Privacy Policy
At graph.cat we understand the importance of maintaining a transparent relationship with all users of our website and clients. For this reason, below you will find our Privacy Policy, ensuring that you are always properly informed about how we securely collect and process any data you provide.
Your data will be processed in accordance with current legislation and, specifically, pursuant to Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data. Additionally, we comply with Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights.
A careful reading of our Privacy Policy will give you the necessary information to understand how we handle the data you provide.
What Personal Data Do We Process?
The personal data we process include:
- Data you voluntarily decide to provide.
- Data derived from communications you have with us.
- Information related to your browsing activity when using our online services (IP address, information derived from cookies or similar technologies — see our Cookie Policy on the website).
- Information available in public sources to which we may lawfully access.
- Data arising from the contractual or pre-contractual relationship you establish with us, including your image, informing you beforehand of the possibility of capturing it.
- Data that third parties provide to us about you, provided a legitimate basis exists or we have your consent.
- Data about third parties that you provide to us, after ensuring that you have obtained the third party’s prior consent.
In all cases, these will be the minimum and essential data required to manage the service you request from us, as outlined in the section on processing purposes further in this Privacy Policy.
How Do We Process the Data?
At graph.barcelona we always process your personal data in full compliance with applicable law. Additionally, we inform you that we have implemented appropriate technical and organisational measures to ensure an optimal level of security. This guarantees that only authorised personnel can access your data, that the data remains intact and protected against accidental or intentional loss, and that our data processing systems and services have been reinforced.
Any operations, procedures, or technical actions — automated or not — allowing the collection, storage, modification, transfer, or any other handling of personal data, constitute personal data processing.
Furthermore, we inform you of a joint data processing arrangement carried out by the group entities listed in section 1 of this Privacy Policy.
What Is the Legal Basis for the Processing?
The legal basis for processing Personal Data will derive from the contractual or pre-contractual relationship, the employment relationship, or any other situation requiring data processing — such as explicit consent or a legal obligation applicable to the data controller.






