Privacy Policy

In accordance with the provisions of the General Data Protection Regulation (EU) and the current Organic Law on Data Protection and the Guarantee of Digital Rights, by accepting this Privacy Policy, you are informed that:

The data controller is: NaluSur Adventure SL, with CIF B-10649937, and its registered office is located at C/ Tenerife, 440, Marbella
Email: info@nalucamps.com
The corporate activity is the sale of summer camps.
This Privacy Policy will only be valid for personal data obtained on the Website, and does not apply to information collected by third parties on other websites, even if those are linked by the Website.

Thus, the data controller expresses its commitment to maintain and ensure safe business relationships through the protection of personal data and safeguarding the right to privacy of each user of the website, indicating that no impact assessment or data protection officer is necessary.

These policies are reviewed with each significant change and at least once a year.

1. WHAT IS PERSONAL DATA?

A brief introduction is important. Therefore, you should know that personal data refers to any information relating to an individual provided when visiting our website, in our case, name and email, and if purchasing a product requiring an invoice, we will request the full address, name, surname, and ID or CIF.

Additionally, when visiting our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet service provider.

PRINCIPLES FOR DATA PROCESSING
For processing your personal data, the following principles from the General Data Protection Regulation and the Organic Law on Data Protection and the Guarantee of Digital Rights will apply:

• Principle of Lawfulness, Fairness, and Transparency: I will always require your consent to process your personal data for one or more specific purposes, which I will inform you about beforehand with absolute transparency.
• Principle of Data Minimization: I will only request data strictly necessary for the purposes for which it is required.
• Principle of Storage Limitation: As you will see below, data will be retained no longer than necessary for the purposes of the processing. Based on the purpose, I will inform you of the retention period. In the case of subscriptions, I will periodically review my lists and remove inactive records over a considerable period.
• Principle of Integrity and Confidentiality: Your data will be processed in such a way as to ensure an adequate level of security for personal data and guarantee confidentiality. You should know that I take all necessary measures to avoid unauthorized access or misuse of user data by third parties.

2. PURPOSE, LEGAL BASIS, CATEGORIES OF COLLECTED DATA, CONSENT FOR PROCESSING, MINORS.

2.1 PURPOSE
The purpose for collecting the data categorized in section 2.4 will be the following, as will be detailed later:

• Sale of summer camps.
• Manage the list of subscribers and users of the website.
• Provide content on the blog.
• Only the owner will have access to your data, and under no circumstances will this data be transferred, shared, or sold to any third party.
• No use will be made other than the intended purpose for which the data was collected, nor will I share this data with any third party.

2.2 MINORS
If you are over thirteen years old, you can register on nalucamps.com without the prior consent of your parents or guardians.

What happens if you are under 14?
In this case, parental or guardian consent is required for us to process your personal data.

Warning: If you are under fourteen years old and have not obtained your parents’ consent, you cannot register on the website, and we will deny your request if we become aware of this.

2.3 LEGITIMATION
Thanks to consent, we can process your data, and it is a requirement to be able to subscribe to the website.
As you know, you can withdraw your consent at any time.

We are also legitimized to process your data to comply with legal obligations in tax, commercial, and accounting matters, for invoicing and accounting purposes.

Furthermore, due to legitimate interest, we can process certain data related to advertising, direct marketing, and/or the use of cookies when consent is not possible, as well as to attend requests for posting comments.

2.4 CATEGORIES OF DATA
The data collected is not specially protected, but categorized as identifying data.

2.4.1 Data Collected on the Website:

• Customer data:
  Identification data derived from the contact method used by the customer, due to the sale of goods or services, and data from contracts or from executing the contractual relationship: Name, surname, NIF, postal address, email, phone, signature, bank details.
  The purpose of processing this data is to fulfill the obligations and rights derived from the existing contractual relationship.

• Web User data:
  Identification data requested in the contact form (name, surname, email) and voluntarily provided in the text field.
  Additionally, when browsing, we collect your IP address, MAC address, operating system or browser used, and even the duration of your visit.
  Voluntary information provided when contacting us by email, which may include identifying data and other information such as documents, contracts, or other files.
  If we publish a recommendation from you regarding our services, we will include your image, name, and surname, with prior consent.
  The purposes for processing these data are based on the user’s interest and on the legitimate interest of the data controller to improve the browsing experience and web analytics.

