Privacy Policy

Last updated: 9 July 2026

1. Data controller

The data controller responsible for the personal data collected through this website is:

Associació Barcelonina d’Art i Miniatures
Tax ID: G27622620
Registered address: Rambla Badal 190
Contact email: privacitat@barcelonartchallenge.com

2. What data we collect

Through this website, we may collect the personal data necessary to manage ticket purchases, participation in the event and communications related to Barcelona Art Challenge.

The data we may process includes:

Name and surname.
Email address.
Ticket purchase data, such as the type of ticket purchased, order number, receipt or purchase identifier.
Billing details, if required or if requested by the person.
Data necessary for ticket validation and access control at the event.
Data voluntarily provided when contacting the organisation.
Basic technical data associated with use of the website, such as IP address, browser information, technical logs and data necessary for the security and operation of the website.

There are no user accounts on this website. Therefore, we do not process data to create, maintain or manage registered user profiles.

3. Ticket purchases

Ticket purchases are managed through tools integrated into the website, such as Eventin and WooCommerce, together with PayPal as the payment gateway.

We use purchase data to manage the order, send confirmation, issue or validate tickets, control access to the event, resolve incidents and comply with applicable legal obligations.

The organisation does not store full bank card details or PayPal credentials. Payment is processed through PayPal, in accordance with its own terms and privacy policy.

4. Competition registration through Emperor

Registration of works for the competition is carried out through the Emperor platform.

Data entered directly into Emperor is managed by that platform in accordance with its own terms and privacy policy.

The Barcelona Art Challenge organisation may access the data necessary to manage the competition, validate registrations, organise categories, prepare the reception of works, coordinate jury evaluation, prepare the awards ceremony and communicate information related to participation.

We recommend reviewing Emperor’s privacy policy before registering.

5. What we use the data for

We process personal data for the following purposes:

To manage ticket purchases.
To send confirmations, tickets, receipts or necessary communications about the purchase.
To control access to the event.
To manage incidents, queries or requests received.
To coordinate registration and participation in the competition.
To manage the reception, identification, classification and return of works submitted to the competition.
To send important communications related to the event, such as schedule changes, logistical information, venue notices, instructions for participants or relevant information about the competition.
To comply with legal, tax, accounting or administrative obligations.
To maintain the security and proper functioning of the website.

If newsletters, promotional campaigns or communications not essential to the management of the event are sent in the future, the corresponding consent will be requested when necessary.

6. Legal basis for processing

The legal basis for processing data depends on each purpose:

Performance of a contractual or pre-contractual relationship: to manage ticket purchases, participation in the event and competition registration.
Compliance with legal obligations: for tax, accounting, administrative obligations or the handling of data protection rights.
Legitimate interest: for strictly necessary communications about the event, fraud prevention, website security, basic internal management and general documentation of the event.
Consent: when the person expressly grants it, for example for non-essential communications, newsletters, promotional campaigns or additional processing activities.

7. Data relating to minors

Ticket purchases must be made by an adult.

In the case of minors, ticket purchases, competition registration or any matter related to their participation must be carried out by their parent, legal guardian or a duly authorised adult.

The organisation will process only the data necessary to manage the minor’s ticket, identification, participation, registration, communication and safety in relation to the event or competition.

In the case of activities, categories or awards aimed at minors, the organisation may request the data strictly necessary to verify the age or corresponding category.

8. Photographs, videos and event images

During Barcelona Art Challenge, photographs and video recordings of the event may be taken for informational, documentary, promotional and dissemination purposes related to the association’s activity.

These images may be published on the official website, social media, communication materials, press notes, dossiers, event-related publications and Barcelona Art Challenge’s own channels.

The capture and publication of images will be carried out with the aim of respecting the dignity, privacy and rights of attendees. As a general rule, images used will be general images of the event, atmosphere, works, display cases, activities, awards ceremony and public participation.

In the case of images where a person appears as a clear main subject, especially if the person is a minor, the organisation will seek authorisation when necessary.

Anyone who does not wish to appear in images published by the organisation may notify us by writing to privacitat@barcelonartchallenge.com. The organisation will assess each request and, where appropriate, remove or avoid using such images on its own channels.

The organisation is not responsible for photographs or videos taken and published by other attendees, media, exhibitors, collaborators or third parties outside the association.

9. Who we share data with

We do not sell personal data to third parties.

Data may be processed by providers necessary to deliver the service, such as:

Hosting and website maintenance providers.
Ticket and order management tools, such as Eventin and WooCommerce.
PayPal as payment gateway.
Email or communication delivery tools.
Emperor platform for competition management.
Tax, accounting or legal advisors, if necessary.
Public administrations, courts or authorities where there is a legal obligation.

These providers must process only the data necessary to provide their services.

10. International transfers

Some technology providers may be located outside the European Economic Area or process data from other countries.

Where this occurs, we will seek to ensure that the processing is carried out with appropriate safeguards in accordance with applicable regulations, such as adequacy decisions, standard contractual clauses or other valid mechanisms.

11. How long we keep the data

We will keep the data for as long as necessary to manage the event, tickets, competition and related communications.

Data associated with purchases, billing, accounting or possible legal liabilities may be kept for the periods required by applicable regulations.

Data used for non-essential communications will be kept until the person withdraws their consent or requests to unsubscribe.

Images published for informational, documentary or promotional purposes may be kept for as long as they remain relevant for the historical or informational dissemination of the association’s activity, unless the person concerned requests their removal and such request should be granted.

Data managed directly by Emperor will be retained in accordance with that platform’s own retention policy.

12. Rights of data subjects

Any person may exercise their rights of access, rectification, erasure, objection, restriction of processing, portability and the right not to be subject to automated decisions by writing to:

privacitat@barcelonartchallenge.com

The request must clearly state which right the person wishes to exercise and allow the applicant to be identified.

A complaint may also be filed with the Spanish Data Protection Agency if the person considers that the processing of their data does not comply with applicable regulations.

13. Security

We apply reasonable measures to protect personal data against loss, unauthorised access, alteration or misuse.

However, no system is completely infallible. We therefore recommend that users use secure means, review the privacy policies of any external platforms involved and keep their devices protected.

14. Changes to this policy

We may update this privacy policy to adapt it to legal, technical or organisational changes.

The current version will be the one published on this page.