Privacy Policy

Last updated: April 2026

1. Controller

SURFLESSONS4YOU
Calle Puipana, Bloque 18, Apt. 0E
35660 Casilla de Costa – Villaverde
Spain
Contact email: [email protected]

This Privacy Policy governs access to and use of the SURFLESSONS4YOU platform (the “Platform”), provided to users (the “Users”) who are interested in the content and services offered through the Platform.

2. Recommendations

• Keep your device equipped with updated antivirus and antispyware software to prevent security risks and protect stored data.
• Carefully read this Privacy Policy and all other legal texts made available on the Platform.

3. Data We Collect

3.1 Identification Data

• First name and surname.

3.2 Contact Data

• Email address
• Telephone number
• Postal address (if provided)

3.3 Booking Data

• Course selection
• Booking date and time
• Additional details submitted in booking forms

3.4 Payment Data

Processed externally by Stripe or PayPal:

• Tokenized card information
• Transaction ID
• Payment status

(We do not store full credit card details.)

3.5 Technical and Browsing Data

Automatically collected via Hostinger server logs, Cookies, Google Analytics, and Meta Pixel. This may include:

• IP address
• Browser and device information
• Pages visited
• Time and duration of visits
• Referral sources

4. Legal Basis for Processing

4.1 Contract Performance – Art. 6(1)(b) GDPR

To manage bookings, deliver surf lessons, communicate regarding your reservation, and process payments.

4.2 Legitimate Interest – Art. 6(1)(f) GDPR

For ensuring security and proper functioning of the Platform, fraud prevention, hosting, server logs, and essential analytics.

4.3 Consent – Art. 6(1)(a) GDPR

For marketing and commercial communications, newsletter subscription, cookies and tracking technologies (Google Analytics, Meta Pixel). Consent may be withdrawn at any time via [email protected].

5. Purposes of Processing

Your data may be processed for:

1. Providing the requested services on the Platform.
2. Managing booking requests and surf lesson delivery.
3. Responding to inquiries submitted via contact forms.
4. Processing payments via Stripe or PayPal.
5. Sending marketing or commercial communications (only with consent).
6. Generating statistical and analytical insights through Google Analytics and Meta Pixel.
7. Ensuring website functionality, performance, and security.
8. Sharing essential booking details with partner surf schools to deliver the booked course.

6. Accuracy of Data Provided

Users guarantee the accuracy of all data submitted and agree to inform SURFLESSONS4YOU of any updates or changes. Users are responsible for the accuracy of their data. SURFLESSONS4YOU may deny services to Users who provide false information.

7. Data Sharing and Recipients

SURFLESSONS4YOU does not sell or commercially transfer personal data. Data may be shared only with:

7.1 Hosting Provider

Hostinger International Ltd. (Hosting, server logs, security)

7.2 Payment Providers

Stripe, Inc. and PayPal Holdings, Inc.

7.3 Analytics & Marketing Tools

Google Analytics (Google LLC) and Meta Pixel (Meta Platforms, Inc.)

7.4 Partner Surf Schools

To fulfill the booked course, the following data may be shared: Name, contact information (e-mail and mobile number), course details, booking time and date. No additional personal data is shared.

7.5 Legal Obligations

Data may be disclosed if required by law or competent authorities.

8. International Data Transfers

Some service providers (Google, Meta, Stripe, PayPal) may process data outside the EU. These transfers are safeguarded by Standard Contractual Clauses (SCCs) and GDPR-compliant protective measures.

9. Data Retention

• Booking data: Duration of account activity + 5 years for legal compliance
• Payment data: According to tax regulations
• Newsletter data: Until the User unsubscribes
• Analytics data: As configured by Google/Meta settings
• Server logs: Typically 30–180 days

10. User Rights

In accordance with GDPR, Users may exercise the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability
• Right not to be subject to automated decision-making
• Right to withdraw consent

Requests must be sent to: [email protected]

Users may also file a complaint with the Spanish Data Protection Authority (AEPD) or with any competent EU Supervisory Authority.

11. Data Security

SURFLESSONS4YOU applies appropriate technical and organizational measures including SSL encryption, secure hosting environment (Hostinger), restricted access to personal data, and protection against unauthorized access, loss, alteration, or misuse. However, Users acknowledge that no Internet transmission is entirely secure.

12. Cookies and Tracking Technologies

The Platform uses cookies and similar technologies including Google Analytics and Meta Pixel. These cookies require explicit consent, obtained via a cookie banner. Users may customize or withdraw consent at any time. See our Cookie Policy for full details.

13. Contact Forms

Personal data submitted via contact forms is used only to respond to inquiries. If additional purposes are intended (such as marketing), an explicit opt-in checkbox will be provided.

14. Newsletter Subscription

Newsletter communications are only sent after explicit user consent. Users may unsubscribe at any time via a link or by contacting [email protected].

15. Changes to This Privacy Policy

SURFLESSONS4YOU may update this Policy to reflect operational or legal changes. The latest version will always be available on the Platform.

16. Contact

For questions about this Privacy Policy or your personal data, contact:
SURFLESSONS4YOU
Calle Puipana, Bloque 18, Apt. 0E
35660 Casilla de Costa – Villaverde, Spain
Email: [email protected]