Privacy Policy
KAYAKING COSTA BRAVA, S.L. is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by KAYAKING COSTA BRAVA, S.L. implies the user’s acceptance of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated herein. Please note that although there may be links from our website to other websites, this Privacy Policy does not apply to other companies or organisations to which the website is redirected. KAYAKING COSTA BRAVA, S.L. neither controls the content of third-party websites nor accepts any responsibility for the content or privacy policies of such websites.
1) INFORMATION ABOUT THE DATA CONTROLLER
In accordance with Article 10 of Spanish Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE), the following is the identifying information of the Data Controller:
| Website: | WWW.KAYAKINGCOSTABRAVA.COM |
| Controller: | KAYAKING COSTA BRAVA, S.L. |
| Address: | CARRER ENRIC SERRA 42. 17130-L’ESCALA |
| VAT No.: | B55291355 |
| Phone: | 972773806 |
| Email: | INFO@KAYAKINGCOSTABRAVA.COM |
| Registration details: | Company registered in the Mercantile Registry of Girona, Book 3143, Page 122, Sheet GI-62100, Entry 2017/314 on March 15, 2017. |
2) APPLICABLE LAWS
This Privacy Policy is drafted based on current Spanish and European regulations on the protection of personal data on the internet. In particular, it complies with the following regulations:
– Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
– Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
– Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).
3) PRIVACY MATTERS
In compliance with GDPR and Organic Law 3/2018, we provide you with the following information regarding the processing of personal data you may provide:
Data Controller:
KAYAKING COSTA BRAVA, S.L. (contact details above)
Personal Data Register
In compliance with GDPR and LOPD-GDD, we inform you that the personal data collected by KAYAKING COSTA BRAVA, S.L. through the forms provided on its pages will be incorporated and processed in our file in order to facilitate, streamline, and fulfil the commitments established between KAYAKING COSTA BRAVA, S.L. and the User, or maintain the relationship established in the forms they complete, or to handle a request or enquiry. Furthermore, in accordance with GDPR and LOPD-GDD, unless the exception provided for in Article 30.5 GDPR applies, we maintain a record of processing activities specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.
Legal basis for processing
The legal basis for processing personal data is consent. KAYAKING COSTA BRAVA, S.L. commits to obtaining the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.
The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, withdrawal will not condition the use of the website.
In cases where the User must or can provide their data via forms to make enquiries, request information, or for reasons related to website content, they will be informed if the completion of any of these forms is mandatory, as such data is essential for the proper conduct of the operation.
Other legal bases:
– Compliance with legal obligations.
– Legitimate interest: sending own advertising.
Categories of data
KAYAKING COSTA BRAVA, S.L. only processes identifying data. No special categories of personal data are processed within the meaning of Article 9 GDPR.
Retention period
Personal data will be retained only for the minimum time necessary for the purposes of processing and, in any case, for the following period: the time necessary to manage your information requests and bookings of our services or purchases of products. They will also be securely blocked once they are no longer needed for the initial purposes, for the time required for legal matters, or until the User exercises their right to cancellation, opposition, or restriction. However, certain identifying and traffic data will be retained for a maximum of 2 years in case required by Judges and Courts or for internal actions related to misuse of the website.
Purposes of processing
– CLIENT MANAGEMENT: To provide the contracted services and issue invoices. Data will be kept as long as the business relationship continues or for the years necessary to comply with legal obligations.
– QUOTATION MANAGEMENT: To send potential clients quotations for services and/or products. Data will be kept until cessation of processing is requested.
– POTENTIAL CLIENT MANAGEMENT: To send individuals with legitimate interest information related to our products and services by any means available and invite them to relevant events. Data will be kept until cessation of processing is requested and will be collected with prior express consent.
– EVENT ORGANISATION: To organise events (courses, talks, competitions, and other activities) by the Data Controller. Data will be kept until cessation is requested or for the years necessary to justify the activity.
– OFFER MAILING: If you are a client and have applied the offers policy, you will receive periodic promotional emails at the start of each campaign.
– NEWSLETTER: We use your data to send our newsletter with news and topics of interest, always with your consent.
Recipients
User personal data will not be shared with third parties. If applicable, the User will be informed of recipients or categories of recipients when their data is collected.
Minors’ data
Only those over 14 can lawfully consent to their data being processed by KAYAKING COSTA BRAVA, S.L. If under 14, parental or guardian consent is required.
User rights
Users may exercise rights of access, rectification, erasure, restriction, portability, opposition, and not to be subject to automated decision-making, in accordance with GDPR and Organic Law 3/2018, by sending a request with a copy of an ID document to our address or email listed above.
They also have the right to lodge a complaint with the competent supervisory authority (AEPD).
4) PRINCIPLES APPLICABLE TO PERSONAL DATA PROCESSING
Processing of personal data will follow the principles set out in Article 5 GDPR and Articles 4 and following of LOPD-GDD:
– Lawfulness, fairness, and transparency
– Purpose limitation
– Data minimisation
– Accuracy
– Storage limitation
– Integrity and confidentiality
– Accountability
5) SECURITY MEASURES
In compliance with Article 32 GDPR, we have implemented security measures to ensure a level of security appropriate to the risk, including confidentiality, integrity, availability, and resilience of processing systems and services. Measures include:
– Informing staff of data processing policies
– Regular backups
– Access control
– Regular testing and evaluation processes
6) DATA CONFIDENTIALITY AND SECURITY
KAYAKING COSTA BRAVA, S.L. commits to adopting the necessary technical and organisational measures to guarantee personal data security and prevent accidental or unlawful destruction, loss, alteration, unauthorised communication, or access. The website has an SSL certificate to ensure secure and encrypted data transmission.
In case of a personal data security breach likely to entail a high risk for individuals’ rights and freedoms, the User will be promptly informed.
7) LINKS TO THIRD-PARTY WEBSITES
The website may include links to third-party websites outside KAYAKING COSTA BRAVA, S.L., which have their own privacy policies and are responsible for their own files and practices.
8) ACCEPTANCE AND CHANGES TO THIS POLICY
The User must have read and agreed to this Privacy Policy and consent to their data being processed for the purposes and in the manner described. Use of the website implies acceptance of this Privacy Policy.
KAYAKING COSTA BRAVA, S.L. reserves the right to modify this Privacy Policy at its discretion or due to legal, jurisprudential, or regulatory changes. Users are advised to check this page periodically for updates.
Last updated: 15/02/23