Last updated: 8 September 2026
myBCN offers small-group and private walking tours and experiences in Barcelona. This page explains what personal information we collect, why we collect it, and what we do with it. We have kept it short and in plain English. If anything is unclear, write to us at privacy@mybcn.es and we will answer.
Who we are
myBCN is the trading name of Matthias Stasiak, a self-employed tour operator based in Barcelona, Spain. For data-protection law (the EU General Data Protection Regulation and the Spanish LOPDGDD), Matthias Stasiak is the data controller for the information described on this page.
Contact: privacy@mybcn.es
What we collect and why
When you book a tour. We receive your name, email address, phone number (if you give one), the number of people in your group, the tour, the date and time, and any notes you add, such as accessibility needs or a child’s age. We use this to run your tour, confirm your booking, reach you on the day if plans change, and issue a refund if one is due. Bookings made on this site go through TuriTop, our booking system. Bookings made on GetYourGuide, Viator, Airbnb Experiences or similar marketplaces reach us through that marketplace, under its own privacy policy as well as ours.
When you pay. Card payments on this site are handled by Stripe. We never see or store your full card number. We keep the booking record and the payment confirmation for our accounts.
When you write to us. If you email us, message us through a marketplace, or use a contact form, we keep the conversation so we can reply and look back at it if you write again.
When you leave a review. If you accept our invitation to leave a review, your name (as you give it), your words and, if you choose, your photo or video are collected through Feedspace and may be shown on our website and social channels. You can ask us to remove a review at any time.
When you join our mailing list. If you sign up for news from myBCN, we store your name and email address in Brevo, our email tool, and send you occasional messages. Every message has an unsubscribe link, and unsubscribing takes effect immediately.
When you visit the website. Our site sets the technical cookies it needs to work. With your consent, given through the cookie banner, we also use Google Analytics to understand how the site is used, and advertising pixels from Google Ads, Meta (Facebook and Instagram) and TikTok to measure our adverts and show you relevant ones. You can refuse or withdraw this consent in the banner at any time; the site works without it.
Our own tools and Google
We use Google Workspace tools (Gmail, Google Calendar, Google Drive and Google Sheets) on our own company accounts to run the business, and some small in-house tools connect to those accounts through Google’s APIs. These tools work only on our own company mailboxes and files, for example to file our own bank statements or read booking confirmations sent to us. They never access a customer’s Google account, and they never request permission to your Google data.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Who we share information with
We share your information only with the services named above, and only as far as needed to do the job: TuriTop (bookings), Stripe (payments), the marketplace you booked through (if any), Feedspace (reviews), Brevo (mailing list), Google (our office tools) and SparkReceipt (our bookkeeping). We also share booking details with the guide who leads your tour and, for experiences with a partner host such as a wine tasting or a cooking session, with that host. We do not sell personal information. The advertising pixels described above run only with your consent.
Some of these services store data outside the European Economic Area, mainly in the United States. Where that happens, they do so under the EU-approved safeguards for international transfers.
How long we keep it
Booking, payment and invoice records are kept for the period Spanish tax law requires, currently up to six years after the year of the booking. Email conversations are kept for as long as they are useful to answer you and then deleted. Mailing-list details are kept until you unsubscribe. Reviews are kept until you ask us to remove them.
Your rights
You can ask us to show you the information we hold about you, correct it, delete it, limit how we use it, or send it to you in a portable format. You can object to our use of it, and you can withdraw consent you have given at any time. Write to privacy@mybcn.es. We will answer within one month. If you are not happy with our answer, you can complain to the Spanish data-protection authority, the Agencia Española de Protección de Datos (aepd.es).
Children
Children take part in our tours with their parents or guardians. We do not knowingly collect information directly from children under 14.
Changes to this page
When we change how we handle information, we update this page and the date at the top.