PRIVACY POLICY

LAGA SURF CAMP is deeply committed to compliance with the Spanish and European legislation applicable to the protection of personal data, and guarantees full compliance with the obligations set out, as well as the implementation of the provisions included in the Organic Law 3/2018, on the Protection of Personal Data and in the measures of the General Data Protection Regulation (GDPR) of the European Union 2016/679.

LAGA SURF CAMP makes available to the users the present Privacy Policy of the entity for the processing of personal data, informing them about the following aspects:

  • Identity and Contact Details of the Data Controller.
  • Data processed, its purposes and terms or criteria for its conservation.
  • Legal basis of the processing.
  • The recipients of their personal data.
  • The rights of all users and the procedure for exercising them.

DATA CONTROLLER

  • Identity: HONAGO SURF SPORTS S.L.
  • TAX ID: B95010840
  • Postal address: BARRIO GENDIKA Nº1, 48311 IBARRANGELU (BIZKAIA)
  • Contact telephone number: 667 73 73 97
  • Contact e-mail: lagasurfcamp@gmail.com

PROCESSING OF PERSONAL DATA

Processing of personal data of the group of CLIENTS ACCOMMODATION, SURF AND SUPPLIERS:
  1. For what purpose do we process your personal data?
At LAGA SURF CAMP we process the information provided to us by our clients and users for the following purposes:
  • Management, Administration and Provision of the contracted services. The management and maintenance of the commercial relationship for the provision of services as well as for its fiscal and accounting administration.
  • To control access to the facilities.
  • Carrying out commercial mailings. In the event that you have consented, the carrying out of commercial, promotional and/or marketing actions by any means (including electronic means, which you expressly consent to), related to your corporate purpose and professional activities.
  • Participation in social networks. As a result of your participation in the different activities and classes organised by LAGA SURF CAMP, the obtaining of images of the same (photographs, recordings, ….) may take place. In case you authorise it, it may be disseminated in social media, including the corporate website and Facebook, with the sole purpose of publicising the activity.
  1. Legitimation
The legal basis for the processing of your data is the execution of the contract, and the express consent of the data subject, in those cases where it has been provided.
  • Recipients
  • Your data will be communicated to the competent public administrations and the Tax Agency necessary for the provision of the service.
  • If applicable, to banking institutions for the management of the economic amounts derived from the service.
  • In the event that you have given us your consent for the processing of images, your data may also be disclosed in publications and communication channels of the entity.
  1. How long will we keep your data?
The personal data provided will be kept for as long as it is necessary for the provision of the service. At the end of the service, the data will be kept for legal obligation. Finally, and as long as you have provided your consent for this purpose, LAGA SURF CAMP will keep your data in order to keep you up to date with products, activities and services that may be of interest to you.

Processing of personal data from the SECURITY file:

  • For what purpose do we process your personal data? At LAGA SURF CAMP we process the information captured by the video surveillance cameras for the following purposes: To control access to the facilities and the security of the same.
  • Legitimation The legal basis for the processing of your data is the legitimate interest of the data controller.
  • Addressees Your data will not be transferred, unless the alarm goes off, in which case the person in charge of processing, LAGA SURF CAMP of the alarm, may see the images.
  • How long will we keep your data? The personal data provided will be kept for as long as they are necessary for the provision of the service. At the end of the service, the data will be kept by legal obligation.

Processing of Personal Data from the Contact form on the website.

  1. For what purpose do we process your personal data?

At LAGA SURF CAMP we process the information received through these forms, in order to answer any queries you may have, manage your claim, or if you request it, to send you commercial information.

Legitimation
The legal basis for the processing is the express consent of the interested party.

Recipients
No data will be passed on to third parties unless legally obliged to do so and no international data transfers are foreseen.

  1. How long will we keep your data?

We will only keep your data for the time necessary to deal with your queries and complaints. Finally, and as long as you have provided your consent for this purpose, LAGA SURF CAMP will keep your data in order to keep you up to date with products, activities and services that may be of interest to you.

 

AUTOMATED DECISIONS, PROFILING AND APPLIED LOGIC?

No processing based on automated decisions is foreseen at any time.

RIGHTS

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether or not LAGA SURF CAMP is processing personal data concerning them.

Also, as provided for in the General Data Protection Regulation, we inform you that you have the following rights:

  • Access your data: you have the right to access your data in order to know what personal data we are processing concerning you.
  • Request rectification or deletion of your data: In certain circumstances, you have the right to rectify any inaccurate personal data concerning you that are processed by us or, even, to ask us to delete them when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
  • Request the restriction of the processing of your data: In certain circumstances, you have the right to ask us to limit the processing of your data, in which case we inform you that we will only keep them for the exercise or defence of claims as provided for in the General Data Protection Regulation.
  • To the portability of your data: In certain circumstances, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transfer it to another data controller.
  • Object to the processing of your data: In certain circumstances and for reasons relating to your particular situation, you will have the right to object to the processing of your data in which case, we would stop processing it except for compelling legitimate reasons, or the exercise or defence of possible claims.

When will we respond to your request?

We will respond to your requests as soon as possible and in any case within one month of receiving your request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. The data controller shall inform the data subject of the extension within one month of the request.

Do you have the right to withdraw your consent?

The data subject has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

Where should you go to exercise your rights?

In order to exercise the recognised rights, the interested party may contact the following e-mail address: lagasurfcamp@gmail.com or by writing to LAGA SURF CAMP at the address indicated in the first section on the Data Controllers.

Do you have the right to complain?

Yes, especially when you have not obtained satisfaction in the exercise of your rights, you have the right to lodge a complaint with the national supervisory authority, for this purpose you should contact the Spanish Data Protection Agency. www.agpd.es.

DATA CATEGORY

The categories of data processed are:

  • Identification data
  • Identification codes or passwords
  • Postal or electronic addresses

Specially Protected Data: No specially protected data is processed.