Privacy policy

ONLINE PRIVACY POLICY

THE TURISME DE BARCELONA CONSORTIUM and WE THE CLUB SL (hereinafter the RESPONSIBLE PARTIES) are responsible for handling and processing the user’s personal data and informs them that such data will be processed in accordance with the guidelines set out in Regulation (EU) 2016/679 of 27th April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and Constitutional Law 3/2018 on the protection of personal data and digital rights (LOPDgdd), and for this reason provides the following information in this document regarding the privacy policy.

Any person who visits this website is automatically defined as a user and shall undertake to rigorously comply with the guidelines set out herein, as well as with any other applicable legal regulations.

The provision of professional services by the responsible parties will automatically entail the processing of their clients’ personal data.

A. IDENTIFICATION OF THE BODY RESPONSIBLE FOR PROCESSING THE DATA

Name: CONSORCI DE TURISME DE BARCELONA (hereinafter Turisme de Barcelona)
Registered office: passatge de la Concepció, 7-9. 08008 Barcelona
Tax Identification nº: P-5890003-F
Tel.: +34 93 368 97 00
email address: info@barcelonaturisme.com

Name: WE THE CLUB SL (hereinafter WE)
Registered office: Medes, 4, 4t 4a. 08023 Barcelona
Tax Identification nº: B-06898522
Tel: + 34 935 950 798
email address: info@worldexperience.com

B. IDENTIFICATION OF THE DATA PROTECTION MANAGER (DPM)

In order to guarantee the safety of your data, the RESPONSIBLE PARTIES have appointed the same data protection manager (DPM):

HERRERO & ASOCIADOS, S.L.
email address: barcelonaturismedpo@herrero.es.

C. HOW WE USE YOUR PERSONAL DATA

The RESPONSIBLE PARTIES will process your data manually and/or electronically, for the following specific purposes:

1. To answer questions from the interested party to the responsible party.

1.1. Retention period: The data will be kept until the question asked by the interested party has been answered. After this period, the data will be kept for five (5) years to allow for any potential legal claims to be made and to defend such claims.

1.2. Legal basis: Consent of the interested party.

1.3. The party responsible for processing the data will maintain the quality of the data you provide, and ensure that it is suitable, pertinent and does not exceed the legitimate purpose of its processing.

2. To process orders, product requests or services provided by the user.

2.1 Retention period: The data will be processed for the duration of the contractual relationship. Following this period, it will be stored for the legally stipulated period and/or for tax and contractual purposes.

2.2 Legal basis: Commercial relationship.

3. To process electronic communications about news and updates to the products and/or services provided by the party responsible.

3.1. Retention period: The data will be processed unless the interested party objects to its processing or withdraws consent.

3.2. Legal basis: Consent of the interested party.

We would like to inform you that you may withdraw the consent given at any time, without this affecting the lawfulness of processing based on consent before its withdrawal.

D. TYPE OF DATA

Identity or contact details: name, surname, tax ID no., telephone, postal or email address.
Business details based on the information provided.
The data that are strictly necessary for the provision of the services agreed with the RESPONSIBLE PARTIES.

They will not process special category data.

The personal data that will be processed will be the personal data provided by the user when completing the contact form using any medium (chat, WhatsApp, phone, email).

If the client purchases the experience using a social media platform, the privacy policy of the platform will apply. If the user’s data are gathered via a social media platform, the privacy policy of the platform will apply.

The services, access to contents and the products offered on the website are solely for people aged 18 and over. This is why, when they visit the website and/or provide us with their details, they will specify that they are of this age, and be aware that they will be forbidden from using the website if they are a minor.

This website prohibits the use and communication of the personal data of minors and, if they have been provided by the user or minors, they will be erased if the responsible individual reports this irregularity.

Likewise, the user expressly exempts the RESPONSIBLE PARTIES from any possible complaints arising from this, and the user who sent the information shall accept full responsibility for matters arising from any complaints received.

E. RECIPIENTS OF THE DATA

The RESPONSIBLE PARTIES inform you that your personal data may be passed on to third parties, without the consent of the data owner, provided that it is for the development, implementation and follow up of the commercial relationship, and/or limited to the previously mentioned aims, as set out in article .11.1 of Constitutional Law 15/1999 of 13th December about the Protection of Personal Data.

Occasionally, as part of the current legislation in force, or the existing contractual relationship, your data may be passed on to the following third parties:

Government agencies involved in our sectors in order to process the service contracted or as stipulated by the law in force.
The forces of law and order as stipulated by the law.
Banks and financial institutions for payment of the services offered.
Other professionals in the legal, marketing and advertising sectors, when the communication is deemed necessary by law, or to provide the services agreed.

F. YOUR RIGHTS

You can exercise the following rights regarding your data at any time, free of charge:

Right of access
Right to rectification or erasure
Right to restriction of processing
Right to data portability
Right to object
Right to withdraw consent

You can exercise your rights by sending an email to barcelonaturismedpo@herrero.es or info@barcelonabestexperiences.com specifying clearly which right you wish to exercise.

You can also send a request by post to the addresses of the responsible parties given in point 1 of this privacy policy. You can withdraw your consent to receive mailshots by clicking on the “unsubscribe” link on each of the mailshots received.

If you wish to receive more information about your rights, your can contact the DPM.

We would also like to inform you that you can lodge a complaint with the Spanish Data Protection Agency (AGPD), particularly in those cases when you haven’t been satisfied with the way your complaint has been handled. You can contact the AGPD by phone, 901 100 099 and 912 663 517, or in person at their headquarters: 6, C/ Jorge Juan, 28001 Madrid.

G. SAFETY MEASURES

In accordance with the provisions of the current personal data protection laws, the RESPONSIBLE PARTY complies with the provisions of the General Data Protection Regulations (GDPR) to process the data it is responsible for, and in accordance with the principles set out in article 5 of the GDPR, whereby it will be processed lawfully, fairly and in a transparent manner in relation to the interested party and for the specified, explicit and legitimate purposes. The RESPONSIBLE PARTY guarantees that they have implemented the technical and organisational policies in order to apply the safety measures set out in the GDPR to protect the rights and freedoms of the users and that they have provided them with the right information so that they can exercise these rights and freedoms.

H. CHANGES TO THE PRIVACY POLICY

The responsible parties reserve the right to alter the current privacy policy to adapt it to new legal guidelines, jurisprudence and industry practices. In this eventuality, the RESPONSIBLE PARTIES will announce the changes made on this page with reasonable notice before they are implemented.