Online Privacy Policy

 TURISME DE BARCELONA CONSORTIUM is the Data Controller of the users’ personal data and informs them that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), for which it provides the following information regarding the data management: 

A. IDENTIFICATION OF THE DATA CONTROLLER 

  • Owner: TURISME DE BARCELONA CONSORTIUM (hereinafter, Turisme de Barcelona). 
  • Registered address: Passatge de la Concepció, 7-9, 08008 Barcelona 
  • CIF: P-5890003-F 
  • Telephone: +34 93 368 97 00. 
  • E-mail: info@barcelonaturisme.com 

B. IDENTIFICATION OF THE DATA PROTECTION OFFICER (DPO) 

THE DATA CONTROLLER, in order to guarantee the security of your data, has designated a Data Protection Officer (DPO): 

C. PURPOSE OF PROCESSING YOUR DATA 

 TURISME DE BARCELONA CONSORTIUM will process your data manually and/or automatically, for the following specific purposes: 

1. To respond to questions the interested party directs towards the Data Controller. 
1.1. Conservation period: The data will be conserved until the question proposed by the interested party is resolved. After this, they will be conserved for five (5) years for the possible formulation, exercise or defense of claims. 
1.2. Legal basis: consent of the interested party. 

2. To process orders, requests for products or services made by the user. 
2.1. Conservation period: The data will be processed while the contractual relationship exists. After this, they will be conserved for the stipulated legal term in fiscal and contractual matters. 
2.2. Legal basis: business relationship. 

3. To send electronic communications about the Controller’s news and product and/or service updates. 
3.1. Conservation period: The data will be conserved so long as you do not oppose to doing so or until you withdraw your consent. 
3.2. Legal basis: consent of the interested party. 

We inform you that you may withdraw the consent you gave at any time, without affecting the legality of the processing previously performed by the Controller. 

4. Data processing from submitted CV 

In the event that you send us your CV electronically, we will process your data in order to assess and manage your job application and where appropriate, carry out necessary actions for selecting and contracting personnel, in order to offer you positions that match your profile. Unless indicated otherwise, the data is required, as such, your failure to provide it will eliminate you from the selection process. 

4.1 Maximum conservation period: one year from the date it was received. 
4.2 Legal basis: consent of the interested party. 

5. Processing of video surveillance images from the Turisme de Barcelona facilities 
5.1 Maximum conservation period: 30 days. 
5.2 Legal basis: legitimate interest. 

D. RECIPIENTS OF YOUR DATA 

TURISME DE BARCELONA CONSORTIUM informs you that in the event that you purchase a product through the TURISME DE BARCELONA online store, your data may be shared with the operator or business providing the service, whenever it is necessary in order to correctly provide the service. 

Additionally, on occasion, under current regulations or the existing contractual relationship, your data may be communicated to third-parties: 

  • Public Administrations related to our sectors of activity to request the contracted service or when stipulated by current regulations. 
  • State Security Forces, as determined by Law. 
  • Banks and financial institutions for processing the payment for the services offered. 
  • Other professionals in the legal, marketing and advertising fields, when such communication is required by law, or in order to carry out the services contracted. 

E. YOUR RIGHTS 

We inform you that at any time and without any cost you may exercise the following rights regarding your data: 

a. Right of access
b. Right to rectification or erasure
c. Right to restriction of processing
d. Right to transfer
e. Right to object
f. Right to withdraw your consent 

You may exercise these rights by sending an email to barcelonaturismedpo@herrero.es clearly indicating the right you wish to exercise. 

It may also be sent by mail to the Controller’s registered address, listed at the beginning of this Privacy Policy. You may withdraw your consent given to receive periodic commercial communications by clicking the link found in each communication under the title “Unsubscribe”. 

If you would like more information regarding your rights, you may contact the Data Protection Officer. 

Additionally, we inform you about the possibility to file a complaint before the competent Control Authority, in this case, the Spanish Data Protection Agency, particularly if you are not satisfied in having previously exercised your rights. You may contact the Spanish Data Protection Agency by phone at 901 100 099 and 912 663 517 or in person at their address: C/ Jorge Juan, 6, 28001 Madrid. 

F. SECURITY MEASURES 

In accordance with the current legal provisions on personal data protection, the Controller is in compliance with all the legal requirements under the GDPR for processing personal data, and explicitly complies with the principles detailed in Article 5 of the GDPR, ensuring the data is processed in a lawful, loyal and transparent manner for the interested party and the data is adequate, relevant and limited to what is necessary for the purposes for which they were collected. The CONTROLLER guarantees that they have implemented the appropriate technical and organizational policies to apply the security measures stipulated by the GDPR, with the goal of protecting the rights and liberties of the users and that they have been provided with the adequate information so that they may execute these rights. 

Last updated: May 2019