Privacy Policy

Privacy Policy

Last updated: 6/10/2026

1. Introduction

This Privacy Policy explains how personal data is collected, used and protected when you visit or use https://www.teteolist.com (the «Website») and our related services: guestlists, VIP tables, birthday and event bookings, newsletters and communications through messaging channels. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Law 34/2002 on Information Society Services (LSSI-CE).

By using the Website you confirm that you have read this Privacy Policy. Where we need your consent, we will always ask for it separately.

2. Data Controller

• Name: NIGHTLIFE WORLD SL
• Tax ID (NIF): B- 63041198
• Address: calle Torrent de l’Olla número 160, 1º-2ª,Barcelona, Spain
• Email: teteolistbarcelona@gmail.com
• Website: https://www.teteolist.com

We have not appointed a Data Protection Officer, as it is not mandatory for our activity. For any privacy matter you can contact us at the email above.

3. Personal Data We Collect

a) Data you provide to us

• Identity data: name and surname.
• Contact data: email address, phone number and WhatsApp number.
• Booking data: club or event chosen, date, number of guests and any comments you add when requesting a guestlist, VIP table, birthday or event booking.
• Communications: the content of messages you send us by form, email, WhatsApp or social media.

b) Data collected automatically

• Technical data: IP address, browser type and version, device, operating system, language, and time and date of access.
• Usage data: pages visited, clicks, time on site, referring website and interactions with the Website.
• Advertising and measurement data: online identifiers, cookie data and events (e.g. page views, form submissions, clicks on booking buttons) collected through the tools described in sections 7 and 8.

c) Comments and accounts (if enabled)
If you leave a comment or register, we collect the data in the form, your IP address and browser user agent (for spam detection). An anonymised string (hash) created from your email may be sent to the Gravatar service to check whether you have a profile picture; its privacy policy is available at https://automattic.com/privacy/.

We do not intentionally collect special category data (such as health, ethnic origin or religion). Please do not send us such data.

4. Purposes and Legal Bases

You can withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Age Requirement

Our services are intended only for people aged 18 or over. We do not knowingly collect data from minors. If you are under 18, do not use our forms or services. If we learn that a minor has provided data, we will delete it promptly. Parents or guardians who believe this has happened can contact us at teteolistbarcelona@gmail.com.

6. Recipients of Your Data

We do not sell your personal data. We may share it with:

1. Partner venues, clubs and event organisers. When you request a guestlist, table, birthday or event booking, we share the data needed to manage it (e.g. name, number of guests, date, contact data when necessary) with the venue or organiser concerned. After receiving it, they process it as independent controllers under their own privacy policies.
2. Service providers (data processors) acting on our behalf under a data-processing agreement, including: web hosting OVH; website and form management (WordPress and form plugins); email and messaging tools; translation (GTranslate); cookie consent management (Hu-manity / Cookie Compliance); and analytics and advertising providers listed below.
3. Public authorities, courts and security forces, when required by law.
4. Professional advisers (e.g. legal, tax), under a duty of confidentiality.

7. Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to understand how visitors use the Website and improve it.

• It uses cookies and similar identifiers to collect usage and technical data. It is only activated after you give consent through our cookie banner.
• Data may be transferred to Google LLC in the United States. Such transfers rely on the EU–US Data Privacy Framework or, where applicable, Standard Contractual Clauses.
• Retention of analytics data on our account is limited to [2 / 14] months.
• More information: https://policies.google.com/privacy. You can also block this tracking with the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout) or by withdrawing consent in our cookie settings.

8. Meta Pixel

We use the Meta Pixel, a tool provided by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland), to measure the effectiveness of our advertising on Facebook and Instagram, show relevant ads and create custom audiences (e.g. people who visited certain pages).

• It collects data such as pages viewed, actions taken (e.g. clicking a booking button or submitting a form), device and browser data, IP address and cookie identifiers. It is only activated after you give consent through our cookie banner.
• For the collection and transmission of this data to Meta, we and Meta act as joint controllers (Art. 26 GDPR). Meta is responsible for the subsequent processing for its own purposes, according to its Data Policy and the Controller Addendum available at https://www.facebook.com/legal/controller_addendum.
• Data may be transferred outside the EEA, including to the United States, under the EU–US Data Privacy Framework or Standard Contractual Clauses.
• This may involve profiling for advertising purposes. We do not make decisions that produce legal effects or similarly significantly affect you based solely on automated processing.
• You can manage your ad preferences at https://www.facebook.com/adpreferences, and you can withdraw your consent at any time in our cookie settings.

