Last updated: September 24, 2026
1. Data controller
The controller's full identification details (name, NIF, address) are published in the Legal notice, to avoid repeating the same personal data on two different pages. For any privacy-related matter, the contact is:
- Controller: Miguel López Lorca
- Privacy contact email: hola@bearbarcelona.com
2. What data we process, why, and on what legal basis
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Browsing data (analytics: pages viewed, device, referral source) | Understand how the site is used and improve it (Google Analytics 4) | Consent (cookie banner) | Up to 14 months or until you withdraw consent |
| Photo + name/contact of whoever submits a photo wearing a garment | Publish that photo in the site's real-customers section | Explicit consent of the person photographed | Until the person requests its removal |
| Name, email and message you enter in the contact form | Read and reply to your enquiry | Consent (acceptance checkbox on the form) | The copy stored on the site is deleted automatically 6 months after it is received; the email is kept only as long as needed to handle the enquiry, unless a legal obligation applies |
| Encrypted fingerprint (hash) of your IP address when you submit the form — the IP itself is not stored | Limit abusive or automated submissions (spam) | Legitimate interest in site security | 6 months (deleted automatically together with the message) |
This site does not handle payments or collect card data — the purchase is completed entirely on Latostadora, which is an independent controller for the data you provide when buying (its privacy policy applies to that part, not this one).
The contact form uses no cookies and no third-party captcha. Your message is delivered by email to hola@bearbarcelona.com and a copy is stored in the site's admin panel, which only the controller can access. We don't use your email to send you advertising or add you to any mailing list. Filling in the form is voluntary; if you don't tick the privacy checkbox, it isn't sent.
3. Who we share data with
- Google Analytics 4 / Google Tag Manager (Google Ireland Ltd.) — site usage analytics, only if you accept analytics cookies.
- Latostadora — only if you click through to buy; from that point on you're on their site under their terms.
- Orangehost (hosting provider for the site and email) — as a technical data processor: contact form messages and the hola@bearbarcelona.com mailbox are stored on its servers.
- Supabase (hosting for the Bear ecosystem database) — as a technical data processor, not as a third party using the data for its own purposes.
We do not sell or share your data with third parties for commercial purposes.
4. International transfers
Some providers (Google) may process data outside the European Economic Area. In those cases they rely on the EU Standard Contractual Clauses or another equivalent mechanism recognized under the GDPR.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to hola@bearbarcelona.com, stating which right you wish to exercise and attaching a copy of a document proving your identity. You can also file a complaint with the Spanish Data Protection Agency (AEPD) if you believe we have not handled your request properly.
6. Minors
This site and its content are aimed at adults. We do not knowingly collect data from minors.
See also: Legal notice · Cookies policy