Last updated: June 2026.
1. Data controller
- Owner: Ignacio Floris Canal
- Trade name: Sunrise Paddle Surf Barcelona
- Tax ID (NIF): 47725048W
- Address: C/ Rocafort 244, 08029 Barcelona
- Email: supsunrisebarcelona@gmail.com
- Phone: +34 670 621 590
We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD).
2. Data we process
- Identification and contact data: name, email, phone.
- Booking data: activity, date and time, number of people, promotional code.
- Health data you declare: the information you share with us about physical fitness or conditions relevant to safety (processed solely for the purpose of delivering the activity safely, based on your explicit consent and vital interest).
- Payment data: payment is processed through Stripe; we do not store full card details, only the confirmation and reference of the transaction.
- Images: photos and videos taken during the activity.
- Browsing data: data arising from your use of the website (see the Cookies section).
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Managing and confirming your booking and delivering the activity | Performance of the contract |
| Charging the amount (via Stripe) | Performance of the contract |
| Ensuring safety (fitness/health data) | Explicit consent / vital interest |
| Sending you the confirmation, reminders and photos | Performance of the contract |
| Complying with legal and tax obligations | Legal obligation |
| Marketing communications and promotional use of images | Consent |
| Responding to your enquiries | Legitimate interest |
4. Retention
We keep your data for as long as the relationship lasts and, afterwards, for the legal limitation periods (in particular, tax and liability periods). Data processed with your consent is kept until you withdraw it.
5. Recipients and data processors
We do not sell your data. To provide the service we rely on suppliers acting as data processors:
- Stripe Payments Europe, payment processing.
- Google / Firebase (Google Cloud), hosting of booking data, database and notifications.
- IONOS (1&1 IONOS), website hosting.
- Zoho Mail (Zoho Corporation), email management and delivery.
- Collaborating professional photographer (optional premium service), only if you book the photography extra.
We may also disclose data to public authorities where there is a legal obligation to do so.
6. International transfers
Some suppliers (e.g. Google, Stripe, Zoho) may process data outside the European Economic Area. In such cases, those transfers are covered by adequacy decisions or by Standard Contractual Clauses approved by the European Commission, or other appropriate safeguards.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and to withdraw consent, by writing to supsunrisebarcelona@gmail.com and identifying yourself. You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
8. Security
We apply reasonable technical and organisational measures to protect your data. The booking and payment are transmitted through encrypted connections.
9. Images
Photos and videos are part of the service. Their promotional use requires your consent (section 10 of the Terms and Conditions) and you may object to it or withdraw it at any time by writing to supsunrisebarcelona@gmail.com.
10. Cookies
The website uses technical cookies necessary for its operation and, where applicable, measurement or analytics cookies. You can configure your browser to manage them.
11. Changes
We may update this policy. We will publish the current version on the website with its update date.