This notice explains how Travel Brilliant SL uses personal data when you visit www.bestbarcelonatour.com, send us an enquiry, contact us, or book and pay for one of our experiences. It follows the EU General Data Protection Regulation (GDPR) and Spanish data protection law.
Who is responsible for your data
The controller is Travel Brilliant SL, Carrer de la Comtessa de Sobradiel 1, 08002 Barcelona, Spain. Email info@bestbarcelonatour.com, phone +34 932 49 41 23.
What we collect and why
Enquiry form
When you use the form on our contact page we receive your name, email address, the experience you are asking about, and, if you give them, your preferred date, group size and message. We use them to answer you and, if you book, to arrange your experience. The form also sends the page you wrote from and how you found us (for example the campaign tags or ad click ID in the link you arrived from), so we know which pages and ads bring in enquiries. Enquiries arrive by email. Our server keeps a technical log of form submissions without names or email addresses.
Recipe emails
If you ask us to email you the recipe on our paella recipe page, we use your email address only to send you that one email, with a link to the recipe and to our Google review page. We do not add you to a mailing list or send you anything else. A copy of the request, with the page you came from and how you found us, arrives in our inbox so we know the email went out. Our server keeps a technical log of these requests without email addresses.
Bookings and payments
Bookings and payments made in the booking calendar are handled by our booking provider, Bókun. At checkout you give your name, email address and phone number, plus any details the booking asks for, and you pay through the payment service shown at checkout. We receive your booking details so we can run your experience and contact you about it. We do not receive or store your full card details. Sometimes we send a payment link from Stripe, for example for a group or private booking. If you pay through it, Stripe processes the payment and we receive confirmation of it.
Phone, email and WhatsApp
If you call us, email us, or write to us on WhatsApp, we use your number or address and your messages to answer you and to manage your booking. WhatsApp is a service of WhatsApp/Meta, and its own terms and privacy policy apply to messages sent through it. Messages you start from our site include a short reference code that tells us which page you wrote from.
Website measurement and ads
We use Google Analytics 4 to understand how the site is used and how many visits turn into enquiries and bookings, and to measure how our Google Ads campaigns perform. Google’s analytics and advertising cookies are only set if you accept them in the cookie banner. Until then Google receives only limited signals without cookies. The site also remembers in your browser how you first found us (for up to 90 days) and which set of tour photos you were shown. Details are in the cookies section of our terms of service.
Server data
Like any website, our hosting servers process your IP address and basic browser information to deliver the pages and keep the site secure.
Legal bases
- Contract (Art. 6(1)(b) GDPR): to answer your booking questions, take your booking and payment, and run the experience you booked.
- Legitimate interests (Art. 6(1)(f)): to answer general enquiries, to understand which pages and campaigns bring in enquiries, to keep the site secure and prevent spam and fraud, and to run our business.
- Consent (Art. 6(1)(a)): to email you the recipe when you ask for it, and for Google Analytics and Google Ads cookies, which you can accept or reject in the cookie banner and change at any time.
- Legal obligation (Art. 6(1)(c)): to keep accounting and tax records.
Who we share data with
We share personal data only as far as needed, with service providers that process it for us:
- Bókun: booking calendar, checkout and booking management.
- Stripe: payment links.
- Google: Google Analytics 4 and Google Ads.
- WhatsApp (Meta): if you contact us on WhatsApp.
- Our email provider: to receive and answer emails and enquiries.
- Our website host: to run this website.
- The guides, skippers and venues who deliver your experience, where they need your booking details.
- Our accountants and advisers, and public authorities where the law requires it.
We do not sell personal data.
Transfers outside the EU
Some providers, such as Google, Stripe and Meta, may process data outside the European Economic Area. Where they do, the transfer is covered by safeguards recognized under the GDPR, such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep data
We keep enquiries and booking details for as long as we need them to answer you and run your booking, and booking and payment records for as long as Spanish accounting and tax law requires. We delete recipe email requests within 12 months. Campaign and photo-test information in your browser expires after 90 days. You can delete it at any time by clearing your browser storage.
Your rights
You can ask us for access to your personal data, and to correct it, delete it, restrict or object to its use, or receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time, which does not affect what was done before. To use your rights, email info@bestbarcelonatour.com. You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).
Changes
If we change this notice, we will post the new version on this page with a new date.
Contact
Travel Brilliant SL, Carrer de la Comtessa de Sobradiel 1, 08002 Barcelona, Spain. info@bestbarcelonatour.com · +34 932 49 41 23.