Privacy policy

Company Data

The privacy and data protection policy of Club Nàutic Sa Ràpita (hereinafter, ‘the Club’) is set forth below.

Data Protection

The Club informs users of its website about its privacy policy so that they can freely and voluntarily determine whether they would like to provide the personal data that may be required of them for services, registrations, requests for information and communications.

In this sense, users may voluntarily provide us with their personal data through the different means made available to them on the website (forms and e-mail addresses), through a digital messaging system or over the telephone.

Minors

  •  Minors under the age of 14: The Club does not authorise minors under the age of 14 to provide their personal data and those of their legal guardians through any of the means mentioned above. Those who provide personal data using these means formally declare that they are over 14 years of age.

  • Minors aged between 14 and 17. Under no circumstances will the Club consider valid any registration in which the personal details of the minor are provided via the aforementioned means which does not have the consent of his/her legal guardian(s); or which is made by another person who can accredit that they have the express consent of the minor’s legal guardian(s). Those who provide personal data using these means formally declare that they have the consent of their legal guardian(s).

Those who provide personal data of third parties (crew members, contact people, skippers, shipowners, passengers, employees, legal representatives, etc.)

  • Formally declare that they have the consent of each of the owners of the data provided or of their legal representatives, as applicable. They also consent to the processing of their personal data and accept this privacy policy.

The Club guarantees the confidentiality of the data provided, and also undertakes to comply with the obligations set forth in the General Data Protection Regulation 679/2016 (GDPR) and Organic Law 3/2018, on Data Protection and Guarantee of Digital Rights (LOPDGDD). It therefore informs the users of the website, hereinafter referred to as “data subjects”, of its data protection policy.

Who is the data controller?

Club Nàutic Sa Ràpita

How can you contact the data controller?
You can visit them in person at Explanada del Puerto, s/n, La Rápita – Campos, provincia de Illes Balears, 07639

Is there a Data Protection Officer who can be contacted?

Yes. Data subjects can get in touch with the Data Protection Officer (DPO) by sending an email to the following address: dpd@prevencioninformatica.com

Why do we process your data and what is the legal basis for doing so? The Club will process the personal data provided:

  1. In contact sections: in order to respond to requests and to maintain commercial and/or contractual relationships.
    The legal basis on which we collect your personal data is based on the consent given to us by the data subjects when they provide their personal data for this purpose.
     

  2. In the Dry Marina and Request for Beaching sections: in order to manage users, moorings, the dry marina, beaching and the provision of different services.
    The legal basis on which we collect your personal data is based on the consent given to us by the data subjects when they provide their personal data for this purpose.
    Dry Marina and Beaching requests have no contractual value. They are exclusively unconfirmed service requests.
     

  3. In the Mooring Reservation section: in order to manage users, moorings, the dry marina, beaching and the provision of different services.
    The legal basis on which we collect your personal data is based on the consent given to us by the data subjects when they provide their personal data for this purpose.
    When the data subject submits their mooring reservation request, he/she will be given one of the following three types of reservation status:

    a) “Reservation confirmed”. If the applicant receives this type of email, his/her reservation has been confirmed and they will receive a reservation confirmation code.
    b)  “Reservation on waiting list”. If the applicant receives this type of email, his/her reservation is on the waiting list and they will receive a reservation waiting list code.
    b)  “Response to request”. If the applicant receive this type of email, the Club will contact the data subject shortly to identify an option that suits their request.
     

  4. In the Regatta registration section: in order to organise, manage and control the registrations and classifications of the different regattas organised by the Club.
    The legal basis on which we collect your personal data is based on a contractual relationship, the consent given to us by the data subjects by providing their personal data for this purpose and the legitimate interest of the data controller in some of the processing.
     

  5. In the Sailing School section:
    a)  In order to organise, manage and control the number of people registered for the different activities organised by the Club.
    b)  Images and videos, taken with the consent of the data subjects, will be processed for the promotion and dissemination of the activities in authorised media.
    The legal basis on which we collect your personal data is based on a contractual relationship, the consent given to us by the data subjects by providing their personal data for this purpose and the legitimate interest of the data controller in some of the processing.

How long will we process your data for?
The personal data provided will be kept:

  1. In the contact sections: as long as data subjects do not request their deletion, in order to keep them informed of any actions taken in relation to their requests, and provided that they are appropriate, relevant and limited to what is necessary for the purposes for which they are processed.

