Privacy policy

Data controller

TIBIDABO SOFTWARE S.L. (Tax ID B88693346), registered at Carretera C-251, Km. 5.6 – 08430 La Roca del Vallès (Barcelona), Spain, is the controller of the data you provide through the contact form. Data protection contact: [email protected].

What data we process

Through the form we collect your name, your email address and, if you provide them, your organisation, your profile, your city and your message. Along with them we record technical data about where the request comes from: the page language, the page you write from, the referring page (referrer) and, if present, campaign parameters (UTM).

To protect the form against automated submissions we use Cloudflare Turnstile, which analyses technical browser signals for no advertising purpose.

Purpose and legal basis

We use your data to answer your request and, only if you expressly agree, to send you news about Tibidabo. The legal basis is your consent, which you can withdraw at any time.

Retention and recipients

We keep your data for as long as the business relationship lasts or until you ask us to delete it. We do not share it with third parties unless legally required.

Our technology providers act as data processors: Cloudflare, Inc. (web hosting and handling of the contact form), Google Ireland Limited (Google Sheets, where we record contact requests) and Microsoft Ireland Operations Limited (company email, Microsoft 365). Some of them may process data outside the European Economic Area; in that case, transfers are covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by emailing [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

IP addresses

The website servers may automatically detect the IP address and domain name used by the user.

An IP address is a number automatically assigned to a computer when it connects to the Internet.

All this information is recorded in a duly registered server activity file which allows the subsequent processing of the data solely for statistical purposes, enabling knowledge of the number of page impressions, the number of visits to the web servers, the order of visits, the access point, etc.