission (Articles 45 and 46 GDPR).

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given at any time (without affecting the lawfulness of the processing carried out before), by writing to hola@layersofreality.com with the subject "Data protection". We will reply within one month. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es) or with the supervisory authority of the EU country where you live.

7. Minors

This website is not directed at children under 14 and we do not knowingly process their personal data. Children under 14 should not write to us without the involvement of a parent or legal guardian.

8. Security

We apply appropriate technical and organisational measures to protect personal data against loss, alteration and unauthorised access. This website is served over an encrypted connection (HTTPS) and does not load resources from third parties.

9. Changes to this policy

We may update this Privacy Policy to reflect legal or technical changes. The date of the latest update is always shown at the top of this page.