Privacy Policy

Last updated: July 2026 In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), Veronica Tours Barcelona informs you of the following regarding the processing of personal data collected through this Site.

Data Controller

• Owner: Veronica Vergani
• NIF/DNI: Available upon legitimate request
• Address: Available upon legitimate request
• Email: info@veronicatoursbarcelona.com

What data we collect

• Identification and contact information provided through the Site forms: name, surname, email, telephone number.
• Data provided voluntarily in the message field (requests, preferences, allergies, or special needs indicated by the user).
• Browsing data collected through cookies and analytics tools (see Cookie Policy).
• Billing and payment information (bank details or bank transfer details provided for payment of services).

Purpose of processing

• Manage requests for information, reservations, and consultations.
• Send communications relating to the requested service.
• Manage invoicing, accounting, and fulfill tax and legal obligations arising from the contracted service.
• With your explicit consent, send the newsletter with news on tours and cultural events in Barcelona.
• Improve the Site through anonymous/aggregated statistical analysis (Google Analytics).

Legal basis

• Performance of a contract or pre-contractual measures (booking request/consultation).
• Data subject’s consent (contact form, newsletter subscription, non-technical cookies).
• The data controller’s legitimate interest in improving the service.

Data retention

The data will be retained for the time necessary to process the request and, subsequently, for the period required by applicable tax and administrative regulations (generally up to 5 years for tax obligations). Newsletter data will be retained until the user withdraws consent.

Recipients

The data will not be disclosed to third parties, unless required by law. Technical service providers (hosting, email, newsletter platform, Google Analytics) may access it as data processors, in compliance with the GDPR.

International Transfers

Some providers (e.g., Google) may process data outside the European Economic Area, always within the framework of the appropriate guarantees provided for by the GDPR (standard contractual clauses).

Rights of the Data Subject

The user may exercise their rights of access, rectification, erasure, limitation, opposition, and data portability at any time by writing to info@veronicatoursbarcelona.com . You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.

Minors

The Site’s services are not intended for minors under 14 without the consent of a parent or guardian.

Secure

The data controller adopts appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or alteration.