Privacy Policy

1. Data Controller

In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are hereby informed that the personal data provided through this website will be processed by:

  • Data Controller: Naturanda Turismo Ambiental, S.L.
  • Tax Identification Number (NIF): B90054370
  • Business Activity: Booking management, customer service, and the provision of tourist activities and services related to Paddle Surf Sevilla.
  • Contact Email: info@paddlesurfsevilla.com

Paddle Surf Sevilla’s activities are managed by Naturanda Turismo Ambiental, S.L., which processes the personal data necessary to manage bookings, provide the services contracted, and respond to users’ enquiries.

Before publishing this policy, it should be verified that the registered office or postal address provided in the legal notice and other corporate information is up to date.

2. Purposes of Processing

The personal data provided by users may be processed for the following purposes:

  • Booking Management: To process requests, confirm bookings, manage modifications or cancellations, and organise the activities booked.
  • Service Provision: To coordinate participation in activities, provide practical information, and maintain the communications necessary before, during, and after the service.
  • Payment Management: To process payments for contracted services, refunds, invoicing, and other related administrative transactions.
  • Customer Service: To respond to enquiries, requests for information, complaints, and incidents.
  • Compliance with Legal Obligations: To fulfil applicable tax, accounting, administrative, and other legal requirements.
  • Safety and Incident Prevention: To implement the measures necessary to organise activities safely and manage incidents relating to their provision.
  • Commercial Communications: To send advertising or promotional information where a valid legal basis exists and, where required, the relevant consent has been obtained.
  • Promotional Use of Images: To use photographs or video recordings of identifiable participants to promote activities and services, only where the relevant authorisation has been obtained.
  • Website Analysis and Improvement: To collect information about browsing activity and website usage through cookies or other technologies, in accordance with the user’s chosen settings and applicable legislation.

3. Personal Data We May Process

Depending on the user’s relationship with us, we may process the following categories of data:

  • Identification Data: First name and surname.
  • Contact Details: Email address, telephone number, and other details provided to manage the booking.
  • Booking Data: Date, time, number of participants, activity booked, and preferences or organisational information provided by the user.
  • Financial and Billing Data: Information necessary to manage payments, refunds, and invoices. Full bank card details may be processed directly by the relevant payment provider, where the system is configured accordingly.
  • Communications: Information contained in emails, forms, telephone calls, or messages exchanged with us.
  • Browsing Data: Technical and usage information collected through the website and, where applicable, through cookies or similar technologies.
  • Images: Photographs and video recordings in which participants can be identified or are identifiable, where these have been obtained and used in accordance with applicable legislation.

We will only request data that is adequate, relevant, and necessary for the purposes stated. If additional information is essential for a specific activity for safety reasons or to address particular needs, users will be informed of its purpose and the applicable conditions.

4. Use of Images for Promotional Purposes

During activities organised by Paddle Surf Sevilla, managed by Naturanda Turismo Ambiental, S.L., photographs or video recordings featuring participants may be taken.

Photographs and videos in which a person is identified or identifiable constitute personal data. Their capture and use are subject to applicable data protection legislation and the right to one’s own image.

Where Naturanda wishes to use images in which participants are identifiable to promote its activities and services, it will obtain the relevant authorisation beforehand. Such authorisation must be specific, informed, and voluntary. It will specify the intended uses and may cover publication on the Naturanda and Paddle Surf Sevilla websites, their official social media profiles, and other expressly identified promotional materials.

Authorisation for the promotional use of images is independent of the purchase of services and acceptance of this privacy policy. Refusing to authorise such use will not affect the user’s ability to book or participate in activities.

The data subject may withdraw their authorisation at any time by submitting a request to info@naturanda.com. Upon receiving the request, Naturanda will cease using the images for the authorised promotional purposes and take reasonable steps to remove publications from channels under its control. However, it may not always be possible to remove copies distributed by third parties, content shared by other users, or materials that remain outside Naturanda’s effective control.

Images will only be used for the authorised purposes and will not be disclosed to third parties for their own unrelated purposes without an appropriate legal basis.

Where images include minors, the relevant safeguards will apply, and any authorisations legally required from their legal representatives will be obtained, taking into account the legislation governing minors’ right to their own image.

5. Legal Basis for Processing

Personal data will be processed on the following legal bases, depending on the relevant purpose:

  • Performance of a Contract or Pre-contractual Measures: To process requests, manage bookings, provide contracted services, and administer related payments.
  • Compliance with Legal Obligations: To fulfil applicable tax, accounting, and other regulatory requirements.
  • Consent: For processing activities that require it, such as the promotional use of identifiable images where consent is the legal basis, certain commercial communications, and cookies or similar technologies for which consent is required.
  • Legitimate Interests: Where legally applicable, to respond to enquiries, protect the company’s rights, manage complaints, or ensure service safety, while respecting the rights and freedoms of data subjects.

