Privacy policy
Last updated: 6 October 2026
This English version is provided for convenience. In case of discrepancy, the Catalan and Spanish versions prevail.
1. Data controller
- Controller: Jaume Rigo Servera (Llevant Actiu)
- Tax ID (NIF): 37340505M
- Address: Doctor Servera, 54, 07550 Son Servera (Illes Balears)
- Email: [email protected]
2. What data we process
Only the data you provide through the website forms, by email or via WhatsApp:
- Booking form: first name, surname, phone, email, chosen activity, number of participants and comments.
- Contact form: name, email, phone (optional), type of enquiry, message and, where relevant, details of the school, organisation or group.
Please do not include health information in the comments unless it is needed for your safety during the activity (for example, a severe allergy). If you do, we will use it only for that purpose.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Managing your booking request and organising the activity | Performance of a contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Answering enquiries and preparing proposals for groups or schools | Consent (Art. 6(1)(a) GDPR) |
| Informing you of changes or cancellations (e.g. due to weather) | Performance of a contract (Art. 6(1)(b) GDPR) |
| Complying with legal (tax and accounting) obligations | Legal obligation (Art. 6(1)(c) GDPR) |
We do not send advertising or newsletters without your prior explicit consent.
4. Retention
Booking data is kept for the duration of the relationship and then for the periods required by tax and accounting law. Enquiries that do not lead to a booking are deleted once they are no longer needed.
5. Recipients
We do not share your data with third parties unless legally required. We use the following service providers, acting as data processors:
- Web3Forms: delivery of form submissions to our email.
- Cloudflare: website hosting.
- Google (Gmail): receiving and managing email.
- WhatsApp (Meta): only if you choose to contact us that way, under WhatsApp's terms.
Some of these providers may process data outside the European Economic Area. Such transfers are made with the safeguards provided for in the GDPR (adequacy decisions or standard contractual clauses).
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time, by writing to [email protected].
If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Minors
Children under 14 may not submit data through the forms. Bookings for minors must be made by a parent or legal guardian.
8. Security
We apply reasonable technical and organisational measures to protect your data (HTTPS encryption, restricted access to email and management systems).