Privacy policy
This policy describes how personal data are processed in connection with this platform, in line with Regulation (EU) 2016/679 (GDPR) and applicable local data protection laws.
Data controller
Who is responsible for processing your data?
Personal data obtained through this site or application are managed in accordance with the following controller information:
- Identity: Oceanman Open Water, S.L.
- Tax identification number: B42546408
- Postal address: Pol. Ind. Las Atalayas, Avd. Antigua Peseta 136 L12 – 03114 – Alicante
- Phone: 966 37 60 02
- Email: info@oceanmanswim.com
Purpose
We process information you provide to handle requests made through the platform (registration, event enrolment, service-related communications, support, and invoicing where applicable). No automated decisions will be taken solely on the basis of profiling unless a specific case is duly disclosed and a legal basis exists.
Processing may also be necessary to comply with legal obligations, perform contracts or pre-contractual steps, or respond to requests related to the platform’s services.
Please note the distinction between:
- Processing for which the controller identified here is responsible for the purposes requested by users.
- Data that, under arrangements with organisers or other third parties, may form part of those parties’ own files, in which case this platform’s controller may act as a processor where an appropriate contract or processing agreement exists.
Retention criteria
Personal data are kept only as long as necessary for the purposes for which they were collected and to determine possible liabilities arising from that purpose and processing.
Data may be retained in a blocked form for periods required by law to meet claims or requests from competent authorities. After the applicable limitation period, they will be deleted.
Legal basis
The legal basis for processing may be performance of a contract or pre-contractual measures, your consent where applicable, compliance with legal obligations, or legitimate interests, depending on each processing activity and always respecting data minimisation and purpose limitation.
Recipients
Data may be disclosed to competent public bodies, courts, or administrative authorities when there is a legal obligation to provide them.
Processors (for example hosting, messaging, payment gateways, or technical support) may also access data under Article 28 GDPR processing agreements.
Rights
You have the right to obtain confirmation as to whether we process your personal data. You may access your data, request rectification of inaccurate data or, where appropriate, erasure when the data are no longer necessary for the purposes for which they were collected.
In certain circumstances you may request restriction of processing, in which case we will only retain data for the establishment, exercise, or defence of legal claims.
In certain circumstances and on grounds relating to your particular situation, you may object to processing; we will stop unless there are compelling legitimate grounds or processing is necessary for legal claims.
You may exercise the following rights with the controller:
- Right to request access to personal data concerning you.
- Right to request rectification or erasure.
- Right to request restriction of processing.
- Right to object to processing.
- Right to data portability.
To exercise your rights, contact the controller using the details in this document and provide a copy of an official document proving your identity.
Further information and origin
Personal data generally originate from the data subject or from a person legally representing them.
Categories of data that may be processed, as applicable:
- Identification data.
- Postal and email addresses and telephone numbers.
- Economic or academic/professional data in specific cases (for example, event registration or billing).