Privacy Policy - Barcelona.org

Last updated: 2025/11/25

At Barcelona.org, we respect your privacy and are committed to complying with the General Data Protection Regulation (GDPR).
Our website provides information about Barcelona and collects as little personal data as possible.
This Privacy Policy explains what data we collect, why, and how it is used and protected.
 

1. Data Controller

The data controller responsible for this website is:
Barcelona.org
Email: inc at barcelona.com
 

2. Data We Collect

We do not sell products and do not seek to collect personal data. However, we may process:

a. Information you voluntarily provide

  • When you contact us: name, email address, and message.

b. Technical and usage data (automatically collected)

Collected through:

  • IP address (anonymized whenever possible)
  • Browser and device information
  • Pages visited, duration, interactions

This data is used for analytics, security, and site performance.

c. Cookies

We use a limited number of cookies, mainly for:

  • Essential site functions
  • Anonymous analytics (Google Analytics 4)
  • Security and performance (Cloudflare)

We do not use cookies for advertising or profiling.
 

3. Legal Basis for Processing (GDPR Art. 6)

We process your data under:

  • Consent — for analytics cookies (GA4) via the cookie banner.
  • Legitimate interest — essential cookies, security, Cloudflare, basic logs.
  • Your request — when you contact us (Art. 6(1)(b)).

You may withdraw consent at any time.
 

4. Use of Your Data

We use collected data only to:

  • Improve website and content
  • Measure anonymous site usage
  • Ensure security and performance
  • Respond to user inquiries

We never sell or share personal data for marketing purposes.
 

5. Third-Party Services

a. Google Analytics 4 (GA4)

Used for anonymous audience measurement.
Privacy settings include: IP anonymization, no advertising features, limited data retention.

b. Cloudflare

Used for website security, threat protection, performance, and HTTPS encryption.
Cloudflare may temporarily process IP addresses under legitimate interest.

c. Booking.com

Some hotel pages on Barcelona.org contain redirect links to Booking.com when a direct hotel booking link is not available.

  • Barcelona.org does not collect or process any data on Booking.com.
  • Booking.com may set its own cookies, including functional, analytics, or marketing cookies.
  • Any personal data provided on Booking.com is governed exclusively by the Booking.com Privacy Policy.

We recommend reviewing Booking.com’s privacy practices before making a reservation.
 

6. Data Retention

  • Contact form: retained only for responding.
  • GA4 analytics: anonymous or aggregated data retained per Google’s limits.
  • Cloudflare logs: retained temporarily for security.

We keep data only as long as necessary.
 

7. Your Rights (GDPR)

You have the right to:

  • Access your personal data
  • Correct or delete your data
  • Request restriction or objection
  • Withdraw consent
  • Request data portability

To exercise these rights: inc at barcelona.com
 

8. Cookies

A cookie banner allows you to:

  • Accept analytics cookies
  • Refuse analytics cookies
  • Change preferences anytime

Essential cookies (Cloudflare) cannot be disabled.
 

9. Data Security

We use:

  • HTTPS encryption
  • Secure hosting
  • Cloudflare protection
  • Limited data collection
  • Restricted internal access
     

10. Links to External Websites

Barcelona.org contains links to external services, including:

  • hotels, museums, ticket providers
  • transport websites
  • Booking.com for hotel reservations

We are not responsible for the privacy practices of these external websites.

Each site has its own Privacy Policy and Terms.
 

11. Updates to This Policy

This Privacy Policy may be updated occasionally.
The most recent update date appears at the top of this page.
 

12. Contact

For any questions or privacy requests, contact:
inc at barcelona.com