• Suppliers:
  Identification data from the contact method used by the supplier and data from contracts or derived from executing the contractual relationship: Name, surname, NIF, postal address, email, phone, signature.
  The purpose of collecting this data is to learn about the business proposals from the supplier and to carry out preparatory acts for a subsequent contract.

• Social Media:
  Identification data provided by you as a social media user.
  Information voluntarily provided when contacting us through comments or instant messaging on the network.
  Subscription to newsletters and/or content.

The purpose for collecting this data is to offer updates, discounts, and promotions based on freely, informed, specific, and unequivocal consent.

2.5 DATA RETENTION PERIOD
I will retain your data for the legally established time or until you request its deletion.

2.6 ACCURACY AND TRUTHFULNESS OF THE DATA
You are the sole responsible party for the accuracy and truthfulness of the data you provide, and I am exempt from any responsibility in this regard.
As a user, you must guarantee the accuracy and authenticity of the personal data provided, ensuring that the information you supply in the data collection forms is complete and correct.

3. COMPLIANCE WITH THE APPLICABLE REGULATIONS
We are currently governed by the European Data Protection Regulation and the Organic Law on Data Protection and the Guarantee of Digital Rights.

The data controller also informs that it complies with the Law 34/2002 of July 11, of Information Society Services and Electronic Commerce and will request the USER’s consent for the processing of their email for commercial purposes whenever applicable.

4. SECURITY MEASURES
The data controller informs you that appropriate technical and organizational security measures have been implemented to guarantee the safety of your personal data and to prevent its alteration, loss, or unauthorized access or treatment, taking into account the state of the technology, the nature of the data stored, and the risks involved.

The website also has an SSL certificate, ensuring the security of your data.

5. EXERCISING RIGHTS
Those individuals who have provided their data through the Website can contact the data controller to exercise their rights to access, rectify, delete, limit, or oppose the processing of their data, as well as file a complaint with the Spanish Data Protection Agency.

The most straightforward method would be to access your user account and modify or delete your data.

6. MODIFICATION OF THE PRIVACY POLICY
NaluSur Adventure SL reserves the right to modify its Privacy Policy according to its own criteria, prompted by a legislative, jurisprudential, or doctrinal change by the Spanish Data Protection Agency.
Any modification will be published at least ten days before its effective application. Continued use of NaluSur Adventure SL after such changes implies acceptance of the new policy.

7. DATA PROCESSOR AND THIRD PARTIES
Your data will not be communicated to any third party unless required by law or with your informed, free, specific, and unequivocal consent.
NaluSur Adventure SL has contracted hosting services with Webempresa Europa Sl and email subscription services with SENDINBLUE.

8. THIRD-PARTY SERVICES ON THIS WEBSITE
For the strict purposes of conducting its business, www.nalucamps.com uses the following third-party service providers under their corresponding privacy conditions:

• Hosting: Webempresa
• Email and newsletter services: Brevo
• Payment gateways: BBVA payment gateway, Bank transfer, and Bizum
• Analytics: Google (Analytics)

9. DO YOU NOT WISH TO RECEIVE INFORMATION FROM US OR WANT TO REVOKE YOUR CONSENT?
In accordance with Law 34/2002, of June 11, on Information Society Services and Electronic Commerce, you can object to the use of your information for advertising purposes, market research, or satisfaction surveys at any time, as well as revoke your consent.

10. SOCIAL PLUGINS
On our website, we offer links and services related to various social media networks (e.g., Facebook “Like”). If you are a member of a social network and click the corresponding link, the network provider may link your profile data with the information about your visit to that webpage.

11. ACCEPTANCE, CONSENT, AND REVOCABILITY
By using the services of NaluSur Adventure SL, you declare that you have been informed about the conditions regarding the protection of personal data, accepting and consenting to the processing of your data as outlined in this legal notice.