Privacy Policy

Privacy Policy

This legal text gives you details of how we collect and process your personal data through your use of our website , including any information you may provide to us through the site when you purchase a service, sign up for our newsletter, or provide your details via the form provided for this purpose.

By providing us with your data, we inform you that our services are not available to those who are legally prohibited from giving consent. Therefore, when you submit the forms to us, you guarantee that you have sufficient capacity to give consent.

Below, we inform you about the data protection policy of: Complejo Naútico El Portús, SA

1. Data controller.

Contact details of the person responsible:
Nautical Complex El Portús, SA, with CIF: A78448982 and address: Calle Coslada 5 28028 Madrid and telephone: 968553052. Email: lopd@elportus.com

Registered in the Commercial Registry of Madrid on October 14, 2014, Volume 14633, Folio 198, Section 8, Sheet M 37024, I/A38.

Complejo Naútico El Portús, SA, is responsible for your data. (Hereinafter, "we" or "our").

2. What data do we collect?

The General Data Protection Regulation defines personal data as any information relating to an identified or identifiable natural person, that is, any information capable of identifying a person. This does not include anonymized or percentage-based data.

Any personal data that may be collected directly from the interested party will be treated confidentially and will be incorporated into the corresponding processing activities, owned by Complejo Naútico El Portús, SA

On our website, we may process certain types of personal data, which may include:

Identity data: name and surname.
Personal characteristics data: date of birth.
Contact information: email, telephone number and address.
Economic data: banking data.
Technical data: login data, internet protocol addresses, browser type and version, time zone setting and location, operating system, browser plug-in types and versions, and any other technology on the devices you use to access our website
Profile data: password.
Marketing and communications data: preferences for receiving marketing communications from us and preferred means of communication.

We do not collect any special categories of personal data (such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health information, genetic or biometric data).

If you are required to collect personal data by law or under the terms of a contract between us and you refuse to provide it, we may not be able to perform the contract or provide the service, and you must notify us in advance.

3. How do we collect your personal data?

The means we use to collect personal data are:

Through the form on our website, through our contact email, by phone, or by post, when:
- Request information about our services
- Hire our services
- Subscribe to any of our services or publications
- Send your comments
To ensure the quality of our portal, we reserve the right to reject any registration request or to suspend or cancel a previously accepted registration if we believe it does not meet these requirements or any other law or regulation. If this occurs, we will attempt to explain the reasons for our decision, but we cannot commit to doing so in all cases.
Through technology or automated interactions: On our site, we may automatically collect technical data about your device, browsing actions, and usage patterns. This data is collected through cookies or similar technologies. For more information, please consult our cookie policy here (link).
Through third parties:
- Google: Analytics data or search data. Outside the European Union.

4. Purpose and legitimacy for the use of your data.

The most common uses of your personal data are:

For the formalization of a contract between Complejo Naútico El Portús, SA and you.
When you give your consent to the processing of your data.
When we need them to comply with a legal or regulatory obligation.
When necessary for our legitimate interest or that of a third party.

The User may revoke the consent given at any time by sending an email to lopd@elportus.com or consulting the section on exercising rights below.

Below, we've attached a table showing the ways we'll use your personal data and the legal basis for such use. You can also find out what type of personal data we'll process. We may process some personal data for additional legal reasons, so if you need details, please email lopd@elportus.com.

Form Purpose Data type Legitimacy for its treatment
Contact The purpose is the management of contacts and information requests received via the web · Name
· Last names
· Email
· Phone
· Address Consent of the data subject (art. 6.1.a GDPR)
Pre-contractual measures (art. 6.1.b GDPR)
Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
Newsletter The purpose is to manage the data provided to send information about our services and promotions. · Email Consent of the data subject (art. 6.1.a GDPR)
Pre-contractual measures (art. 6.1.b GDPR)
Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
I want to join The purpose is the management of data provided to join the club · Name
· Last names
· Birthdate
· Address
· Email
· Phone
· Password Consent of the data subject (Art. 6.1.a GDPR) Pre-contractual measures (Art. 6.1.b GDPR)
Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
Access The purpose is the management of data provided to access · Email
· Password
Consent of the data subject (art. 6.1.a GDPR)
Pre-contractual measures (art. 6.1.b GDPR)
Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
Reservations The purpose is the management of reservations · Name
· Last names
· Address
· Email
· Phone
· Card details
Consent of the data subject (art. 6.1.a GDPR)
Processing necessary for compliance with a legal obligation applicable to the data controller (art. 6.1.c GDPR)
Processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6.1b GDPR). Processing is necessary for the purposes of the legitimate interests pursued by the controller (Article 6.1f GDPR).

Commercial communications: You will only receive communications if

You requested information from us or contracted a product or service with us.

If you have provided us with your information, please check the box provided on our form.

As long as you have not expressed your wish to stop receiving such communications.