  2. In the Dry Marina, Request for Beaching and Mooring Reservation sections: the time necessary to fulfil the purpose for which they were requested and to determine the possible responsibilities that may arise from this purpose and from the processing of the data, after which point they will be deleted.

  3. In the Regatta Registration section: the time necessary to fulfil the purpose for which they were requested and to determine the possible liabilities that may arise from this purpose and from the processing of the data, after which point they will be deleted. The final placings will always be retained for historical and statistical purposes.

  4. In the Sailing School Registrations section:

a) the time necessary to fulfil the purpose for which they were requested and to determine the possible liabilities that may arise from this purpose and from the processing of the data, after which point they will be deleted.

b) With regards to the images and videos collected with the consent of the data subjects, these will be stored safely until their deletion is resolved, given that the purpose for which they were taken has expired.

c) In the Work With Us section: the time necessary to fulfil the purpose for which they were requested, after which point they will be deleted.

Will we share your data with other companies or public bodies?

  1. In the Contact Details, Dry Marina, Request for Beaching and Mooring Reservation sections: we will not share the personal data of data subjects with third parties, except where we are required to do so by law or when we have the express consent of the data subject;

  2. In the Regatta Registration section: we may share the personal data of the registered participants with the corresponding Federations, which act as collaborating agents of the Public Administration; judges; health institutions; contracted insurance and reinsurance companies, when necessary; and banks, for the processing of payment, depending on the method used, in addition to other legally stipulated transfers;

  3. In the Sailing School Registrations section: we may share the personal data of the registered participants with the corresponding Federations, which act as collaborating agents of the Public Administration; with insurance companies for civil liability and accident insurance; with health institutions, due to incidents brought about during the activity; and with banks, for the processing of payment through the virtual POS terminal.

Will the personal data of data subjects be sent to third countries or international organisations?

It is not foreseen for the personal data of data subjects to be transferred to third countries or international organisations in any of the sections that request personal data.

What rights do data subjects have in relation to the processing of their personal data?

Data subjects have the right to obtain confirmation as to whether or not the Club is processing their personal data,

Likewise, as provided for in the General Data Protection Regulation (GDPR), you are hereby informed that data subjects have the following rights:

To access their data
Data subjects have the right to access their data so that they know which personal data we are processing that concerns them.

To request the rectification or deletion of their data
Under certain circumstances, data subjects have the right to rectify inaccurate personal data concerning them which we are processing at that time, or to ask us to delete them if, amongst other reasons, the data are no longer necessary for the purposes for which they were collected.

To request the restriction of the processing of their data
Under certain circumstances, data subjects will have the right to ask us to restrict the processing of their data, in which case we will inform them that we will only retain their data for the exercise or defence of claims, as provided for in the General Data Protection Regulation (GDPR).

To the portability of their data
Under certain circumstances, data subjects will have the right to receive the personal data that they have provided us in a structured, commonly used and machine-readable format and to transmit said data to another data controller.

To object to the processing of their data
Under certain circumstances and for reasons related to their particular situation, data subjects will have the right to object to the processing of their data. In this case, we will no longer process their data unless we are legally required to do so or for the exercise or defence of possible claims.

When will we respond to the request of data subjects to exercise their rights?
We will respond to any requests as soon as possible, and in all cases within one month of receiving them. This period may be extended by a further two months if necessary, taking into account the complexity of the request and the number of requests made. The data controller will inform the data subjects of this extension in the month following the request submission.

Do data subjects have the right to withdraw their consent?
Yes. Data subjects have the right to withdraw consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal. In consent is withdrawn, we will not be able to process the data subjects’ data in order to process their requests.

Who should data subjects contact in order to exercise their rights?

  1. Data subjects may contact the Data Protection Officer via email, putting “exercise of rights” in the subject field and a description of their request in the email itself.
    Alternatively, they could

  2. . send a letter to the Data Controller or visit the address provided in person, where they will be able to fill out an exercise of rights form.

Do data subjects have a right to complain?
Yes. Data subjects, especially when they are not fully satisfied with the exercise of their rights, have the right to lodge a complaint before the Spanish Data Protection Agency. This can be done on the agency’s website, www.agpd.es.

Prior to lodging such a complaint before the Spanish Data Protection Agency, data subjects may contact our Data Protection Officer.