Last Updated: 12/06/2025
Version: 1.0
Website: https://kayakfishinglanzarote.com
This Privacy Policy complies with Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) 2016/679, the Spanish Organic Law 3/2018 (LOPDGDD), and global data protection standards. It outlines how we collect, process, and protect your personal data when you visit our website, use our contact forms, or book a kayak or shore fishing adventure.
1. Data Controller Information
- Data Controller: Jesús Leandro Machin Álvarez
- Tax ID (NIF): 78547360Z
- Address: Camino La Vegueta, núm. 13, Tías-Masdache, Lanzarote, Las Palmas, Spain
- Email (Data Protection): Kayakfishinglanzarote@gmail.com
- Phone: +34 626 602 826
2. Personal Data Processing Activities
2.1 Contact Form & Booking Inquiries
- Purpose: To manage and answer user inquiries, information requests, and initial booking requests for kayak fishing and active nautical tourism.
- Data Collected: Name, surname, email address, phone number, requested date, type of activity, and the content of your message.
- Legal Basis: Art. 6.1.b GDPR (pre-contractual measures at the request of the data subject) or Art. 6.1.a GDPR (consent).
- Retention Period: 1 year from the last contact, unless it results in a confirmed booking (in which case contractual terms apply).
2.2 Bookings and Activity Contracts
- Purpose: Booking management, execution of the nautical activity contract, invoicing, and compliance with related legal obligations (insurance, active tourism regulations, and taxation).
- Data Collected: Name, surname, ID/Passport number, phone number, email address, activity details, billing details, and specific data required for compulsory activity insurance.
- Legal Basis: Art. 6.1.b GDPR (execution of a contract) and Art. 6.1.c GDPR (compliance with legal obligations regarding taxes, insurance, and Canary Islands active tourism regulations).
- Retention Period: The duration of the contractual relationship plus 5 years (civil prescription, Art. 1964 CC) plus 4 years (tax obligations, Art. 66 LGT).
2.3 WhatsApp Communications
- Purpose: Handling instant communication inquiries initiated by the user.
- Data Collected: Phone number, profile name, and message history.
- Legal Basis: Art. 6.1.a GDPR (explicit consent given by clicking the WhatsApp link and sending a message).
- Retention Period: Up to 1 year from the last interaction, unless it converts into a paid activity booking.
3. Recipients and Data Sharing
Your personal data will not be shared with third parties except in the following necessary scenarios:
- Web Hosting Provider: Accesses web form submission data as a Data Processor under a strict data protection agreement (Art. 28 GDPR).
- Email Provider (Google/Gmail): Functions as a Data Processor for transmitting and storing communications containing personal data.
- Tax and Labor Advisory: Accesses client and invoice data as a Data Processor to fulfill mandatory legal and accounting responsibilities.
- Insurance Company: Receives participant details to manage the legally mandatory civil liability and accident insurance policies.
- Public Administrations: Tax authorities (AEAT, Agencia Tributaria Canaria) and other law enforcement or judicial bodies when a legal obligation applies.
4. International Data Transfers
We provide services globally. Some service providers (such as Google/Gmail) may transfer or store data on servers located outside the European Economic Area (EEA). In these circumstances, data protection is guaranteed via:
- Google LLC: Under the EU-U.S. Data Privacy Framework adequacy decision or Standard Contractual Clauses (Art. 46 GDPR).
- Web Infrastructure: All international infrastructure channels utilize standard cryptographic safeguards and valid legal frameworks to keep data safe across borders.
5. Summary of Retention Periods
| Processing Activity | Retention Period | Legal Ground |
|---|
| Contact Form / Inquiry | 1 year from last contact (if no contract is made) | Legitimate Interest / Minimization (Art. 5.1.e GDPR) |
| Activity Contracts & Bookings | 5 years after contract ends | Art. 1964 CC (Prescription of personal actions) |
| Invoicing & Tax Data | 4 years | Art. 66 LGT (Prescription of tax obligations) |
| Activity Insurance Data | 3 years after the activity | Art. 1967 CC (Prescription of civil liability) |
6. Your Rights
You can exercise the following rights at any time, completely free of charge, by emailing Kayakfishinglanzarote@gmail.com with a copy of an identifying document:
- Access (Art. 15 GDPR): Find out if your data is being processed and obtain a copy.
- Rectification (Art. 16 GDPR): Correct inaccurate or incomplete information.
- Erasure / “Right to be Forgotten” (Art. 17 GDPR): Request your data be deleted when it is no longer necessary.
- Objection (Art. 21 GDPR): Object to processing based on specific personal circumstances.
- Portability (Art. 20 GDPR): Receive your data in a structured, electronic format to transmit it elsewhere.
- Restriction (Art. 18 GDPR): Request a temporary halt to processing under legal limits.
If you feel your data rights have been violated, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at C/ Jorge Juan, 6, 28001 Madrid, or via www.aepd.es.
7. Changes to this Privacy Policy
The Data Controller reserves the right to modify this Privacy Policy to comply with legislative, technical, or regulatory updates. Significant changes will be clearly announced on the website.
