A photograph can convey the calm of a room, the care behind an activity or the texture of a shared culture. It can also reveal who was there. In a private association, that second possibility deserves particular attention: opening a camera does not suspend the community’s expectation of discretion.
The General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 provide the general data-protection framework in Spain. The Spanish Data Protection Agency explains that a photo or video in which someone can be identified is personal data. Capturing an image for internal use, storing it, publishing it on a website and distributing it on social media are different decisions. Each needs a clear purpose and an appropriate basis. This guide offers general good practice, not legal advice for a particular case.
Data-protection law is only part of the framework. Spain’s Organic Law 1/1982 separately protects honour, personal and family privacy and a person’s own image. Which legal basis or exception applies depends on who captures the image, the context and the intended publication; this article does not determine an individual case.
Before taking a photograph, decide what needs to be said
Privacy begins before the shutter. If the purpose is to show atmosphere, nobody may need to be recognisable. Architecture, details, materials, signage prepared for the session or non-identifiable hands can tell the story with less exposure.
Where a person will be the subject or can be recognised, the organisation should define the purpose, channel and intended period of use in advance, then verify the basis that permits both capture and publication. “It was an event” or “everyone had a phone” is not, by itself, general permission.
A privacy check before publication
- Confirm who is responsible for the image and why it will be used.
- Check that identifiable people are covered by a valid basis and understand the intended use.
- Review the background: reflections, screens, papers, names and locations can disclose more than expected.
- Publish only selected files and delete working copies when they are no longer needed.
- Record where the image appears so it can be corrected or removed consistently.
The AEPD says data protection by default requires limits on quantity, reach, retention and accessibility. Applied to photography, that means selecting deliberately and avoiding unnecessary storage or distribution.
Consent should match the real use
Not every image necessarily relies on consent; the legal basis must be assessed in context. Where consent is the basis, it should be informed and specific to the planned use. Agreeing to a group picture for an internal archive does not automatically mean agreeing to a public campaign or permanent social-media publication.
Ambiguous verbal arrangements are particularly unhelpful where an image will be used in brand communications. A clear explanation and verifiable record protect both the person and the association. If the use changes, the basis should be reviewed again.
Publication does not end the responsibility
The AEPD’s guidance on removing photographs and videos from the internet explains that people may request erasure in certain circumstances and should first contact the publisher. Every site should therefore provide an accessible channel and be able to locate where an image has been used.
A removal request should not disappear into social messages. The responsible team should receive, verify and assess it promptly, document the response, and remove or replace the material where appropriate. The right to erasure is not absolute, but nor should it be treated as a minor inconvenience.
Personal photographs and official channels
Someone taking a photograph for personal use still has a responsibility towards the people in it. As a matter of courtesy and respect, ask permission before sharing, avoid unnecessary tags or locations, and accept a refusal without argument.
The Club Guru Gallery is the reference for the official visual selection. For questions about image handling or removal requests, use the official contact channel shown on the site. The presence of published images never means photography inside the private space is permitted at any time.
Discretion is part of culture
A strong image does not require sacrificing the community’s privacy. Planning compositions, minimising data, checking rights and responding to removal requests make it possible to tell a visual story with maturity. In a private space, the best question is not simply “can we publish this?” but “is publishing it necessary, understandable and respectful?”
If the images document an activity, also see how a private association proposes, verifies and communicates its events calendar.
General information: this article is not legal or medical advice and does not confirm membership, admission or access.
For the bigger picture: see how cannabis clubs in Barcelona actually work or how membership requests work at Club Guru.