Where processing is based on consent, users may withdraw their consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

Users are not required to consent to the promotional use of their images in order to make a booking or participate in activities.

6. Data Retention

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the periods required by applicable legislation or for as long as legal liabilities may arise.

In general:

  • Booking and Service Provision Data: For the duration of booking management and for the time necessary to address any subsequent complaints or liabilities.
  • Billing and Accounting Data: For the legally established retention periods.
  • Enquiries and Communications: For the time necessary to resolve them and retain a record where justified.
  • Data Processed on the Basis of Consent: Until consent is withdrawn or the data is no longer necessary for the authorised purpose, without prejudice to any applicable legal retention obligations.
  • Promotional Images: For as long as necessary for the authorised purpose or until consent is withdrawn, as applicable, without prejudice to the technical and legal limitations affecting materials already published or distributed.

When data is no longer necessary, it will be deleted or, where applicable, blocked and retained for the periods required by law.

7. Recipients and Service Providers

Personal data may be processed by service providers necessary for business operations, such as web hosting providers, booking management systems, payment platforms, communication tools, IT service providers, and professional advisers.

These providers will only access personal data where necessary to provide their services and in accordance with the applicable contractual terms and legal safeguards.

Data may also be disclosed to public authorities, regulatory bodies, courts, or other recipients where there is a legal obligation to do so or where disclosure is necessary to establish, exercise, or defend legal claims.

Where the management of bookings, provision of services, or administration of the business requires other companies within the Naturanda group to access personal data, such access must be limited to relevant purposes and supported by the appropriate legal basis and safeguards.

Users’ personal data will not be sold to third parties. Any disclosure of data for a third party’s own purposes will require a valid legal basis and, where applicable, prior information and consent.

8. International Data Transfers

If providers that process personal data outside the European Economic Area are used, such transfers will only take place where a valid mechanism under applicable legislation is in place, such as an adequacy decision by the European Commission or the appropriate safeguards.

Where applicable, users may request additional information about the safeguards applied to international transfers through the contact details provided in this policy.

9. Rights of Data Subjects

Where applicable, users may exercise the following rights in relation to their personal data:

  • Right of Access: To find out whether we process their personal data and obtain information about such processing.
  • Right to Rectification: To request the correction of inaccurate or incomplete data.
  • Right to Erasure: To request the deletion of their data where the legal requirements are met.
  • Right to Object: To object to certain processing activities in the circumstances provided for by law.
  • Right to Restriction of Processing: To request restrictions on processing in the cases established by law.
  • Right to Data Portability: To receive certain data in a structured format and request its transfer to another data controller where legally applicable.
  • Right to Withdraw Consent: To withdraw consent at any time where processing is based on consent.

To exercise these rights, users may send a request to info@paddlesurfsevilla.com, specifying the right they wish to exercise and providing the information necessary to process the request. Additional information to verify identity will only be requested where necessary.

If users believe their personal data is not being processed appropriately, they may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) through its website: www.aepd.es.

10. Data Security

Naturanda Turismo Ambiental, S.L. will implement appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, or unlawful processing, taking into account the nature of the data, the risks associated with processing, and applicable legal obligations.

No system can guarantee absolute security. Nevertheless, reasonable and appropriate measures will be maintained to protect the confidentiality, integrity, and availability of information.

11. Personal Data of Minors

Personal data relating to minors will only be processed where a valid legal basis exists and the applicable legal requirements are met. Where necessary, the involvement or authorisation of their legal representatives will be required.

Photographs and video recordings of minors intended for promotional purposes will be subject to the specific safeguards and authorisations required under data protection legislation and the legal framework governing the right to one’s own image.

12. Cookie Policy

This website may use cookies and similar technologies to enable the website to function, remember preferences, analyse website usage, and, where applicable, measure advertising campaigns.

Cookies that are not strictly necessary will only be used where the required consent has been obtained. Users may accept, reject, or configure cookies through the settings mechanism available on the website and subsequently modify their preferences where that mechanism allows.

Detailed information about the cookies used, their purposes, providers, retention periods, and how to manage preferences can be found in the specific Cookie Policy for this website.

13. Links to Third-party Websites

This website may include links to third-party websites or platforms, such as social networks or external services. Each third party is responsible for its own privacy practices and the processing of data carried out in accordance with its terms and policies.

Users are advised to consult the privacy policies of external websites before providing personal data or using their services.

14. Amendments to This Policy

Naturanda Turismo Ambiental, S.L. may update this privacy policy whenever necessary due to legal, technical, or organisational changes or changes to the data processing activities carried out.

The current version will be available on this website and will indicate the date of its latest update.

15. Contact

For any enquiries regarding this privacy policy or the processing of personal data, you may contact us at the following email address: info@paddlesurfsevilla.com

Last updated: 15 October 2026

Call Now Button