Privacy policy
This page explains which personal data we process when you use Agenda/BCN, why, for how long and what your rights are.
1. Data controller
- Owner: ETPRO Group
- Address: Barcelona
- Email: info@edeck.me
If you create an account, the account belongs to edeck.me, the platform this site is made with: it works in every shop made with edeck.me and in your profile you can see the orders you placed in any of them. edeck.me is the controller of the account data (email, password, name, phone and saved addresses), as explained in its privacy policy. The owner above is the controller of your orders here and of everything else explained on this page, and only sees the orders placed on this site.
2. What data we process
- What you give us when you write to us, by email or through a form: name, email, phone and your message.
- Your account and order data, if you sign up or buy: first and last name, email, phone, ID document if required for the invoice, shipping and billing addresses, and the products you bought.
- Browsing data: what cookies collect, as explained in the cookie policy.
The data marked as required in each form and at checkout is what we need to answer your enquiry or for the purchase contract (invoice details also because tax law requires them): without it we cannot help you or process, ship or invoice your order. The rest is optional.
We do not ask for special categories of data (health, beliefs, etc.). If you are under 14, do not give us any data without your parents’ or guardians’ consent.
3. Why we use it and on what legal basis
- To answer your enquiries, with your consent when you write to us.
- To manage your account, your orders, shipping and invoicing, because it is necessary to perform the purchase contract.
- To meet legal obligations, such as tax and accounting ones.
- To send you the newsletter, if you subscribe and confirm it from the email we send you: with your consent. We keep your email while you stay subscribed; every mailing has an unsubscribe link. If you do not confirm within 30 days, we delete your email. As proof of your consent we also keep the text of the box you ticked, when and from which IP address. If you unsubscribe, we keep your email marked as unsubscribed, without sending you anything, so as not to write to you again and to be able to prove your consent if there is a claim, for 3 years at most. You can subscribe to this list and unsubscribe from it whenever you like: «Agenda/BCN newsletter» (What's on this weekend, the jam of the week and a story from the listings, by email).
- To send you notices by email, for example if you leave products in the cart without finishing the purchase, and offers from this shop, only if you agreed when signing up (your consent). If you have bought from us before and did not object when giving us your details (there is a box for it at checkout), only the cart notices, under our legitimate interest in telling you about products similar to the ones you bought (art. 21.2 of the Spanish LSSI). Every email has a one-click unsubscribe link.
- To count visits with Umami, edeck.me's analytics, with no cookies and, unless you accept analytics, nothing stored on your device. Your IP address and browser are used on the spot to work out your approximate country, region and city and a visitor code that changes every month; the IP address is not stored and that code does not reveal who you are or follow you to other websites. The pages you view, the referring page, the campaign parameters of the address, your browser, operating system, device type, screen size and language are recorded to produce usage statistics for the site. Legal basis: our legitimate interest in knowing how the site is used. You can object by writing to us.
- To know if you come back, only if you accept analytics cookies: a random code is stored in your browser for 13 months and sent to Umami with each visit, to see your visits as those of the same person. It does not contain your name or email. Legal basis: your consent, which you can withdraw at any time with the «Cookies» button; when you withdraw it, the code is deleted.
- To measure visits with Google Analytics, only if you accept analytics cookies.
Reviews. If you send us your review with the "Leave your review" form, we store what you write (the title, if you add one, and the text), your name and, if you give one, an alias, your city, company or role and the stars you choose, and, if you give it to us, your email. Purpose: to publish it on this site, with your name or, if you give one, with your alias instead, once we have read it, and to tell you by email that it has been published. Legal basis: your consent, which you give with the form's checkbox and can withdraw at any time by writing to us (section 6): we will remove your review. Once published, anyone who visits the site can see it. Your name, your alias and your email are stored encrypted. Your email is not published and we delete it when we review your review; if we do not review it, we delete it entirely after 180 days. The copy that reaches the messages in our dashboard is deleted with the review and loses your email when we delete it. We also keep the text of the checkbox you ticked, as proof of your consent, for as long as the review is kept. We do not store your IP address.
We do not make automated decisions that affect you, nor build profiles for advertising.
4. How long we keep it
For as long as needed to handle your enquiry or your order. We keep the data of your orders and their invoices, with the shipping and billing addresses, for at least 6 years from each order: that is the period of the Spanish Commercial Code (Art. 30), which also covers the 4 years of tax law. Once the order has been handled, we only use it for those obligations, to handle claims, unless you objected for the notices in section 3 and, if you have an account, so that you can see it in "My orders" for as long as you keep the account. After the 6 years we are no longer required to keep it: you can ask us to delete it. If the site closes, what is explained below applies. The messages you send through the site’s forms are deleted one year after you sent them. Visit statistics are kept for a maximum of 25 months.
