Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Data We Collect

We may collect the following types of personal data:

2.1 Contact Information

When you contact us via WhatsApp or email, we may collect your phone number, name, and any information you voluntarily provide in your messages.

2.2 Technical Data

We automatically collect certain technical information when you visit our website, including:

• IP address
• Browser type and version
• Operating system
• Device information
• Pages visited and time spent on the site
• Referring website

2.3 Booking Data

When you book a Muay Thai camp, we collect information necessary to process your reservation, including your full name, contact details, payment information, and any special requirements or health-related information you provide.

3. Purpose of Data Processing

We process your personal data for the following purposes:

• To respond to your inquiries and provide customer support
• To process and manage your camp bookings
• To send you booking confirmations and important updates
• To improve our website and services
• To comply with legal obligations
• To protect our legitimate business interests

4. Legal Basis for Processing

Under Spanish data protection law (Ley Orgánica 3/2018 - LOPDGDD) and the General Data Protection Regulation (GDPR), we process your data based on:

• Contract performance: Processing necessary to fulfill our contractual obligations when you book a camp
• Consent: When you voluntarily contact us or provide your information
• Legitimate interests: For improving our services and website functionality
• Legal obligations: To comply with applicable Spanish and EU laws

5. Data Recipients and Third Parties

Your data may be shared with the following third parties:

• Hosting provider: Our website hosting service (Lovable/Netlify) processes technical data
• Google Fonts: We use Google Fonts to display typography on our website
• WhatsApp (Meta): When you contact us via WhatsApp
• Payment processors: For processing camp booking payments
• Social media platforms: Instagram and Facebook for marketing purposes

These third parties are located in the EU/EEA or in countries with adequate data protection levels, or we have appropriate safeguards in place.

6. Data Retention Period

We retain your personal data for the following periods:

• Contact inquiries: Up to 2 years from the last interaction
• Booking records: 6 years after the camp date (as required by Spanish commercial law)
• Technical data: Up to 12 months
• Payment information: As required by Spanish tax regulations

7. Your Rights

Under Spanish and EU data protection law, you have the following rights:

• Right of access: Request information about the data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests
• Right to restrict processing: Request limitation of how we use your data
• Right to withdraw consent: Withdraw your consent at any time

To exercise any of these rights, please contact us at lapalmajoa@gmail.com.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure hosting infrastructure
• Limited access to personal data on a need-to-know basis
• Regular security reviews

9. Cookies and Local Storage

Our website may use essential cookies and local storage for basic functionality. We do not use tracking cookies or third-party analytics cookies.

Essential cookies are necessary for the proper functioning of the website and cannot be disabled.

10. Contact Information

For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact us:

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated Privacy Policy.