Last updated: September 1st, 2026
Version: 1
1. Data Controller
The data controller responsible for the processing of personal data is:
Legal Name / Owner: Mario Alejandro Nión Celio
Trade Name: Ride Experience Barcelona
Tax ID (NIF): X4639504J
Registered Address: C/ Vicenta Escoda 34, 08840 Barcelona, Spain
Email:
Phone / WhatsApp: +34 608 78 18 89
Website: rideexperiencebarcelona.com
Personal data will be processed in accordance with the General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 (LOPDGDD), and any other applicable data protection legislation.
2. Personal Data We Collect and Process
Depending on your interactions and relationship with Ride Experience Barcelona, we may process:
Identification and contact details;
Information provided in inquiries, contact forms, and booking requests;
Data required to manage bookings, payments, and the provision of the Ride;
Functional information necessary to verify that the passenger can safely take part in the experience;
Emergency contact details;
Data concerning minors and their legal guardians, where applicable;
Communications regarding the booking and service;
Photographs taken during the experience;
Technical and browsing data derived from website use.
We apply the data minimization principle, requesting solely the data that is adequate, relevant, and strictly necessary for each intended purpose.
As a general rule, we do not request medical records, diagnoses, or detailed health records. To assess safe participation, we prioritize functional information. Should processing health-related details become strictly necessary under exceptional circumstances, it will be kept to the absolute minimum and handled solely on an appropriate legal basis recognized by the GDPR.
3. Purposes and Legal Bases for Processing
We process your personal data primarily for the following purposes and under the following legal bases:
Handling inquiries and requests for information: Based on pre-contractual measures requested by the data subject, or our legitimate interest in responding to communications voluntarily submitted to Ride Experience Barcelona.
Managing booking requests and delivering the service: Including verifying availability, executing contracts, handling modifications, cancellations, operational notifications, safety procedures, and incident management. The primary legal bases are pre-contractual measures, the performance of a contract, and, where applicable, compliance with statutory legal obligations.
Processing payments, billing, and accounting obligations: Based on the performance of a contract and compliance with legal, tax, and administrative obligations.
Safety and emergency response: In exceptional cases, processing data necessary to protect the vital interests of the passenger or third parties.
Managing the participation of minors: Where applicable under strict conditions, verifying and recording parental or legal guardian consent.
Capturing and delivering souvenir photos included in the ride: As an integral component of the agreed service. Using identifiable photos for advertising, social media, or promotional purposes requires specific, voluntary, and separate consent.
Website security, protection, and performance: Preventing spam and fraudulent activity, and—where appropriate consent has been granted—compiling usage statistics and tracking marketing performance.
Legal defense: Retaining relevant data to resolve claims, dispute resolutions, and establish, exercise, or defend legal rights.
4. Communications and WhatsApp
We may use the contact details provided to answer inquiries and maintain operational communication regarding requests, bookings, and Rides via email, phone calls, or WhatsApp Business.
These communications may cover availability, contracts, payments, schedules, meeting points, weather conditions, route adjustments, safety guidelines, photographs, or other operational details about the experience.
Using these channels for operational notices does not constitute an opt-in for marketing communications.
Ride Experience Barcelona may occasionally send past clients updates on Rides, news, offers, or services similar to those originally booked, provided this is permissible under applicable regulations. Recipients may easily opt out at any time at no cost. Individuals who have not completed a booking will not receive commercial communications unless prior consent was explicitly granted.
5. Photography and Image Rights
Photographs may be taken during the Ride as part of the overall experience. Passengers may state at any point that they prefer not to be photographed.
Selected photographs may be temporarily stored on cloud platforms to facilitate delivery to the client and will be removed once their delivery purpose is fulfilled.
If Ride Experience Barcelona intends to use any identifiable photograph on its website, social channels, ads, or marketing materials, specific and separate consent will be requested beforehand. Such consent may be withdrawn at any time without affecting the lawfulness of any use carried out prior to withdrawal.
Authorizing a minor to take part in a Ride does not constitute authorization to use their likeness for marketing or promotional purposes.
6. Service Providers, Third Parties, and International Transfers
Ride Experience Barcelona does not sell personal data, nor do we disclose it to third parties for independent marketing purposes.
To deliver and manage our services, we work with professional and technology service providers, including web hosting, email, messaging, payment gateways, cloud storage, website security, web analytics, and digital advertising.
Current and planned service providers include Webempresa, WhatsApp/Meta, Stripe, Google, Apple/iCloud, and Cloudflare, depending on the service utilized.
These providers process only the data strictly required to deliver their respective services and are bound by their own legal obligations and data protection safeguards.
Certain technology vendors may process data outside the European Economic Area (EEA). Whenever international transfers occur, they are conducted through transfer mechanisms recognized under the GDPR, such as adequacy decisions, the EU-U.S. Data Privacy Framework (where applicable), standard contractual clauses (SCCs), or other adequate safeguards.
Data may also be disclosed to public authorities, regulatory bodies, insurers, law enforcement agencies, or courts when required by law, necessary for incident handling, or required to exercise or defend legal claims.
7. Data Retention Periods
Personal data is retained only for the duration necessary to fulfill the purpose for which it was gathered, and subsequently for statutory limitation periods to address potential legal or administrative liabilities.
Operational data related to a Ride is deleted once no longer required.
Souvenir photos intended for client delivery are retained for a limited time.
Contractual, tax, and accounting documents, along with signed authorizations, consents, and incident/claim records, may be kept for the retention periods mandated or permitted by applicable law.
When data is retained for statistical purposes, it is processed on an aggregated or anonymized basis so that individuals cannot be identified.
8. Third-Party Data and Minors
When an individual books on behalf of other passengers, we may collect the minimal necessary information to arrange their participation. The person providing third-party data must ensure they have legitimate grounds to share it, and that the information is accurate and relevant to the booking.
Where a minor participates under the exceptional criteria set forth in our Terms of Service, we collect only the minimum data required to verify parental authorization and coordinate safe participation.
We do not store copies of government-issued identity documents unless strictly necessary to verify identity in exceptional cases or comply with a statutory obligation.
9. Cookies, Analytics, and Advertising
Our website may employ technical cookies necessary for core functionality and security, as well as analytics and advertising measurement tools subject to prior consent where legally required.
Detailed information on the technologies used, providers, purposes, and options to accept, reject, or configure cookie preferences can be found in our Cookie Policy.
10. Your Rights
Under applicable data protection regulations, you have the right to request access to, rectification, or erasure of your personal data, as well as the restriction of processing, objection to processing, and data portability. You also have the right to withdraw previously granted consent at any time by writing to:
Where reasonable doubt exists regarding the identity of the person making the request, we may request additional information strictly necessary to confirm identity.
Withdrawing consent will not affect the lawfulness of processing carried out prior to withdrawal.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) at www.aepd.es if you believe your personal data has not been processed lawfully.
11. Security and Policy Updates
Ride Experience Barcelona implements appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, disclosure, or unlawful processing.
This Privacy Policy may be updated to reflect changes in our services, service providers, tools, or statutory legal obligations. The version currently in effect will always be published on this website, marked with its date of last update.