Logo

Privacy Policy

1. IDENTIFICATION AND CONTACT DETAILS OF THE DATA CONTROLLER

Ticket Management System SL, with Tax Identification Number B67624437, registered at Calle Balmes nº 32, Principal 2ª, C.P. 08007, Barcelona (Spain) and registered with the Companies House of (Barcelona) under Volume 47314, Page 29 (hereinafter, the "Owner"), is responsible for processing the data collected or generated as a result of access to, use of, and navigation on parkguell.barcelonatickets.org (hereinafter, the "User" or "Users" and the "Website" or the "Web", respectively).

The Owner informs Website Users through this privacy policy (hereinafter, the "Privacy Policy") about the processing and protection of their personal data that may be collected during browsing or when contracting services on the Website. The User's use of this Website implies acceptance of this Privacy Policy.

2. DATA COLLECTED

Visiting and browsing this Website does not automatically record data that identify Users by name. However, certain technical information is collected and recorded in the Owner's systems (for example, type of Internet browser, operating system, and the IP address from which the Website is accessed) to improve the User's browsing experience and the management of the Website. Likewise, the Website may use cookies and similar technologies whose use is subject to the Users' consent in accordance with the Cookies Policy.

Notwithstanding the foregoing, to access certain content or services offered on the Website the Owner may require specific personal data from the User (for example: name, surname, national identity card number or foreigner identity number, address, telephone number, mobile phone number, email address, or other data provided by the Users in the open fields of the forms on the Website). In such cases, the Owner will provide the User with the necessary information before processing their data.

If the User provides third-party data, the User declares that they have obtained the consent of the data subject or have sufficient legitimacy to provide such data, and undertakes to transfer to the data subject the information contained in this Privacy Policy, releasing the Owner from any liability in this regard. The Data Controller may, however, carry out the necessary verifications and adopt appropriate due diligence measures in accordance with applicable data protection regulations.

Likewise, the User guarantees that they are over eighteen (18) years of age and that the data provided are true, accurate, complete and up to date. The User is responsible for the veracity of all the data provided and must keep the information updated so that it corresponds to reality.

Finally, the User will be liable for any false or inaccurate information provided through the Website and for any direct or indirect damages that this may cause to the Owner or third parties.

3. OBLIGATION TO PROVIDE DATA

The data requested in the forms on the Website are, in general, mandatory (unless otherwise indicated in the required field) in order to comply with the purposes set out in section 4 below. Therefore, if such data are not provided or are incorrect or untruthful, the Owner will not be able to accept them.

4. PURPOSE OF THE PROCESSING

In addition to managing requests for information and content, and providing the services expressly requested by Users or with their consent, the Owner has a legitimate interest in using the information collected or generated for the following purposes:

  • To manage Users' contact requests with the Owner through the channels provided on the Website.
  • To manage the contracting of services carried out via the Website, including payment processing and order fulfilment.
  • To improve the Website, its management and its security.
  • To manage the sending of commercial communications regarding the Owner's services, unless the User indicates otherwise by ticking the corresponding box or objects to such processing.
  • To send commercial communications (offers, promotions, etc.) to the User by electronic and/or conventional means about products and services of third-party companies with which the Owner collaborates, provided the User consents by ticking the corresponding box.
  • To carry out studies and analyses to assess the relevance and use of the Website, including with anonymized information.
  • To handle requests, complaints and incidents received through the contact channels incorporated on the Website.
  • To analyze User behavior on the Website in order to detect potential cyberattacks.
  • To comply with the legal obligations that are directly applicable to and regulate the Owner's activity.

5. COMMERCIAL COMMUNICATIONS AND ADVERTISING

One of the purposes for which the Data Controller processes personal data provided by Users is to send electronic communications containing information about services, promotions, offers, events, or news that may be relevant to them. Such communications will be sent only to Users who have not previously expressed their refusal to receive them or who have expressly authorized them.

To carry out the foregoing, the Data Controller may analyze the data obtained to create User profiles that allow a more detailed definition of services that may interest the User.

If the User wishes to stop receiving commercial or promotional communications from the Owner, they may cancel the service by clicking the link provided in the body of such communications, by emailing support@barcelonatickets.org and indicating their refusal, by ticking the opt-out box in the data collection form, or by using the unsubscribe option included in each commercial communication.

6. LEGAL BASIS AND STORAGE

The processing of personal data provided by the User is carried out on the basis of the following legal grounds that legitimize it:

  • The User's voluntary access to and browsing of the Website.
  • The processing of data necessary for the performance of the contract between the User and the Owner for the services offered on the Website.
  • The User's request for information or for certain content or services.
  • Compliance by the Owner with legal obligations.
  • The legitimate interest in improving the Website and its security, and in carrying out studies and analyses on the Website's operation and use.
  • When the User gives consent or when the Owner's legitimate interest applies, the sending of information related to the service provided on the Website.

Data will be retained as long as there are legal obligations arising from the services or content requested by Users and, subsequently, until the extinction of legal or contractual liabilities that require their retention (for example, until expiry of liability arising from data protection or cybersecurity regulations). However, the Data Controller may retain the data, duly blocked, to comply with possible administrative or judicial responsibilities.

7. USER RIGHTS

Website Users may exercise the following rights at any time, under the terms established by applicable law:

  • The right of access to their personal data to know what is being processed and the processing operations carried out.
  • The right to rectify any inaccurate personal data.
  • The right to delete their personal data, where applicable.
  • The right to request restriction of processing of their personal data when the accuracy, lawfulness or necessity of processing is in doubt; in such cases data may be retained for the exercise or defence of claims.
  • The right to data portability, insofar as the legal basis for processing is the contractual relationship or consent.
  • The right to object to the processing of their personal data when the legal basis for processing is legitimate interest. In such cases we will stop processing the data unless we have compelling legitimate grounds or need the data for the formulation, exercise or defence of claims.
  • The right to withdraw consent at any time.

To effectively exercise these rights, the User must write to: support@barcelonatickets.org and prove their identity by providing their full name, a copy of their National Identity Card or equivalent identity document, a specification of the request, an address for notifications, and the date and signature of the applicant.

Likewise, the User may file a complaint with the Spanish Data Protection Agency (the competent supervisory authority in Spain), particularly if they are not satisfied with the response to their rights, by writing to C/ Jorge Juan, nº 6, 28001 – Madrid, or via the website: www.agpd.es.

8. COOKIES

The Owner will only use data storage and retrieval devices ('Cookies') when the User has given prior consent in accordance with the information shown in the User's browser pop-up window on first accessing the Website and in accordance with the Owner's Cookies Policy.

9. COMMUNICATIONS

Data will not be disclosed to third parties except, where appropriate, to competent authorities in the exercise of their functions. As an exception, the Website may use cookies from third-party providers in accordance with the Cookies Policy and with the User's consent.

10. SECURITY MEASURES

The Data Controller adopts the necessary measures to guarantee the security, integrity and confidentiality of the data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and, where applicable, Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, Royal Decree 1720/2007 of 21 December approving the implementing regulation of the Organic Law on Data Protection, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce.

Consequently, the Data Controller will treat the User's data as strictly confidential and will keep them secret in accordance with applicable legislation, adopting the necessary technical and organizational measures to guarantee data security and to prevent their alteration, loss, unauthorized processing or access, taking into account the state of the art, the nature of the data stored and the risks to which they are exposed.

11. CHANGES TO THE PRIVACY POLICY

To ensure that the Data Controller's data protection policies always comply with applicable legal requirements, the Data Controller reserves the right to make changes to this Privacy Policy to align it with the legal requirements in force at any given time.