Privacy
The short version
We collect the minimum needed to answer you and to run a booking, we do not sell it, and there are no advertising trackers on this site.
What we collect
If you write through the contact form: your name, email, and whatever you type. If you book: the same plus the number of people and the date. Server logs record IP addresses for security, kept 30 days. The contact form uses Cloudflare Turnstile to detect automated abuse. The verification token and request data are sent to Cloudflare for validation; Cloudflare’s privacy policy applies.
Why we may keep it
To answer you and to provide the service you booked (performance of a contract), and to keep the invoices tax law obliges us to keep for four years.
Analytics
We use Umami on our own server and Google Analytics 4. Umami gives us aggregate visit counts without analytics cookies. Google Analytics is off unless you accept it; if you do, Google receives visit and device/browser information to prepare usage reports. Google’s privacy policy applies. You can refuse or withdraw consent at any time using Analytics settings in the footer.
Cookies
Cloudflare Turnstile processes verification data when you use the contact form; this widget does not enable pre-clearance cookies. If you accept analytics, Google Analytics may also set cookies such as _ga and _ga_<container>. Your analytics choice is stored in this browser and can be changed at any time from the footer.
Your rights
Ask us for a copy of your data, a correction, or its deletion, by writing to info@atouratbarcelona.com. If you are not satisfied you can complain to the Agencia Española de Protección de Datos, aepd.es.