9. Cookies and Similar Technologies

We use:

• Strictly necessary cookies (e.g. security, load balancing, cookie preferences, language and display settings, login), which do not require consent.
• Analytics cookies (Google Analytics), only with consent.
• Marketing cookies (Meta Pixel), only with consent.

You can accept, reject or configure non-essential cookies in the banner shown on your first visit, and change your choice at any time through the cookie settings link available on the Website. You can also block or delete cookies in your browser settings. Blocking some cookies may affect how the Website works. Full details of cookies, purposes and durations are available in our Cookie Policy: COOKIE POLICY.

If you leave a comment, you may choose to save your name, email and website in cookies for convenience (up to one year). If you log in, cookies are set to keep your session and display choices (login cookies last two days, or two weeks if you select «Remember me»).

10. Embedded Content and Third-Party Links

The Website may include embedded content (videos, images, maps, social media posts) and links to other websites. These third parties may collect data, use cookies and track your interaction as if you had visited their site directly, including if you have an account and are logged in. We are not responsible for their privacy practices; please read their policies.

11. International Transfers

Some of our providers (including Google and Meta) may process data outside the European Economic Area. In those cases we ensure an adequate level of protection through an EU adequacy decision (such as the EU–US Data Privacy Framework), the European Commission’s Standard Contractual Clauses or other safeguards recognised by the GDPR. You can request more information at teteolistbarcelona@gmail.com.

12. Data Retention

• Booking and guestlist data: for as long as needed to manage the request and, afterwards, for [12] months, or longer if needed to handle claims or comply with legal obligations.
• Inquiries and communications: for the time needed to handle them and, afterwards, during the legal limitation periods.
• Marketing communications: until you withdraw your consent or unsubscribe.
• Analytics and advertising data: according to the cookie durations and retention periods set out in sections 7, 8 and 9.
• Comments and their metadata: until you request their deletion.
• Legal, tax and accounting data: for the periods required by law.

Once the retention period ends, we delete or anonymise the data, keeping it blocked only while it may be needed to respond to claims.

13. Data Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure, including encrypted connections (HTTPS), access controls and the use of reputable providers. No system is completely secure, so we cannot guarantee absolute security. If a breach poses a risk to your rights and freedoms, we will notify the Spanish Data Protection Agency (AEPD) and, where required, the affected people, in accordance with the law.

14. Your Rights

You have the right to:

1. Access the personal data we hold about you.
2. Rectify inaccurate or incomplete data.
3. Erase your data («right to be forgotten») when applicable.
4. Object to processing based on legitimate interest, and at any time to marketing.
5. Restrict processing in the cases provided by law.
6. Data portability, receiving your data in a structured, commonly used format.
7. Withdraw consent at any time.

To exercise your rights, email teteolistbarcelona@gmail.com with the subject «Data protection» and a copy of an ID document (to verify your identity). We will answer within one month, extendable in complex cases as allowed by law.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es – C/ Jorge Juan, 6, 28001 Madrid. We would appreciate the chance to resolve your concern first.

15. Accuracy and Obligation to Provide Data

You must provide accurate, up-to-date data. Fields marked as required in our forms are necessary to process your request; without them, we may not be able to provide the service. Providing data for marketing is always voluntary.

16. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical or business changes. The latest version will always be available on this page with its update date. If changes are significant, we will notify you through the Website or by other appropriate means.

---

Para que de verdad sea «a prueba de errores»

La política solo vale si lo que dice es lo que ocurre en la web. Revisa esto:

1. El banner debe bloquear GA y Meta Pixel hasta que se acepte. Si cargan antes del consentimiento, la política dice una cosa y la web hace otra. Es el fallo más sancionado.
2. Botón «Rechazar todo» al mismo nivel que «Aceptar» en el banner, y enlace permanente para cambiar las preferencias.
3. Formularios (Fluent Forms): añade una casilla sin marcar de «He leído la Política de Privacidad» con enlace, y otra casilla separada y sin marcar si queréis enviar promociones por WhatsApp o email.
4. Google Analytics: pon la retención en 2 o 14 meses y rellena el hueco de la sección 7 con lo mismo.
5. Meta: acepta el Controller Addendum en la configuración de Business Manager y evita enviar datos personales (emails, teléfonos) en los eventos del Pixel salvo que estén hasheados y con consentimiento.
6. Rellena el plazo de conservación y el nombre del hosting.
7. Crea dos páginas más, que acompañan a esta política: Cookie Policy (lista de cookies reales con duración) y Aviso Legal (identificación del titular, exigida por la LSSI).
8. Cuando tengáis autónomo o S.L., actualiza la sección 2 y la fecha.