Privacy
The short version
We collect the minimum needed to answer you and to run a booking, we do not sell it, and there are no advertising trackers on this site.
What we collect
If you write through the contact form: your name, email, and whatever you type. If you book: the same plus the number of people and the date. Server logs record IP addresses for security, kept 30 days. The contact form is protected by Google reCAPTCHA, which watches how you behave on that one page and reports it to Google in order to score you as a person or a bot; Google’s privacy policy and terms apply to that.
Why we may keep it
To answer you and to provide the service you booked (performance of a contract), and to keep the invoices tax law obliges us to keep for four years.
Analytics
We count visits with Umami, which runs on our own server. No cookies, no fingerprint that follows you from one site to the next, and nothing handed to Google or anybody else. Your IP address is never stored — only the country it points to. What is left is a tally: how many people opened a page, what language their browser speaks, which site sent them.
Cookies
There is exactly one, and only on the contact form: when you press Send, Google sets a cookie called _GRECAPTCHA so it can tell a person from a program. It lasts six months, it is never set if you do not send anything, and it neither follows you around nor feeds you ads. For analytics and advertising we set none at all — if that ever changed, a consent banner would appear before anything was stored and you could say no.
Your rights
Ask us for a copy of your data, a correction, or its deletion, by writing to info@atouratbarcelona.com. If you are not satisfied you can complain to the Agencia Española de Protección de Datos, aepd.es.