Privacy
Policy
Last updated: 11/09/2026 · In compliance with EU Regulation 2016/679 (GDPR) and applicable Spanish data protection law.
1. Data Controller
| Name | Gerard Riera Luxury Concierge |
|---|---|
| Trading name | Gerard Riera / GR Team Barcelona |
| gerard_riera@hotmail.com | |
| Phone | +34 648 092 263 |
| Website | gerardriera.com |
2. Data We Collect
- Contact form: name, surname, email, phone, event date, number of people, city, requested service and message.
- Browsing: technical access data (IP, browser, pages visited) for statistical analysis.
- Communications: when you contact us by email, WhatsApp or Instagram.
- Cookies: as detailed in section 7.
3. Purpose & Legal Basis
| Purpose | Legal basis |
|---|---|
| Manage service requests and bookings | Performance of contract (Art. 6.1.b GDPR) |
| Respond to enquiries | Legitimate interest (Art. 6.1.f GDPR) |
| Send information on similar services | Legitimate interest / Consent |
| Statistical analysis of visits | Legitimate interest (Art. 6.1.f GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c GDPR) |
4. Data Retention
- Contact and booking data: during the commercial relationship and up to 3 years after its end.
- Billing data: 5 years under Spanish tax law.
- Browsing data: maximum 13 months.
5. Recipients
Your data may be shared with: technology service providers (hosting, email); venues and service partners (clubs, restaurants, vehicle companies) only as necessary to fulfil your booking; and Public Authorities when legally required. We do not sell data to third parties.
6. Your Rights
Know what data we process.
Correct inaccurate data.
Request deletion of your data.
Restrict processing in certain cases.
Receive your data in a structured format.
Object to processing based on legitimate interest.
To exercise your rights, email gerard_riera@hotmail.com. We will respond within 1 month. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
7. Cookies
| Type | Name | Purpose | Duration |
|---|---|---|---|
| Technical | PHPSESSID | Session management | Session |
| Preferences | gr_cookie_consent | Remember cookie preference | 1 year |
| Analytics | _ga, _gid | Visit statistics (Google Analytics) | 2 years / 24h |
8. Security
We apply appropriate technical and organisational measures: HTTPS/TLS encryption, access control, hashed passwords and regular backups.
9. Minors
Our services are intended for persons over 18. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this policy to reflect legal changes or changes to our services. The current version will always be available on this page.