The use of this website and the use of its forms requires the acceptance of the processing of user’s personal data in accordance with this privacy policy, including the collection of access data and the shipment of commercial information electronically.
Data controller and contact information
The data controller is: SANTA ESGLÉSIA CATEDRAL METROPOLITAN BASILICA OF BARCELONA (hereafter, CATEDRAL DE BARCELONA).
Address: C/SANT SEVER, 9, 08002-Barcelona.
Contact details of the data controller: 933 428 260 Email info@catedralbcn.org
Contact details of the data protection officer: dpd@catedralbcn.org
Data collected
Depending on the services used through the website and the relationship that we maintain with the different users, it will be necessary to process the following information:
- Identification and contact details (name, surname, DNI, telephones, e-mail, address, IP, etc.).
- Browsing data (access data; browser data, page accessed, IP, country).
- Purchases, transactions and use of our services.
- Any personal information (birthday, etc.).
In order to comply with any of our forms, we will provide personal determinations indicated as the obligations, which are processed in accordance with the purposes established below.
Purposes of the processing
The collected data will be processed according to the following purposes:
| FINALITAT O GRUP | DETAILED INFO |
| Access and management of the website | Provide access to online contents and apply measurements aimed at the safety of the web lake; To carry a record of visits to statistical effects. |
| Ticket sales and management of the service | To manage the ticket sale to visit the Cathedral, as well as the management of the order and the billing. |
| Donations (Fes-te amic de la Catedral de Barcelona) | Management of the reception of monetary donations that users can contribute through the apartment “Fes-te Amic de la Catedral de Barcelona” |
| Requests and contact | Attend to your requests and requests through the use of different contact forms, including through internet-enabled channels.
|
| Newsletter | Shipment of information about the events and services of the Cathedral electronically.
|
| Push notifications | Activation of “Push” notifications using the browser used by the user.
|
Legal basis
| FINALITAT O GRUP | BASIS OF LEGITIMACY |
| Access and management of the website | Legitimate interest of the data controller for providing access to the website. |
| Ticket sales and management of the service | The execution of a contract and the fulfilment of our legal obligations.
|
| Donations (Fes-te amic de la Catedral de Barcelona) | The execution of a contract and the fulfilment of our legal obligations.
|
| Requests and contact | We process your data based on our legitimate interest to fulfil your requests and engage with users to build a community. We understand that this processing is carried out based on your request or voluntary interaction with our channels, so it is beneficial for both parties since we can serve you properly and meet your expectations.
|
| Newsletter | The acceptance and consent of the data subject manifested through the explicit request to the comunicacio@catedralbcn.org.
In order to maintain a relationship with you, we will have a relationship based on our legitimate interest in sending commercial communications to our members or contacts when there is a contractual relationship and in relation to similar services to contracts. |
| Push notifications | The consent of the data subject, manifested through the acceptance of the notification of the navigator. |
Regarding the consent given by minors, it can only be based on when they are over 14 years old, since otherwise the consent of the holder of parental authority or guardianship will be necessary.
We remind you that you have the right to revoke the consent given at any time, for any processing you have given your consent to.
We inform you that to revoke the consent given regarding “Push” notifications you must follow the following instructions:
- Chrome: https://support.google.com/chrome/answer/3220216?hl=es&co=GENIE.Platform%3DAndroid
- Firefox: https://support.mozilla.org/es/kb/notificaciones-push-en-firefox
- Edge: https://support.microsoft.com/es-es/microsoft-edge/administrar-notificaciones-de-sitios-web-en-microsoft-edge-0c555609-5bf2-479d-a59d-fb30a0b80b2b
- Safari: https://support.apple.com/es-es/guide/safari/sfri40734/mac
Recipients and International data transfers
Recipients:
- CATEDRAL DE BARCELONA.
- REDSYS: provider of digital payment services.
International transfer (outside the European Economic Area) is not foreseen, except for storage purposes, and in any case based on the existence of an adequacy decision, as well as adequate guarantees.
