Privacy Policy

Last updated: September 2026

1. Data Controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), we inform you that your personal data will be processed by:

2. Data we collect

We collect the data you voluntarily provide through the forms on our website:

  • Full name
  • Email address
  • The message or enquiry you send

We also automatically collect technical data such as IP address, browser type and pages visited, through cookies and similar technologies (see our Cookie Policy).

3. Purpose and legal basis for processing

  • Handling enquiries: To respond to messages sent through the contact form. Legal basis: consent (Art. 6.1.a GDPR).
  • Managing bookings: To manage bookings for free tours, audio tours, group visits and shop orders. Legal basis: performance of a contract (Art. 6.1.b GDPR).
  • Web analytics: To improve our service and analyse website usage. Legal basis: legitimate interest (Art. 6.1.f GDPR).

4. Data retention

We will retain your data for as long as necessary for the purpose for which it was collected and, in any case, for the statute-of-limitations period applicable to any legal actions that may arise from it.

5. Your rights

You can exercise your rights of access, rectification, erasure, restriction, portability and objection by emailing privacitat@authenticbarcelona.com. You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Recipients

We do not share your data with third parties, except where necessary to provide the service (for example, payment platforms) or where there is a legal obligation to do so.

7. Changes to this policy

We reserve the right to amend this policy. We will inform you of any significant change by email or through a prominent notice on the website.