Who runs this site
This website is operated by Barcelona Ski Tours, a sole trader based in Barcelona, Spain. For any question about how we handle your data, email [email protected].
What information we collect
We collect, in different situations:
- Enquiry data. When you submit the enquiry form or email us: your name, email address, phone number if you provide one, and the content of your message. We also collect the preferred tour date, resort and number of skiers in order to answer the enquiry.
- Booking data. If you proceed with a booking, we additionally collect your Barcelona hotel address for pick-up and the names and (where legally required) nationalities of the skiers in your group.
- Payment data. Card payments are processed by Stripe, which handles the card data under its own privacy policy — we only see the last 4 digits of your card and the authorisation reference. For PayPal payments, PayPal processes the data under its own privacy policy. For SEPA bank transfers, we see the IBAN of the account used.
- Technical data. This website logs standard web-server data: your IP address, the time of request, the page requested, your browser's user agent string. These logs are retained for 30 days and are used only to diagnose technical problems.
What we don't do
- We don't run Google Analytics, Facebook Pixel, or any other third-party tracking script on this site.
- We don't send marketing emails. We will only contact you about your specific enquiry or booking.
- We don't sell, rent or share your data with marketing partners. Ever.
- We don't use cookies except for the standard session cookie required by the enquiry form's spam protection (this is deleted when you close your browser).
How we use your data
We use your contact information to answer your enquiry, confirm your booking, communicate about the tour (pick-up details, driver's phone number), and if necessary deal with aftermath (refunds, feedback). For legally required purposes, we use your booking data to issue a Spanish fiscal receipt and to comply with Spanish passenger-transport record-keeping rules.
How long we keep your data
Enquiry emails that don't become bookings are deleted after 12 months. Booking records are kept for seven years from the date of the tour, as required by Spanish fiscal law. Payment records are kept for the same period. Web-server logs are kept for 30 days.
Who sees your data
- The driver assigned to your tour sees your name, pick-up address, phone number and preferred resort.
- Our bookkeeper, who issues the invoice, sees your name, address and payment reference.
- Spanish fiscal authorities, if they request to see our records during a tax audit.
- Payment processors (Stripe, PayPal) see the data you give them directly.
- Hosting provider sees server logs as described above.
That's the full list. No one else sees your data.
Your rights under GDPR
If you are an EU/EEA resident, you have the right to request access to your data, correction of any inaccuracies, deletion of your data (where legal retention rules allow), and portability of your data to another operator. You can exercise any of these rights by emailing [email protected]. We will respond within 30 days.
You also have the right to complain to the Spanish data protection authority (Agencia Española de Protección de Datos, aepd.es) if you believe we have handled your data unlawfully.
Updates to this notice
If we materially change how we handle data we will update this page and date-stamp it at the top. We don't notify every past customer about every edit, so if you care, check back here.