Legal
Privacy Policy
Last updated: 19 October 2026 · All legal pages
At Barcelona Pub Crawl, accessible from barcelonapubcrawl.es, the privacy of our visitors and guests is one of our main priorities. This Privacy Policy explains what information we collect, how we use it, and the rights you have over it.
This policy applies to our online activities and to information collected in connection with bookings and events. If you have questions, contact us at [email protected].
Who we are
Barcelona Pub Crawl is the data controller for personal data processed through this Website and in connection with our events. Contact: [email protected], Barcelona, Spain.
Information we collect
- Bookings: when you buy a ticket, our booking provider (TicketingHub) collects your name, email address, phone number and payment details. Payment card data is processed by the payment provider and is never stored by us.
- Enquiries: if you contact us by email or WhatsApp, we receive your name, contact details, the contents of your message and any attachments.
- Website use: log data such as IP address, browser type, device, referring and exit pages, and timestamps, collected by our hosting provider to run and secure the site.
- Advertising and measurement (only if you accept): if you accept marketing cookies, Google Ads, which we load through Google Tag Manager, collects online identifiers such as cookie IDs, your IP address, device and browser information, the pages you visit on this site, the ad you clicked to get here and whether you went on to book. If you don't accept, these cookies are not set.
- Photos and video: we may photograph or film events for promotion. See the Terms & Conditions for how to opt out at check-in.
How we use your information
- To process and confirm your booking and send you the meeting point and event details (performance of a contract).
- To answer your questions and provide customer service (legitimate interests).
- To keep events safe, verify age and manage admission (legitimate interests and legal obligations).
- To operate and secure the Website (legitimate interests).
- To measure how well our Google Ads campaigns work and to show our ads to people who have visited this site (consent, given through the cookie banner).
- To send marketing emails or messages where you have opted in (consent). You can unsubscribe at any time.
- To promote our events using photos and video (legitimate interests).
- To detect and prevent fraud and to comply with legal obligations.
Who we share it with
We share personal data only with providers we need to run the service:
- our booking and payment provider (TicketingHub and its payment processor)
- our hosting, security and email providers (including Hostinger and Cloudflare)
- Google Ireland Limited, for Google Tag Manager and Google Ads, and only for advertising data if you have accepted marketing cookies. For some advertising processing Google acts as an independent controller under its own Privacy Policy.
- messaging services you choose to use (such as WhatsApp)
- partner venues where required for admission
We do not sell personal data.
International transfers
Some providers, including Google, may process data outside the European Economic Area, for example in the United States. Where they do, the transfer is covered by an adequacy decision such as the EU-US Data Privacy Framework, or by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
Booking records are kept for as long as required for accounting and tax purposes under Spanish law. Enquiries are kept for up to 12 months after the last contact. Marketing consent is kept until you withdraw it. Log files are retained for a limited period by our hosting provider for security purposes. Advertising cookies expire after the periods listed in our Cookie Policy, and you can delete them sooner in your browser.
Log files
Like most websites, we use log files. These record visitors' IP addresses, browser type, Internet Service Provider, date and time stamp, referring and exit pages and possibly the number of clicks. This information is used for administering the site and for security.
Cookies
Strictly necessary cookies keep the site secure and let you book, and they are always on. Marketing cookies from Google Ads are only set if you accept them in the cookie banner. You can change or withdraw your choice at any time, and the site and booking work the same either way. Details are in our Cookie Policy.
Third-party websites
Our Website links to third-party sites such as our booking checkout, social media and partner venues. Their privacy policies apply to those sites and we have no control over them.
Your GDPR data protection rights
Every user is entitled to the following:
- Access: request copies of your personal data.
- Rectification: request that we correct inaccurate or incomplete information.
- Erasure: request that we erase your personal data, under certain conditions.
- Restriction: request that we restrict processing, under certain conditions.
- Objection: object to our processing, under certain conditions.
- Portability: request that we transfer your data to another organisation or to you.
- Withdraw consent: at any time, where processing is based on consent. For cookies, use the "Change my cookie settings" button on this page or in our Cookie Policy. Withdrawing doesn't affect processing that took place before.
If you make a request, we have one month to respond. Email [email protected]. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
CCPA privacy rights
Under the CCPA, California consumers have the right to request that a business disclose the categories and specific pieces of personal data it has collected, to request deletion of that data, and to opt out of the sale or sharing of their personal data. We do not sell personal data. Advertising cookies are only set if you accept them, and you can refuse or withdraw that choice in the cookie settings. To exercise these rights, contact us; we have one month to respond.
Children's information
Our events are 18+ and our Website is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will remove it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. Changes are effective when posted on this page. Please review it periodically.
Contact us
Questions about this policy or your data: [email protected] or WhatsApp +34 600 540 440.