Privacy policy

1. Who is responsible

XNDR, SLU, NRT L-719706-H, Camí de la Planella 4, Ed. Baccara 11B, 2-4, AD400 Escàs, Andorra
Email: hello@barcelonacomedy.com

When you visit: Cloudflare, which hosts the site, receives your IP address and browser details with each request, so the page can be sent to you. We set no tracking cookies.
We count page views and clicks on booking links on our own server, as daily totals: the page, the link, the language, the kind of site you came from (for example a search engine) and your country. We set no cookie for it and store no IP address, no browser details and no ID, so the totals cannot be linked to you. Booking links pass through barcelonacomedy.com/go/ so the click can be counted, then take you straight to the venue or ticket site.
Newsletter form: your email address, the language and the page you signed up from, the time you agreed, your browser's user agent and a salted hash of your IP address.
Contact form: your name, your email address, your message, the language, the time and a salted hash of your IP address.
The hash is used only to limit how often one device can send a form. We do not store the IP address itself.
Your browser keeps one item in its local storage ("bc-consent") that remembers you closed the cookie notice. It stays on your device and we never receive it.
Some links to the Comedy Clubhouse carry a source tag (utm_source=barcelonacomedy.com and the page you came from). It tells the venue which page sent you. It holds no personal detail.

We use the form data to answer your message or to send you the weekly email, with your consent (GDPR art. 6.1.a). You can withdraw it at any time. We use the technical data to deliver the site, keep it secure and limit abuse, on the basis of our legitimate interest (GDPR art. 6.1.f). The same applies under the Andorran data protection law (Llei 29/2021).

Contact messages are kept for up to 12 months. A newsletter email address is kept until you unsubscribe, then deleted. The IP hash is deleted with the record it belongs to.
Cloudflare keeps the technical request logs for the periods it publishes in its own documentation.

Cloudflare, Inc. hosts the site and the database where the forms are stored, and acts on our behalf. It may process data in countries outside the EU and Andorra. We do not sell your data or pass it to anyone else. Venue sites you click through to (for tickets) are run by the venues and have their own policies.

You can ask for access to your data, correction, deletion, restriction, to object to its use, or to receive a copy, and you can unsubscribe from the email at any time. Write to us at the address in section 1.
You can also complain to the Spanish data protection agency (AEPD) or to the Andorran agency (APDA).