Legal · Data

Privacy Policy

This policy explains how Bilbao Museums Guide S.L. handles personal data under Regulation (EU) 2016/679 (the GDPR) and Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD).

1. Data controller

The controller is Bilbao Museums Guide S.L., Calle Iparraguirre 12, 3º izquierda, 48009 Bilbao, Bizkaia, Spain, CIF B48912349, registered in the Registro Mercantil de Bizkaia, Tomo 5842, Folio 118, Hoja BI-64 271. Data protection enquiries may be sent to [email protected].

2. What we collect

We process the data you choose to send us through our contact form, namely your name, your email address, the subject of your message and its content, together with the consent you give. We also process limited technical data, such as the pages you visit and the type of device and browser you use, by means of analytics software.

3. Why we process it

Contact data is processed to answer your enquiry and to keep a record of editorial corrections. Technical data is processed to understand how the site is used and to improve it. Our lawful bases are your consent, our legitimate interest in operating and improving an informational website, and, where relevant, compliance with legal obligations.

4. Analytics and cookies

We use analytics tooling, including Google Analytics, to measure traffic in an aggregated form. This may involve cookies and similar technologies. Details of the cookies used, their purpose and their duration are set out in our Cookie Policy.

5. Retention

Enquiries are kept for as long as needed to resolve them and for a reasonable period afterwards, after which they are deleted. Aggregated analytics data is retained for the period configured in the analytics service.

6. Recipients

We do not trade in personal data. Data may be accessible to service providers who host the site or provide analytics, acting as processors under contract. Where a provider operates outside the European Economic Area, transfers rely on the safeguards required by the GDPR.

7. Your rights

You may request access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time. Write to [email protected], or by post to the address above. You may also lodge a complaint with the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. No method of transmission is perfectly secure, and we act promptly if an incident occurs.

9. Children

This site is not directed at children, and we do not knowingly collect their data through the contact form.

10. Changes

We may update this policy. The current version is always published on this page.