Privacy policy

Last updated: 23 August 2026

Data controller

Isobaras Watersports Málaga ("Isobaras") is the data controller for personal data collected through this website, the booking system and WhatsApp. Contact: WhatsApp +34 697 964 440.

Data we collect

  • Identity and contact data: name, email, phone number and Google account identifier (when booking online).
  • Booking data: sport, level, date, time, number of people, minors and responsible adult where applicable.
  • Commercial activity data: sport of interest, preferred area and enquiries via WhatsApp or the contact form.
  • Technical data: IP address, browser type and pages visited (via analytics cookies, only if accepted).

Purpose and legal basis

  • Manage online bookings, confirm places, notify spot changes or cancellations and let you view or cancel your booking (contract performance, GDPR Art. 6(1)(b)).
  • Reply to enquiries via WhatsApp or the contact form (contract performance / legitimate interest).
  • Send communications about offers and news, only with separate explicit consent (consent, GDPR Art. 6(1)(a)).
  • Improve the service and measure site usage with analytics, only if cookies are accepted (consent / legitimate interest).

Data retention

Booking data is kept for up to 12 months after the lesson date, unless a different legal obligation applies. Commercial contact data is kept for up to 3 years from the last contact. Invoicing data is kept for 5 years for tax purposes.

Third parties

We do not sell or transfer your data. To provide the service we use:

  • Google LLC (Google Identity Services): identifies your account when you book online. Google may process data outside the EEA with adequacy decisions and standard contractual clauses. Policy: policies.google.com/privacy.
  • WhatsApp Business (Meta): contact channel and operational notices.
  • Google Analytics (Google LLC): site usage measurement, only if you accept analytics cookies.
  • Cloudflare: website and booking database hosting (processor).

Your rights

You may exercise access, rectification, erasure, objection, portability and restriction by WhatsApp (+34 697 964 440) or post to Av. Antonio Gaudí, 24, 29004 Málaga. If you booked online, you can also view and cancel your booking with the personal link you received (/r/ and your code).

Complaints

If you believe your data is not processed lawfully, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).