Privacy Policy

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and its related websites, features, and content, as well as our external online presence, such as our social media profiles (hereinafter referred to as “online offering”).

With regard to the terms used, such as “processing” or “controller,” we refer to the definitions set out in Article 4 of the General Data Protection Regulation (GDPR).

Data Controller

Identity of the Controller: Davinga Nautico S.L.
Tax ID (NIF/CIF): B76277862
Address: Avenida del Istmo 6 35627 La Pared Fuerteventura, España
Email address: info@wellenkind-surfschool.com
Domain name: https://www.wellenkind-surfschool.com

Types of data processed

We process your data for the following purposes:

Provision of our online offering, including its functions and content.
Responding to contact enquiries and communicating with users.
Security measures.
Reach analysis and marketing.

Categories of data subjects

The data subjects include visitors and users of our online offering. Hereinafter, we will refer to the data subjects collectively as “users”.

Purpose of data processing

We process your data for the following purposes:

Provision of our online offering, including its functions and content.
Responding to contact enquiries and communicating with users.
Security measures.
Reach analysis and marketing.

Definitions of terms used

Personal data

This refers to any information that can directly or indirectly identify a natural person (for example, name, address, identification number, location data, online identifier).

Processing

Any operation performed on personal data, such as collection, storage, modification, consultation, use, disclosure or deletion.

Pseudonymisation

Processing of personal data in such a way that they can no longer be associated with a specific individual without additional information.

Profiling

Automated processing of personal data in order to evaluate personal aspects, such as online behaviour, location, interests or purchasing behaviour.

Controller

Natural or legal person who determines the purposes and means of the processing of personal data.

Processor

Person or entity that processes data on behalf of the controller.

Legal bases for data processing

We process your data in accordance with Article 6 of the GDPR, based on the following legal grounds:

Consent (Art. 6(1)(a) and Art. 7 GDPR): If you have given your explicit consent to the processing of your data.
Performance of a contract (Art. 6(1)(b) GDPR): When processing is necessary to fulfil a contract or to carry out pre-contractual measures.
Compliance with legal obligations (Art. 6(1)(c) GDPR): When we are required to comply with legal regulations..
Legitimate interests (Art. 6(1)(f) GDPR): If the processing is necessary for our legitimate interests, provided that the user’s rights do not override those interests.

Security measures

We implement appropriate technical and organisational measures in accordance with Article 32 of the GDPR to ensure an adequate level of security. This includes:

Protection of the confidentiality, integrity and availability of data.
Control of physical and digital access to data.
Procedures for data deletion and response to security breaches.
Implementation of data protection measures by design and by default (Article 25 of the GDPR).

Cooperation with third parties

If we transfer data outside the European Union (EU) or the European Economic Area (EEA), we ensure that:

The destination country has an adequate level of protection recognised by the EU.
Standard Contractual Clauses approved by the European Commission are applied.
Additional protection measures are implemented if necessary.

User rights

Under the GDPR, you have the following rights:

Right to rectification (Art. 16 GDPR): You can correct inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): You can request the deletion of your data under certain conditions.
Right to restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your data.
Right of access (Art. 15 GDPR): You can request information about your stored data.
Right to data portability (Art. 20 GDPR): You can receive your data in a structured format and transfer it to another provider.
Right to object (Art. 21 GDPR): You can object to the processing of your data, especially for marketing purposes.

To exercise these rights, contact us at info@wellenkind-surfschool.com.

Use of cookies

This website uses cookies to enhance the user experience. You can manage and delete cookies in your browser settings.

For more information, see our Cookie Policy.

Eliminación de datos

Personal data is deleted when it is no longer necessary for the purpose for which it was collected, unless there are legal retention obligations.

Use of third-party services

We may use third-party services to improve our website, such as:

Google Analytics (for web traffic analysis).
Google Maps (for map display).
YouTube / Vimeo (for video integration).
Social media platforms (such as Facebook and Instagram).

Third-party services may collect personal data and set their own cookies.

Changes to this privacy policy

We reserve the right to update this privacy policy to comply with legal changes or improvements to our services.