If this site closes and edeck.me deletes it permanently, edeck.me (ETPRO Group) keeps what you may need afterwards, and from then on it is the controller of that data: your orders here, with their payments, and the record of your balance (you can still see the orders placed with your account in "My orders" in the other edeck.me shops; edeck.me will send you the rest on request). With an account, it keeps them for as long as you keep the account, because seeing them is part of the account's service. Without an account (if you bought without one or you delete yours), it keeps them blocked for up to 6 years from each order, so that the purchase can be proved and claims handled (its legitimate interest and yours): it only uses them to handle claims, your rights or what judges, courts and authorities ask for, and for nothing else, not even to write to you. After that period it anonymises them: it removes name, email, phone, tax ID, address, postcode, city, IP and browser and the payment gateway references, and only amounts, products and dates remain, with the country and province. Any balance left in the closed shop can be claimed from its former owner for 5 years from its last movement (Art. 1964.2 of the Spanish Civil Code); its record is kept like the orders. It also keeps what you sent through the forms, shown to no one and until that year is up, to help you if you ask for help or, if you wrote through a form, to contact you if a problem comes up; and the details of the owner above as seller, so you know whom to claim against, for 6 years from this site's last order. This is explained in the edeck.me privacy policy, which also says how to contact it.
5. Who else processes it
We do not sell your data. We only share it when needed:
- with the transport or courier company that delivers your order, if it has to be shipped: your name, the delivery address and your phone number;
- with our accountant or tax adviser, if we have one, to keep the accounts and file taxes;
- with public authorities, judges and courts, when the law requires us to;
- and, if this site closes, with edeck.me, as explained in section 4.
To provide the service we also use these providers, which process data only on our behalf and with the safeguards required by law:
- edeck.me, the platform this website is built with, which hosts it and stores its data on its servers.
- Google (Google Analytics), which measures visits statistically, only if you accept analytics cookies.
Some of these providers may process data outside the European Economic Area. When they do, they use the safeguards provided by law, such as the European Commission’s standard contractual clauses or the EU-U.S. Data Privacy Framework.
Third-party resources. When you visit the site, your browser may connect to these services, which receive your IP address and technical data about your browser. We are responsible, together with each service, for including it on the site and for it receiving that data; what each one does with it afterwards is governed by its own terms and privacy policy, except those that, as stated, process the data only on our behalf:
- Google Analytics and Google Tag Manager (Google Ireland Limited), and the services Tag Manager loads: only if you accept the corresponding cookies; the cookie policy explains it.
6. Your rights
You can ask at any time to access, correct or delete your data, object to or restrict its processing, ask for its portability and withdraw your consent, by writing to info@edeck.me. If you think we have not handled your data properly, you can complain to the data protection authority of your country (in Spain, the Agencia Española de Protección de Datos, www.aepd.es).
7. Security
The website uses an encrypted connection (HTTPS) and we apply technical and organisational measures to protect your data against loss, unauthorised access or misuse.
The events listings
We collect the events in the listings (concerts, jam sessions, comedy, theatre…) from public sources: open data portals and the listings that venues and artists publish on their websites and social media. Names of artists, bands and venues may appear as they publish them, with the date, time, place and a link to the source. We show them here and announce them on our Instagram account, @agenda.bcn (Meta).
We do so on the basis of our legitimate interest, and that of the people who read the listings, in reporting events that their organisers have already made public (Article 6(1)(f) GDPR). If you appear in the listings and do not want to, write to us at info@edeck.me and we will remove it. To read some listings we use Claude, the artificial intelligence of Anthropic (United States). Events are deleted 90 days after they take place.
If you mention @agenda.bcn in an Instagram story, Instagram notifies us with your username and a link to that story: we look at it, also with Claude, to add the events you announce to the listings. We do not keep the image, only the link, which stops working when the story expires, and we delete the notification after 30 days.
If you write to our Telegram bot, @agenda_bcn_bot, to send us an event, we receive your Telegram name and @username, your account ID and whatever you send (text, images or PDF). We forward it by email to the listings inbox to review it and, if it fits, publish the event, and we keep it like what arrives through the «Send your event» form. We do so to handle your request (Article 6(1)(b) GDPR). Telegram processes the chat messages under its own policy.
All the details, including what we pass to Anthropic and on what terms, are in section 14 of edeck.me's privacy policy, which is also the controller of these listings.
Last updated: 30/10/2026.