The right to privacy, and in particular the right to the protection of personal data, is one of RBA’s core values.
RBA is fully committed to compliance with the legislation currently in force, including the European Union General Data Protection Regulation and the legislation governing the protection of personal data in force at any given time, this being a priority objective.
The purpose of this policy is to explain how RBA OCIO Y CULTURA 2026, S.L. and RBA will process your personal data that may be collected through the various forms made available for this purpose on the Website or through other channels.
Your personal data will be processed confidentially and solely for the purposes to which you have consented, as explained below in this policy.
1. Who is the Controller of your data
The personal data that you provide to us will be under the responsibility of RBA OCIO Y CULTURA 2026, S.L. (hereinafter, “RBA OCIO Y CULTURA 2026”), with registered offices at Roc Boronat, 142, 08018 Barcelona, Spain, in its capacity as Data Controller. RBA OCIO Y CULTURA 2026 is a company owned by Grupo RBA and also holds a licence for the Time Out brand.
Your data will be processed by RBA OCIO Y CULTURA 2026, except in those cases where you have given your consent to the Comunidad RBA to process your data, for example, for the purpose of sending communications relating to products and services offered by the companies comprising the Comunidad RBA, through the various forms in which this option is made available to you.
The Comunidad RBA comprises the following RBA companies: RBA COLECCIONABLES, S.A.U., RBA REVISTAS, S.L., RBA LIBROS Y PUBLICACIONES, S.L. and EDICIONES EL JUEVES, S.A., all of which operate in the publishing sector. These companies have their registered offices at Avda. Diagonal, 189, 08018, Barcelona, Spain and together comprise the Comunidad RBA. The Community is coordinated from the aforementioned RBA premises, where the systems and services of these companies are centralised and managed on a unified basis. Therefore, although there are several data controllers, the data will be treated internally as a single database in respect of which you may exercise the rights described in this Policy.
2. Purposes of processing
We hereby inform you that the personal data you provide to us will be processed confidentially by RBA OCIO Y CULTURA 2026 for the following purposes:
- Sending you our Newsletter, where you have subscribed to it, containing information about updates, content, news, articles and other information relating to RBA OCIO Y CULTURA 2026.
- Conducting research, surveys and market studies.
- Processing information on a personalised basis in accordance with the preferences and interests communicated by the user, or which we may infer from their browsing activity on the website (through cookies) or from their responses to our communications, where you have authorised us to do so.
- Managing your attendance at any events organised by us or by any of our business partners.
- Managing your participation in competitions, prize draws or promotional activities organised by us.
- Responding to enquiries or requests for information submitted by you through any of the channels made available by RBA OCIO Y CULTURA 2026, including social media.
- On certain occasions, it may be necessary to process your personal data in order to comply with legal obligations or in connection with any contractual relationship that we may have with you.
In all other cases, and whenever appropriate, we will request your consent to process your personal data.
3. Types of data
We hereby inform you that we will process the following data depending on the permissions, legal authorisations and consents you have granted us:
| Processing | Types of data |
|---|
| Sending you our Newsletter, where you have subscribed to it, containing information about updates, content, news, articles and other information promoted through our websites. | Contact details (email address) |
| Conducting research, surveys and market studies. | Contact details (email address)
Content preferences |
| Processing information on a personalised basis in accordance with the preferences and interests communicated by the user, or which we may infer from their browsing activity on the website or from their responses to our communications, where you have authorised us to do so. | Contact details (email address)
IP address
Content preferences
Browsing data |
| Managing your attendance at any events organised by us or by any of our business partners. | Contact details (email address)
Content preferences |
| Managing your participation in competitions, prize draws or promotional activities organised by us. | Identification data (First name and Surname)
Contact details (email address)
Content preferences
Other data requested depending on the competition, prize draw or promotional activity. |
| Responding to enquiries or requests for information submitted by you through any of the channels made available by RBA OCIO Y CULTURA 2026 | Contact details (email address; telephone number)
Data you have provided to us in your enquiry |
| Contact through our Social Media accounts | Username
Contact details (email address)
Data you have provided to us in your enquiry |
4. Conducting research, surveys and market studies
In accordance with applicable law and following the relevant balancing assessment in accordance with the applicable regulations, which remains available to interested parties who request it through the channels set out in this Policy, RBA OCIO Y CULTURA 2026 informs you that we may use your personal data to conduct internal or market studies, send you surveys relating to our products and/or services and measure the effectiveness of advertising campaigns. The legal basis for such processing is the legitimate interests of RBA OCIO Y CULTURA 2026. You may object to this processing at any time by notifying us at datos-timeout@rba.es.
