Privacy policy

Who is responsible for your data?

Tapas Tour Barcelona, based in Barcelona, Spain, is the data controller for personal data processed through this website and while providing our tours. In this policy, “we”, “us” and “our” mean Tapas Tour Barcelona.

Privacy enquiries and data-rights requests can be sent to info@tapastourbarcelona.com or by WhatsApp/telephone on +34 690 036 640.

Information we process

• Booking information: name, email address, phone number, selected tour, date, participant details, booking reference, payment status and information you add to the booking.
• Messages: your name, phone number and anything you include when you contact us through WhatsApp, email or telephone.
• Dietary and accessibility information: only when you choose to provide it so we can assess whether a tour or venue can meet your needs. This may reveal health or belief-related information.
• Technical information: IP address, browser, device, referring page, requested pages, timestamps and security logs generated when you use the website or booking service.
• Optional measurement information: page visits and advertising/conversion events, but only for the category you accept in our cookie settings.

We do not offer customer accounts on this website and we do not intentionally collect information that is unrelated to choosing, booking or receiving our services.

How and why we use information

To provide a booking or answer a request

We process booking and contact information to take steps at your request and perform our contract with you. This includes checking availability, taking or confirming a booking, delivering the tour, handling changes and providing customer support.

To meet legal obligations

We retain transaction and booking records where required for tax, accounting, consumer-protection, safety or dispute-handling obligations.

For legitimate business interests

We may use limited information to secure the website, prevent fraud, manage complaints and improve our operations, provided those interests are not overridden by your rights.

With your consent

Optional analytics and Google advertising measurement run only after you choose the relevant cookie category. We also rely on your consent when you voluntarily provide sensitive dietary, health or accessibility details. You can withdraw consent at any time without affecting earlier lawful processing.

Booking through Bókun

Our availability calendars and checkout are provided by Bókun, a Tripadvisor company. When you open the calendar or book, Bókun processes booking and technical information on our behalf and may connect to the payment provider shown during checkout. We do not receive your complete payment-card number.

Bókun may use necessary session storage to keep availability, checkout and the booking cart working. Read the Bókun privacy policy.

Contacting us through WhatsApp

The contact form on this website creates a pre-filled WhatsApp message in your browser. It is not submitted to our website server. If you continue in WhatsApp, the message, your phone number and related metadata are processed by WhatsApp and become available to our team so we can reply.

Your use of WhatsApp is also governed by the WhatsApp privacy policy. You can contact us by email instead if you prefer.

Google Maps meeting points

Tour pages show the meeting-point address without contacting Google. An interactive Google Map loads only after you choose the load-map button, or you can follow the external Google Maps link. When you do, Google receives technical information such as your IP address, browser and device details and may use cookies or similar technologies under its own terms.

Read the Google privacy policy.

Analytics, advertising and cookies

• Necessary: stores your privacy choice and supports Bókun booking, security and session functions. These cannot be disabled through our banner because the requested service cannot operate without them.
• Improve the site: loads Simple Analytics after permission to measure page use and identify broken or unclear journeys.
• Advertising measurement: loads Google Ads tags only after marketing permission, allowing us to measure future advertising campaigns and conversions.

We store your choice in your browser for up to 12 months. See the cookie policy for further details.

Who receives information?

We share information only when it is necessary with:

• Bókun and the payment provider used during checkout;
• guides, venues and tour partners who need details to deliver the booked experience;
• WhatsApp/Meta when you choose to use WhatsApp;
• Simple Analytics and Google for the optional category or interactive map you choose;
• hosting, security and professional service providers acting under appropriate obligations; and
• public authorities where disclosure is legally required.

We do not sell personal data.

International transfers

Some service providers may process information outside the European Economic Area. Where required, the relevant provider and we rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Provider privacy notices explain their specific locations and safeguards.

How long we keep information

• Booking and transaction records: generally up to six years where required for accounting or claims.
• Unbooked enquiries: generally no longer than 24 months after the last meaningful contact.
• Operational WhatsApp messages: for as long as needed to answer or manage the related booking.
• Cookie choices: up to 12 months, unless you change them sooner.

We may retain information longer where a complaint, legal claim or statutory obligation requires it, and delete or anonymise it when it is no longer needed.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent. Contact us using the details above. We may need to verify your identity before completing a request.

You also have the right to complain to the Spanish Data Protection Agency (AEPD), or the supervisory authority where you live or work.

Children and alcohol

We do not knowingly collect children’s information through this website without an appropriate legal basis or required parental authorisation. Alcohol is served only to guests aged 18 or over; identification may be requested. Tour-specific age and accompaniment requirements are shown during booking.

Security and policy changes

We use proportionate technical and organisational measures to protect information, but no internet service is completely risk-free. We may update this policy when our services, providers or legal obligations change. The latest version and effective date will always appear on this page.