Privacy
Who is responsible for your information?
Data controller: La Casa de Canja
Address: Carrer de Gelabert 32, 08029Barcelona
Contact email: [email protected]
Information we collect
The contact form asks for your name, email address, preferred language, subject and message. Name, email and subject are required. You can choose English or Spanish and leave the message blank.
The membership request form asks for your name, email address, preferred language, intended visit date and an optional message. It also requires a mobile phone number, so we can text you a confirmation link. Without the required fields, we cannot process the form.
When you send a form, we also receive your IP address, your browser details and information that helps us stop duplicate and automated submissions. We keep the details you send, together with a record of the messages we send you about your request and of your confirmation.
The site stores a consent record in your browser: your cookie choices, a random consent ID, language and consent timestamps. Every page also loads Google Analytics, which sets its own cookies, unless you turn it off in the cookie settings; the cookie policy lists them.
Why we use it
We handle membership requests and their confirmation messages to take steps at your request before membership, under Article 6(1)(b) of the GDPR. These messages help us organise your requested visit.
We answer contact messages on the basis of our legitimate interest in responding to enquiries. We use spam checks and limits on repeated submissions on the basis of our legitimate interest in protecting the forms from abuse, under Article 6(1)(f) of the GDPR.
We show a Google map on the home and contact pages on the basis of our legitimate interest in helping visitors find the club, under Article 6(1)(f) of the GDPR. The essential cookie that remembers your cookie choice does not require consent under Spain’s LSSI.
Email and SMS confirmation
Both forms send a notification to the club. Contact messages also trigger an automatic email reply. Membership requests trigger a request-received email and a text message containing your confirmation link.
We may email you a reminder to confirm, a notice if the request is not confirmed by its deadline, a confirmation email after verification and a visit-day reminder. You or authorised staff can request another confirmation text. These are messages about your request.
Spam protection
Cloudflare Turnstile runs on the contact and membership forms to check for automated submissions. Your browser connects to Cloudflare for this check, and Cloudflare receives your IP address.
How long we keep it
Requests are kept until club staff delete them. There is no automatic deletion based on age. Deleting a request does not recall emails or texts already delivered.
The cookie that remembers your choices expires after 182 days.
Who receives it
Authorised club staff can read requests. We use service providers to run the website and to send emails and text messages on our behalf.
When the map on the home or contact page loads, your browser connects to Google. Google receives your IP address, your browser details and the address of the page. Opening the Google Maps link takes you to Google’s service.
Google Analytics runs on every page unless you turn it off in the cookie settings. Your browser connects to Google, which receives your IP address, your browser details and the pages you visit.
Your choices and rights
Under the GDPR and Spain’s Organic Law 3/2018 (LOPDGDD), you can request access to your personal data, correction of inaccurate data, erasure, restriction of processing and portability, where the conditions for those rights apply. You can object to processing based on legitimate interests.
To exercise your data rights, email [email protected] and tell us which right you want to exercise.
You also have the right to complain to the Agencia Española de Protección de Datos (AEPD) . For the cookies this site uses, read our cookie policy.
Contact
For questions about your information, contact the club about privacy at [email protected].