Privacy Policy

1. Data Controller

This Privacy Policy explains how personal data is collected, used, and protected when users access and interact with this website.

Data Controller: Associaciò Esportiva de vela l’Onada
Registered address: Calle Lancaster 3, pl6
Email: ola@onadasail.com
Website: www.onadasail.com

OnadaSail acts as the Data Controller and is responsible for processing personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Personal Data We Collect

We may collect personal data when users interact with our website, including when they:

contact us through a contact form
make a booking request
communicate with us by email
communicate with us by email or messaging services
browse the website

The personal data collected may include:

name and surname
email address
phone number
booking details (date, participants, preferences)
IP address
browser and device information
browsing behavior and cookies

We only collect data that is strictly necessary to provide our services and improve the user experience.

3. Purpose of Data Processing

Personal data is processed for the following purposes:

managing booking requests and reservations
responding to inquiries and customer support requests
communicating important information related to bookings
processing payments through secure third-party providers
sending service-related communications
improving website performance and user experience
analyzing website traffic and usage
complying with legal and administrative obligations

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent: when users submit forms or accept cookies
Contractual necessity: to manage bookings and provide services
Legal obligation: to comply with applicable laws
Legitimate interest: to improve our services, website performance, and user experience

Users may withdraw their consent at any time by contacting us.

5. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. For example:

contact inquiries: retained for a limited period after resolution
booking data: retained for administrative, accounting, and legal purposes

Data is securely deleted or anonymized when no longer required.

6. Data Sharing and Processors

To operate this website and deliver services, personal data may be shared with trusted third-party service providers (data processors), including:

Stripe (payment processing)
TuriTop (booking and reservation system)
Mailchimp (email communication and marketing)
Google Analytics 4 (website analytics)
Aruba (website hosting)

These providers process data on behalf of OnadaSail and under appropriate data protection agreements. Payment data (such as credit card information) is processed securely by Stripe and is not stored by OnadaSail.

We do not sell personal data to third parties.

7. International Data Transfers

Some third-party providers (such as Stripe, Mailchimp, or Google) may process data outside the European Economic Area (EEA). In such cases, appropriate safeguards are implemented in accordance with GDPR, including:

Standard Contractual Clauses (SCCs)
data protection agreements with providers

8. Cookies and Tracking Technologies

This website uses cookies and similar technologies to:

ensure proper website functionality
analyze traffic and usage
improve user experience

Non-essential cookies (such as analytics or marketing cookies) are only activated after user consent. Users can manage their preferences through the cookie banner. For more information, please refer to our Cookie Policy.

9. User Rights

Under the GDPR, users have the right to:

access their personal data
request correction of inaccurate data
request deletion of their data
request restriction of processing
object to data processing
request data portability

To exercise these rights, please contact: ola@onadasail.com

Requests will be handled in accordance with applicable data protection laws.

10. Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or disclosure. However, no system can guarantee absolute security.

11. Changes to This Privacy Policy

OnadaSail reserves the right to update this Privacy Policy at any time to reflect legal, technical, or business changes. Users are encouraged to review this page periodically.