Retention periods
- Access and management of the web page: during the time necessary to provide access to the services or fulfil the purposes indicated.
- Ticket sales and service management: during the time necessary for the execution of the contract or our relationship, and as a minimum, during the time required by commercial and tax regulations in compliance with legal requirements.
- Donations: during the time established by the tax regulations in compliance with our legal obligations.
- Requests and contact: during the time strictly necessary to attend the requests and manage our community.
- Newsletter: while the consent is valid or while you don’t require the deletion of the data or the opposition to the processing.
Data protection rights
The data subjects have the right to: access, rectify and delete their data; to request the portability of the services; to oppose the processing or to request its limitation; withdraw the consent given, if it is necessary.
For this they can send their request in writing or by email to the address of the person in charge, including the reference “Data Protection”.
To facilitate the identification, we recommend the data subjects to attach to the request a copy of his ID card or passport, or any other document that allow the identification.
The data subjects can also make a claim before the Data Protection Control Authority.
Veracity and update
The user must fill in the forms with true, accurate, complete and current data. The user will not enter data corresponding to another person; CATEDRAL DE BARCELONA will presume that the data have been facilitated by the owner of these events. The user will be solely responsible for any damage, direct or indirect damage that you can cause to any person due to filling in the form with false, inaccurate, incomplete or not updated data or relating to another person.
The user must communicate any changes in the proportional data in order to keep their data properly updated.
Information security
CATEDRAL DE BARCELONA has presented the measures legally required for the protection of personal responsibilities; Besides has adopted all the technical provisions to the use of the web to avoid loss, misuse, alteration, access or theft of personal data provided by web users. The user will take into account, however, that Internet security measures are not absolutely inviolable.
Minors
CATEDRAL DE BARCELONA forbids the use of this website to individuals under 14 years, unless specific consent has been given by the parents of guardians.
Only adults over 18 years are allowed to purchase goods or services on-line.
Minors are not allowed to provide with data about other household members (like the title or job of their parents, economic data, sociological characteristics or any other kind of information) without the consent of the data subjects themselves.
Web analytics
This website deploys web analytics in order to gain some understanding on how user search for, access and navigate it. These analytics can entail the collection of personal data like the user IP address, connection location, browsing software and hardware features, etc. This information is not associated to the user and is exclusively used for statistical analysis.
Use of third-party functions and plug-ins
This website may deploy functions and plug-ins provided by third parties. These functions serve several purposes like: third-party web analytics; third-party maps; third-party video streaming; sharing contents in social networks; etc.
A function or plugin provided by a third party establishes a direct connection between the user browser and internet domains owned by the third party, allowing to download and execution of the function.
Most third-party plugins collect information about the websites visited by the user in order to know his or her data interests and to provide targeted advertisements.
Use of the Google Analytics function provided by Google, Inc.
This website deploys analytical functions provided by Google Inc (1600 AMPHITHEATRE PARKWAY, MOUNTAIN VIEW, CALIFORNIA, USA) in order to understand how user search for, access and navigate it. These analytics can entail the collection of user activity tied to his or her IP address. When the user loads this website, the user browser makes a connection to Google domains like google.com in order to record the user access to the website. Google Analytics makes use of permanent cookies to create anonymous analytics about this website, according to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en. The user consent for the processing performed by Google is implied from the use of this website.
Use of functions provided by Google, Inc.
This website deploys functions provided by Google Inc (1600 AMPHITHEATRE PARKWAY, MOUNTAIN VIEW, CALIFORNIA, USA) like Youtube videos, maps and social buttons “+1”. These functions can entail the collection of user activity tied to his or her IP address. When the user loads this website, the user browser makes a connection to Google domains like google.com enabling Google to know that the user is accessing the website. Google collects usage data for several purposes including targeted advertisements according to Google’s privacy policies http://www.google.es/intl/en/policies/privacy/. The user consent for the processing performed by Google is implied from the use of this website.