5. Sending marketing communications and segmented communications based on your profile.
If you have subscribed to the Newsletter, we will periodically send it to you with news and information about RBA OCIO Y CULTURA 2026. You may withdraw your consent in each communication by clicking on the “unsubscribe” link.
Communications that RBA OCIO Y CULTURA 2026 may send to you may be segmented according to your profile, taking into account the preferences and interests you have expressed to us through the website, on the basis of your explicit consent, our legitimate interests, or where authorised by applicable law, as you will be duly informed in each case.
We hereby inform you that you may withdraw your consent to receive marketing communications at any time through each communication by clicking on the “unsubscribe” link, or by notifying us of your wish to withdraw your consent using the following contact details:
(i). By email sent to datos-timeout@rba.es.
(ii). By post addressed to the Customer Service Department, quoting the reference “Time Out Personal Data”, at Roc Boronat, 142, 08018, Barcelona, Spain.
6. Profiling
We may carry out other processing activities involving the creation of a profile for the purpose of displaying on the homepage products that may be of interest to you, based on the preferences you have provided to us through your acceptance of cookies or on information obtained through your browsing activity on the website. You can find further information about the use of cookies and similar technologies in our Cookie Policy.
7. Retention periods and legal bases for processing
Your data will be retained for the periods set out in the table below, without prejudice to its retention, subject to appropriate restriction of access, in order to make it available to the competent Authorities in the relevant areas where applicable.
| Processing | How we determine the retention period for your data | Legal basis for processing |
|---|
| Sending you our Newsletter, where you have subscribed to it, containing information about updates, content, news, articles and other information relating to RBA OCIO Y CULTURA 2026. | We will retain your data until you withdraw your consent to the processing. | Consent |
| Conducting research, surveys and market studies. | We will retain your data until you object to the processing of your data. | Legitimate interests |
| Processing information on a personalised basis in accordance with the preferences and interests communicated by the user, or which we may infer from their browsing activity on the website or from their responses to our communications, where you have authorised us to do so. | We will retain your data until you withdraw your consent to the processing. | Consent |
| Managing your attendance at any events organised by us or by any of our business partners. | We will retain your data for as long as necessary to manage your participation in the event. | Performance of the contractual relationship arising from your participation |
| Managing your participation in competitions, prize draws or promotional activities organised by us. | We will retain your data for as long as necessary to manage your participation in the competition, prize draw or promotional activity. | Performance of the contractual relationship arising from your participation |
| Responding to enquiries or requests for information submitted by you through any of the channels made available by RBA OCIO Y CULTURA 2026, as well as through our Social Media accounts. | We will retain your data in order to respond to your enquiry and for as long as RBA OCIO Y CULTURA 2026 may have an obligation in relation to the response provided to you, for a maximum period of 2 years. | Legitimate interests |
8. Who we share your information with
Your data will not be sold, rented or otherwise made available to third parties. We may only share your data with third-party companies in the following circumstances:
(i) Comunidad RBA: Only where you have given your consent will we disclose your data to the companies comprising the Comunidad RBA (these companies are defined in section “1. Data Controller” of this Policy), for the following purposes:
- Sending you information about the products and services offered by the companies comprising the Comunidad RBA, where you have authorised us to do so. Such communications may contain information about third-party companies that collaborate with the companies comprising the Comunidad RBA. In all cases, your data will not be disclosed to such third parties and any information you receive will be sent by the Comunidad RBA.
(ii) Service providers: In some cases, certain providers that supply services to RBA OCIO Y CULTURA 2026 will be given access to your data, but under no circumstances will they process the data for their own purposes. These providers will process the data subject to strict confidentiality obligations and in compliance with the obligations established by the data protection legislation in force.
