Privacy Policy

Last Updated: 26/06/2026

This Privacy Policy explains how Shaka Fuerteventura collects, uses, stores and protects your personal data, in accordance with the GDPR and applicable Spanish law.

1. Data Controller

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable Spanish legislation, the Data Controller responsible for the processing of personal data collected through this website is:

For any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above.

2. Scope of this Policy

This Privacy Policy explains how we collect, use, store, and protect personal information obtained through our website and through our activities, including:

• Windsurf lessons and courses
• Wingfoil lessons and courses
• Kitesurf lessons and courses
• Equipment rental services
• Equipment sales
• Events and competitions
• Customer support and enquiries
• Website interactions and bookings

3. Personal Data We Collect

Information provided directly by you

We may collect:

• Full name
• Date of birth
• Nationality
• Email address
• Telephone number
• Postal address
• Emergency contact information
• Booking and reservation details
• Payment information
• Information provided through forms, emails, phone calls, or messaging services

Information collected automatically

When visiting our website, we may automatically collect:

• IP address
• Browser and device information
• Operating system
• Date and time of visits
• Pages visited
• Referring website
• Cookie and tracking information

4. Purposes and Legal Bases for Processing

Customer enquiries

To respond to requests, questions, and booking enquiries.
Legal Basis: Article 6(1)(b) GDPR – pre-contractual measures.

Provision of services

To manage bookings, lessons, rentals, purchases, events, and customer support.
Legal Basis: Article 6(1)(b) GDPR – performance of a contract.

Legal obligations

To comply with accounting, tax, insurance, health and safety, and other legal obligations.
Legal Basis: Article 6(1)(c) GDPR – legal obligation.

Marketing communications

To send newsletters, offers, and information about our services where consent has been provided.
Legal Basis: Article 6(1)(a) GDPR – consent.

Website security and improvement

To protect our website, prevent fraud, and improve user experience.
Legal Basis: Article 6(1)(f) GDPR – legitimate interest.

5. Photographs and Video Recordings

During lessons, courses, rentals, events, competitions, and other activities organised by Shaka Fuerte SL, photographs and video recordings may be taken.

These images and recordings may be used for:

• Publication on our website;
• Social media platforms;
• Promotional videos;
• Printed and digital advertising materials;
• Marketing campaigns;
• Newsletters and commercial communications;
• Documentation and promotion of our activities and events.

Where participants are identifiable, the use of photographs and videos for promotional or commercial purposes will be based on the participant's prior consent, in accordance with the GDPR, Spanish data protection legislation, and Spanish laws governing image rights.

Participants may withdraw their consent at any time by contacting us at info@shaka-fuerte.com. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal.

Where reasonably possible, participants who do not wish to appear in photographs or videos may inform our staff before or during activities, and reasonable efforts will be made to respect their wishes.

For participants under 18 years of age, consent must be provided by a parent or legal guardian.

6. Data Retention

Personal data will be retained only for as long as necessary for the purposes described in this Policy or as required by law. Generally:

• Contact enquiries: up to 24 months after the last interaction.
• Booking and customer records: for the legally required retention periods under Spanish law.
• Marketing communications: until consent is withdrawn.
• Website logs and technical data: for the period necessary to maintain website security and functionality.

7. Recipients of Personal Data

We may share personal data with:

• Website hosting providers;
• IT and software service providers;
• Payment processors;
• Accountants, auditors, legal advisors, and tax consultants;
• Insurance providers;
• Government authorities and regulators where legally required.

Personal data will never be sold to third parties.

8. International Transfers

Where service providers are located outside the European Economic Area (EEA), personal data may be transferred internationally only where appropriate safeguards are in place as required by Chapter V of the GDPR.

9. Your Rights

Under applicable data protection laws, you have the right to:

• Access your personal data;
• Correct inaccurate information;
• Request deletion of your data;
• Restrict processing;
• Object to processing;
• Request data portability;
• Withdraw consent at any time.

Requests may be sent to: info@shaka-fuerte.com. You may be asked to verify your identity before we process your request.

10. Right to Lodge a Complaint

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Spanish supervisory authority:

Agencia Española de Protección de Datos (AEPD) — www.aepd.es

11. Cookies

This website does not set its own cookies and uses no analytics or marketing cookies. The only third-party cookies that may be set come from Google Maps, which loads only if you choose to enable it. Full details are available in our Cookie Policy.

12. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, disclosure, alteration, or destruction. However, no internet transmission or storage system can be guaranteed to be completely secure.

13. Children's Data

Our sports activities may be attended by minors. Where required by law, parental or guardian consent will be obtained before processing a minor's personal data or image.

14. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Updated versions will be published on this page together with the revised effective date.

15. Governing Law and Jurisdiction

This Privacy Policy shall be governed by the laws of Spain and applicable European Union legislation, including the GDPR and Spanish Organic Law 3/2018 (LOPDGDD).

Any dispute arising in connection with this Privacy Policy or the use of this website shall be subject to the jurisdiction of the competent courts of Spain, without prejudice to any mandatory consumer protection rights.