Privacy policy

1. Who controls your data

PartyKazu BCN is a nightlife concierge service in Barcelona. We register guests on the guest lists of partner nightclubs and arrange VIP tables. We operate partykazubcn.com and we are the data controller for the personal data described in this policy. This policy is written under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. What data we collect

• Guest list and VIP form data: your name, email address, phone number, the club and date you choose, the size of your group and whether you live in Barcelona.
• Marketing consent: if you tick the consent box, we add your email address to our list for invitations to future events.
• Technical data: the IP address and browser information sent with each guest list request, and the site or campaign that referred you.
• Communication data: the content of messages you send us by email or WhatsApp, and our replies, including conversations with our WhatsApp assistant (section 4).
• Website data: pages viewed, clicks, scroll depth, device and browser type, and session recordings, only after you accept the cookie banner. Text typed into form fields is masked before the recording leaves your browser.

3. Why we use it, and our legal basis

• To register you on the guest list or arrange your VIP table, send your confirmation and contact you about your night. Legal basis: steps you ask us to take and the performance of the service (Art. 6.1.b GDPR).
• To detect duplicate, automated or fraudulent requests. Legal basis: our legitimate interest in protecting the guest lists we manage for the clubs (Art. 6.1.f GDPR).
• To answer your questions by email or WhatsApp, including through our WhatsApp assistant. Legal basis: performance of the service or our legitimate interest in replying to you (Art. 6.1.b and 6.1.f GDPR).
• To send you invitations to future events. Legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw with the link in every email.
• Analytics and session recordings. Legal basis: your consent, given through the cookie banner (Art. 6.1.a GDPR).
• To establish or defend legal claims. Legal basis: our legitimate interest (Art. 6.1.f GDPR).

We do not sell your data and we do not use it for automated decisions that produce legal effects on you.

4. Our WhatsApp assistant

Messages sent to our WhatsApp number +34 686 53 39 39 (shown as "King Events") are answered first by an automated assistant that uses artificial intelligence. It answers questions about PartyKazu BCN guest lists and about the activities of Barcelona Pub Crawl by KING: how to book, meeting points, door rules and the status of a booking or registration. When it cannot answer, it gives you our team's WhatsApp number or alerts our team. You can ask to speak to a person at any time.

• What it processes: your phone number and WhatsApp profile name, the messages you send and the replies you receive, their delivery and read status, and the date and time of each message. If you send a voice message or an image, it is converted into text (a transcription or a short description) so the assistant can read it. The text is kept with the conversation.
• Your guest list and booking records: to answer questions about your registration or booking, the assistant looks up the records linked to the phone number you are writing from. A booking made under another phone number is only looked up if you give its booking code together with the email address used to make it.
• Legal basis: steps you ask us to take and the performance of the service (Art. 6.1.b GDPR), and our legitimate interest in answering enquiries and keeping a record of what we told you (Art. 6.1.f GDPR).
• Automated replies: the replies are written automatically and are not reviewed by a person before they are sent. The assistant cannot register you, change or cancel a registration or booking, and does not take payments. VIP tables, changes, refunds and complaints are handled by our team.
• When our team takes over: the assistant sends our team a short summary of your request and your WhatsApp number, and a member of the team continues the conversation.

How long we keep these conversations and the providers involved are set out in sections 5 and 7.

5. How long we keep it

• Guest list and VIP requests, with the technical data sent with them: 4 years after the date of the event.
• Conversations with our WhatsApp assistant: 12 months after the last message.
• Analytics data and session recordings: up to 12 months.
• Marketing list: until you withdraw your consent or ask to be removed.

After those periods we delete or anonymise the data, except where we have to keep it to defend a legal claim.

6. Cookies and analytics

We only set cookies if you accept them on the banner. The banner stores your choice in local storage as partykazu_cookie_consent. If you decline, PostHog keeps the session in memory only and it is reset when you close the tab. We do not use Google Analytics or any advertising pixel.

You can change your mind at any time by clearing your browser storage for this site.

7. Who we share it with

The clubs receive only the name on the list and the size of the group, not your contact details. We also use the following providers, each acting as a data processor under a contract with us:

• Supabase, for our database, hosted in the European Union (Frankfurt).
• Google, for a backup spreadsheet of guest list requests.
• Brevo (France), for the marketing list and email.
• PostHog, for analytics, on its European Union infrastructure.
• Vercel Inc. (United States), for website hosting, under the European Commission's standard contractual clauses.
• WhatsApp (Meta Platforms Ireland Ltd.), if you choose to contact us on that channel. On our assistant number, Meta transmits the messages on our behalf through the WhatsApp Business Platform. WhatsApp's own privacy terms also apply to your use of the app.
• Anthropic, PBC (United States), which provides the artificial intelligence model that writes the WhatsApp assistant's replies. It receives the conversation and the registration or booking information the assistant looked up, under the European Commission's standard contractual clauses.
• OpenRouter, Inc. (United States), which sends the voice messages and images you send to the WhatsApp assistant to Google's Gemini model to convert them into text, under the European Commission's standard contractual clauses.
• MAIS AI Agency (Portugal), our technology provider, which runs our guest list and messaging automations on servers in Germany.

8. Your rights

You have the right to access your data, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw a consent you have given at any time without affecting what we did before you withdrew it.

To exercise any of these, email info@barcelonapubcrawlbyking.com. We answer within one month. We may ask you to confirm your identity first.

If you believe we have handled your data badly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, at www.aepd.es, C/ Jorge Juan 6, 28001 Madrid.

9. Children

The clubs we work with admit guests aged 18 and over, and this website is not directed at children. We do not knowingly collect data from minors. If you believe a minor has given us personal data, write to us and we will delete it.

10. Security

Data is stored on servers in the European Union and access is restricted to the people who need it to manage the guest lists. The WhatsApp assistant's replies are generated by a provider in the United States, as described in section 7. If a breach affects your rights, we will notify you and the authority as the law requires.

11. Changes to this policy

We may update this policy. The current version is always at this URL, with the date of the last change at the top.

12. Contact

PartyKazu BCN · info@barcelonapubcrawlbyking.com · WhatsApp +34 665 605 282