In [Legal Name of your Company or Self-Employed] we are aware that water activities and jet ski rentals carry inherent risks. Therefore, to ensure your safety, comply with maritime legislation, and manage your bookings, we need to collect certain personal information.
Below, we explain transparently how we handle your data as established in the General Data Protection Regulation (GDPR) and the LOPDGDD 3/2018.
1. Data Controller
Holder: [Company or Self-Employed Name]
NIF/CIF: [Number]
Address: [Full address, e.g.: Carr. de Cádiz, 161, 29680 Estepona, Málaga]
Email: [Your contact email]
Phone: [Your phone number]
2. What personal data do we collect?
Due to the risky nature of our activities (active tourism and navigation), we collect the following types of data:
Identifying and contact data: Name, surname, DNI/NIE/Passport, email and phone.
Legal qualification data: Copy of Navigation Licenses or nautical qualifications (only in the case of rentals without an instructor).
Data of minors: Age and identity document of the minor, as well as the express authorisation and ID card of the father, mother or legal guardian.
Special categories of data (Health): Responsible declaration regarding physical health status (absence of pregnancy, heart problems, back or neck injuries, or recent surgeries) that prevent the safe practice of water impact sports.
Economic data: Information about the payment of reservations and deposits (managed securely through our payment gateway; we do not store your card details).
3. What do we use your data for and what is the legal basis?
We process your information for very specific purposes, supported by the following legal bases:
Execution of the contract and provision of the service: To manage your reservation in our system, send you confirmations, provide you with the jet ski and manage the deposits.
Compliance with legal obligations (Maritime and Tax Legislation): To invoice our services and to comply with the regulations of the Maritime Captaincy, Civil Guard of the Sea and current navigation laws, which require the registration and identification of boat renters.
Protection of vital interests and safety: The collection of health data (fitness declaration) and age is carried out solely and exclusively to ensure your physical integrity and prevent accidents at sea, relying on the vital interest of the data subject and risk prevention.
Explicit consent: For the processing of the aforementioned health data, as well as for the sending of commercial promotions (only if you have checked the corresponding box).
4. Who do we share your data with?
Your data will never be sold to third parties. However, given the risky activity we carry out, we may need to communicate your data to:
Insurance Companies: In the event of any incident, accident or material/personal damage during the activity, we will communicate your identifying and health data to our Civil Liability and Accident Insurance company for the processing of the report.
Competent Authorities: At the request of the Maritime Civil Guard, Maritime Rescue, Maritime Captaincy, or Courts and Tribunals, in case of inspections, incidents, maritime infringements or rescues.
Service Providers: To platforms such as Stripe/Redsys for payments, and to Odoo S.A. (our software and hosting provider), who act as data processors under strict confidentiality standards.
5. How long will we keep your data?
- Contact and billing data will be kept for the time required by tax and commercial legislation (generally 5 years).
- Data relating to rental contracts, route sheets, authorisations for minors and medical liability waivers will be kept for the limitation periods of possible civil or criminal liabilities arising from accidents or maritime infringements (up to a maximum of 5 to 15 years depending on the severity).
6. What are your rights?
- You can exercise your rights of access, rectification, deletion, opposition and limitation of processing at any time. To do this, you just need to send us an email at [Your contact email], attaching a copy of your ID to identify yourself.
- If you believe we have not processed your data properly, you have the right to lodge a complaint with the Spanish Agency for Data Protection (AEPD).