9. International Transfers
On certain occasions, personal data may be processed outside the European Economic Area (EEA). In such circumstances, RBA OCIO Y CULTURA 2026 guarantees that it will implement all appropriate measures and safeguards to ensure and protect the processing of your personal data.
The principal safeguards adopted by RBA OCIO Y CULTURA 2026 when an international transfer of personal data takes place include the execution of standard contractual clauses approved by the European Commission, binding corporate rules, and certifications or codes of conduct approved by the European Commission.
10. Confidentiality and Security in data processing
Information received by RBA OCIO Y CULTURA 2026 through any channel will be treated with the utmost discretion and confidentiality.
RBA OCIO Y CULTURA 2026 further informs you that it has implemented all technical measures available to it to prevent the loss, misuse, alteration, unauthorised access to and theft of data provided by users, without prejudice to the fact that security measures on the Internet cannot be guaranteed to be completely impenetrable.
11. Social Media
You may join the Groups/Accounts maintained by RBA OCIO Y CULTURA 2026 on various Social Media platforms. Users who become fans or followers of any of these groups accept the Terms of Use and Privacy Policy of the relevant social media platform.
12. Exercise of rights
As a result of the processing of your personal data by RBA OCIO Y CULTURA 2026, applicable legislation grants you a number of rights.
In particular, you may exercise the following rights:
- Right of access: You have the right to know which of your personal data we process in accordance with the purposes about which we have informed you.
- Right to rectification: You have the right to rectify any data that is inaccurate or incomplete.
- Right to erasure: You may request that your personal data be erased from our records.
- Right to object: You may object to the processing of your data in connection with direct marketing activities. You may also object on grounds relating to your particular situation, where applicable under the relevant legal basis for processing.
- Right to restriction of processing: You may request restriction of processing where you contest the accuracy of your data. Processing may also be restricted where it is unlawful and you oppose the erasure of your personal data and request the restriction of its use instead. You may also request restriction where the data is no longer required for processing purposes but you require it for the establishment, exercise or defence of legal claims.
- Right to data portability: Where technically feasible and where the circumstances provided for by law apply, if the processing is based on consent or on a contract entered into with the Data Controller, you may request that your personal data be transmitted to another data controller.
In accordance with the provisions of the Spanish Information Society Services and Electronic Commerce Act (LSSI), you may withdraw your consent to receive marketing communications by electronic means at any time.
You may withdraw the consent you have given for the processing of your personal data.
You may exercise your rights by contacting the Data Protection Committee (DPO) through any of the following channels.
(i). By email sent to datos-timeout@rba.es.
(ii). By post sent to Roc Boronat, 142, 08018, Barcelona, quoting the reference “Data Protection - Time Out”.
Furthermore, if you do not wish to exercise a specific right but need to make an enquiry or suggestion regarding the processing of your personal data, you may also contact us using the contact details provided for the exercise of your rights.
RBA OCIO Y CULTURA 2026 also informs you that you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the competent data protection authority.
13. Contact us
If you have any questions or queries regarding the processing of your personal data, please contact us through one of the following channels:
(i). By email sent to datos-timeout@rba.es.
(ii). By post addressed to the Customer Service Department, quoting the reference “Personal Data – Time Out”, at Roc Boronat, 142, 08018, Barcelona, Spain.
14. DPO contact details
Contact details for the Data Protection Committee: dpo@rba.es.
15. Affiliate Policy
RBA OCIO Y CULTURA 2026 informs you that the content and articles published on the www.timeout.es and www.timeout.cat web portals are prepared by our editors and other contributors after analysing the relevant products and/or services. Accordingly, any recommendations concerning products and/or services are made independently and according to their own judgement.
Notwithstanding the foregoing, RBA OCIO Y CULTURA 2026 informs you that some hyperlinks to products and/or services published within content on the RBA OCIO Y CULTURA 2026 portals lead to online shops with which we have affiliate agreements. In such cases, when a user makes a purchase through one of these links, RBA OCIO Y CULTURA 2026 receives a commission, which does not affect the price paid by users for the relevant items.