We obtain your express consent before sending you any communications, and you may request at any time that we stop sending you communications by emailing lopd@elportus.com

When you opt out of receiving our communications, your personal data will continue to be stored as a result of the contract you entered into to comply with legal requirements.

Purpose: We will only use your data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason, with prior notice so that you are aware of the legal basis for processing it, and as long as the purpose is compatible with the original purpose.

5. How long will we retain your data?

They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the various regulations regarding retention periods will apply to the extent applicable to this processing.

Email or form subscriber data: From the moment the user subscribes until they unsubscribe.

6. Minors.

Complejo Naútico El Portús, SA does not authorize minors under the age of 14 to provide their personal data through the means provided on this website (by completing web forms for service requests, contact forms, or by sending emails). Therefore, anyone providing personal data through these means formally declares that they are over the age of 14. Complejo Naútico El Portús, SA is exempt from any liability for failure to comply with this requirement.

If your child, who is under the age limit, has provided personal information to Complejo Naútico El Portús, SA, please contact us so we can exercise your applicable rights.

In those cases in which the services offered by Complejo Naútico El Portús, SA are intended for minors under 14 years of age, the means will be enabled to obtain the authorization of the parents or legal guardians of the minor.

7. Exercise of Data Protection Rights:

How can these rights be exercised? Users may send a communication to the registered office of Complejo Naútico El Portús, SA or to the email address lopd@elportus.com, including a photocopy of their ID or other similar identification document in both cases, to request the exercise of the following rights:

Access to your personal data: You may ask Complejo Naútico El Portús, SA if it is using your personal data.
To request rectification , if they are not correct, or to exercise the right to be forgotten with respect to them.
To request the limitation of treatment , in this case, they will only be kept by Complejo Naútico El Portús, SA for the exercise or defense of claims
To object to processing: Complejo Naútico El Portús, SA will stop processing your data in the manner you indicate, unless it must continue to be processed for legitimate reasons or to exercise or defend potential claims.
Data portability : If you wish your data to be processed by another company, Complejo Naútico El Portús, SA will facilitate the portability of your data to the new controller.

You may use the forms made available to you by the Spanish Data Protection Agency to exercise your rights above: Here

Filing a complaint with the Spanish Data Protection Agency (AEPD): If you believe there is a problem with the way Complejo Naútico El Portús, SA is processing your data, you may direct your complaints to the corresponding supervisory authority, which in Spain is the Spanish Data Protection Agency.

We will ask you for specific information to help us confirm your identity and ensure your right to access your personal data (or exercise any of the other rights mentioned above). This is a security measure to ensure that personal data is not disclosed to anyone who is not entitled to receive it.

We will process all requests within the statutory period of one month. However, it may take longer if your request is particularly complex. In this case, we will notify you and keep you updated.

8. Data communication: provision of services.

In the course of our work, we may require the assistance of third parties. They will process your data solely to provide the contracted service, and with whom we have the appropriate measures in place to guarantee your rights:

Service providers that provide systems administration and information technology services.
Professional advisors, including lawyers, auditors, and insurers, who provide banking, legal, insurance, and accounting consulting services.

All data processors to whom we transfer your data will respect the security of your personal data and process it in accordance with the GDPR.

We only allow these processors to process your data for specific purposes and in accordance with our instructions. However, in compliance with transparency, you can request a list of these companies that provide services to us by emailing: lopd@elportus.com

9. Data Security.

We have implemented appropriate security measures to prevent your personal data from accidental loss, unauthorized use or access, alteration, or disclosure. Furthermore, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have implemented procedures to deal with any suspected personal data breach and will notify you and the Supervisory Authority in the event of a security breach, as regulated by Articles 33 and 34 of the GDPR.

Form	Purpose	Data type	Legitimacy for its treatment
Contact	The purpose is the management of contacts and information requests received via the web	· Name · Last names · Email · Phone · Address	Consent of the data subject (art. 6.1.a GDPR) Pre-contractual measures (art. 6.1.b GDPR) Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
Newsletter	The purpose is to manage the data provided to send information about our services and promotions.	· Email	Consent of the data subject (art. 6.1.a GDPR) Pre-contractual measures (art. 6.1.b GDPR) Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
I want to join	The purpose is the management of data provided to join the club	· Name · Last names · Birthdate · Address · Email · Phone · Password	Consent of the data subject (Art. 6.1.a GDPR) Pre-contractual measures (Art. 6.1.b GDPR) Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
Access	The purpose is the management of data provided to access	· Email · Password	Consent of the data subject (art. 6.1.a GDPR) Pre-contractual measures (art. 6.1.b GDPR) Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
Reservations	The purpose is the management of reservations	· Name · Last names · Address · Email · Phone · Card details	Consent of the data subject (art. 6.1.a GDPR) Processing necessary for compliance with a legal obligation applicable to the data controller (art. 6.1.c GDPR) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6.1b GDPR). Processing is necessary for the purposes of the legitimate interests pursued by the controller (Article 6.1f GDPR).