Privacy

Controller: CRD Brava Studio, S.L.
Tax ID (NIF): B93874113
Address: Gran Via de les Corts Catalanes, 210, 08004 Barcelona
Privacy contact: admin@bravastudio-granvia.es

This website does not create user accounts. When the build contains valid configuration and the visitor accepts optional measurement, Google Tag Manager (GTM) can load to run the tags approved in that container.

The hosting and delivery infrastructure may process limited technical data—such as IP address, date, requested resource and browser user agent—to serve and secure the website and diagnose incidents.

The GTM loader request also reveals to Google’s infrastructure the technical data needed to deliver the file, such as IP address, date, browser user agent and website origin. The first-party data layer is limited to consent signals, a technical timestamp, the GTM start event, clicks on WhatsApp and booking-app links, and the language es, ca or en; it does not include contact, booking, service or free-text data.

After you accept all cookies, we measure clicks on WhatsApp links through the whatsapp_click event and booking-app buttons through app_booking_click, using their position on the page and site language. A click does not mean a message was sent or a booking was completed.

With permission for optional measurement, we count visits to the preferences page and submissions acknowledged by SendBy. Isolated Google Analytics measurement receives only the fixed page path and whether the submission is pending confirmation or applied. It does not receive invitation links, tokens, contact details, form fields or individual channel decisions. A pending submission does not establish a confirmed subscription.

When you call or open Reservations, Google Maps or Instagram, you start a direct relationship with that service and its own privacy policy applies.

When you accept all cookies, content from Instagram (Meta) loads. Instagram receives technical data such as your IP address and browser and may use cookies. Necessary only keeps it unloaded. You can change your choice in the cookie controls; this removes the embedded content from the page but does not erase data or cookies Instagram has already received or stored. See Instagram’s privacy policy.

If you subscribe to news and promotions, we provide your email and, if you add them, your phone, first name, family name and language to SendByAninchi to process your request and manage your preferences. Signup requires confirmation through the emailed link. Phone is optional and does not authorize SMS or WhatsApp marketing. This choice does not change your app account status.

Strictly necessary technical processing is based on the legitimate interest in keeping the website operational and secure. Processing arising from a call or reservation will be based, as applicable, on pre-contractual measures, service performance, legal obligations or consent.

Loading GTM and any optional storage or measurement rely on consent. With no choice, or after selecting “necessary only”, the website does not request the GTM loader from Google.

Technical data will be retained only for the period needed for security and diagnostics under the actual hosting configuration. Technology providers acting as processors and public authorities may receive data where legally required.

Brava Studio decides whether and why GTM is used and is responsible for that website configuration. Google supplies the loader and may receive the request’s technical data after consent. See Google’s privacy policy and the GTM use policy.

Final tags, providers, storage names and periods, contractual roles, processing locations and safeguards for possible international transfers depend on the GTM account configuration and agreements. They must be confirmed before publication or tag activation; this source code does not determine them.

You may request access, rectification, erasure, objection, restriction and portability, and withdraw consent whenever consent is the legal basis. Use the privacy email shown above and provide proof of identity where necessary.

You may also lodge a complaint with the Spanish Data Protection Agency at aepd.es.

Technical and organisational measures proportionate to the risk will be applied. This policy will be reviewed whenever the website’s purposes, providers or features change.

GTM must not receive names, email addresses, phone numbers, free text, booking or service details, URLs containing personal values, or any other personal or sensitive data.