Privacy policy

Data controller

Your request

We use your name, date of birth, email, intended visit date, chosen language and optional WhatsApp number to process your membership enquiry, check the minimum age and contact you about it (GDPR Article 6(1)(b)). Required fields are necessary for an online request; the WhatsApp number is optional. An online request does not confirm membership. Admission is decided in person, not by an automated decision.

Website and email

Cloudflare provides hosting and processes connection data, including IP addresses. Resend sends the enquiry and acknowledgement emails; Google receives club emails in Gmail. Cloudflare Turnstile checks browser and device signals to protect the form from bots. Technical data also helps prevent abuse and diagnose delivery problems, based on our legitimate interest in a secure, reliable website (GDPR Article 6(1)(f)). We do not use advertising or analytics trackers.

These services may process data outside the EEA, including in the USA. Depending on the service, transfers rely on adequacy decisions, including the EU–US Data Privacy Framework, or EU Standard Contractual Clauses. Details and safeguards are available below.

Storage

Enquiry data is retained for as long as needed to handle the enquiry and related communication; longer only where required by law or necessary for legal claims. Technical records are retained as needed for security and troubleshooting.

Your browser remembers the chosen language until you clear its site data. A sending identifier is kept in session storage to prevent duplicate requests and can be reused for up to 23 hours.

Your rights

Contact us at the email above to request access, correction, deletion, restriction or portability of your data, subject to the legal conditions. You can object to processing based on legitimate interests. You may also complain to a data protection authority, including Spain’s AEPD.