Privacy policy
Last updated: 30 October 2026
Draft pending legal review. Highlighted details will be completed as soon as they are available.
1. Controller
- Controller: Grupo de recreación deportiva de voley playa Litore (trade name: Litore Beach Volley Academy)
- Tax ID (CIF): G19745223
- Address: Calle de la Barraca 279, 46011 València (Valencia)
- Email for privacy matters: litorevolleyacademy@gmail.com
- Phone: +34 611 58 18 57
2. What data we process, why and on which legal basis
We process the data you give us in the forms on this website or directly at the club (when you join a group or place an order) and the technical data strictly needed to run the website securely.
| Form / processing | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Trial session | Name, email, mobile, level, preferred time, optional message | Handle your request, place you in a group and contact you by WhatsApp or email | Art. 6(1)(b): pre-contractual steps at your request |
| Tournament registration | Names of both players, whether they train at Litore, email, mobile | Handle the pair registration and send tournament information | Art. 6(1)(b): performance of the registration |
| Tournament photos on social media | Your image during the tournament | Post tournament photos on Litore's social media | Art. 6(1)(a): consent, optional and withdrawable at any time |
| Contact | Name, email, mobile (optional), message | Reply to your enquiry, including about our services (team building and corporate tournaments, Erasmus and international students, special training sessions, schools and groups) | Art. 6(1)(f): legitimate interest in answering enquiries; art. 6(1)(b) if the enquiry asks for a quote or a spot |
| People training at the club | Name, mobile, email, level and group, training attendance, fees and payments (amount, date and payment method); for children under 14, the details of the parent or legal guardian | Run training: groups, attendance, collecting fees and club notices (for example weather changes) | Art. 6(1)(b): performance of the club membership contract, entered into by the parent or legal guardian for minors; art. 6(1)(c): keeping accounting and tax records |
| Merchandise orders | Name, email, mobile, product, size, quantity and optional note | Handle your order, tell you when it is ready and hand it over | Art. 6(1)(b): performance of the sales contract |
| Guardian data (under 14) | Name, email and mobile of the parent or legal guardian, and their authorisation | Obtain the consent of the holder of parental responsibility | Art. 6(1)(a) and 8 GDPR, art. 7 LOPDGDD |
| Website security | IP address, date and time, requested URL and browser | Protect the forms against automated submissions and abuse (rate limiting per IP) and keep web server access logs for security and troubleshooting | Art. 6(1)(f): legitimate interest in the security of the service |
| Confirmation emails | Email and request data | Confirm that we have received your request | Same basis as the request concerned |
Fields marked as required in each form are needed to handle your request. Without them we cannot process it. We do not make automated decisions or create profiles.
No payments are made on this website. At the club you can pay in cash or by card. Card payments are made at a card terminal (TPV) of the club's bank, which processes the card data as an independent controller; Litore does not receive or store card numbers.
3. Third-party data
If you give us data about another person (for example your tournament partner), you confirm that you have informed them and that they agree to you sharing it with us for this purpose.
4. Minors
Minors may sign up for our activities. If the person signing up is under 14, the form requires the details of the parent or legal guardian and their express authorisation (art. 7 LOPDGDD). Without it the request is not sent. People aged 14 or over may consent themselves.
Confirmation emails for requests concerning children under 14 are also sent to the guardian.
When a child under 14 trains at the club, the parent or legal guardian completes the registration, provides the child's details and receives the messages about fees and attendance.
5. Retention
We keep the data from requests, tournament registrations, messages and merchandise orders for a maximum of 2 years after our last contact with you. After that we delete it, unless a legal obligation requires us to keep it longer (for example accounting and tax obligations for an order or a paid service).
Data of people training at the club is kept while their membership is active. Afterwards, attendance data is deleted and fee and payment data is kept blocked for 6 years (art. 30 of the Spanish Commercial Code) to meet accounting and tax obligations; after that it is deleted.
Consent to publish photos is kept until you withdraw it. Technical security data (IP for rate limiting) is kept for at most 24 hours. The web server keeps access logs (IP address, date and time, requested URL and browser) for 14 days with daily rotation; after that they are deleted.
6. Recipients and processors
We do not share your data with third parties unless required by law. To run the service we use the following providers, acting as processors (or sub-processors) under a contract in line with art. 28 GDPR:
- Website and database access: ITMAR Solution, which develops and operates the website as processor. The server is located in a data centre of Go Daddy Netherlands B.V. in the Netherlands (European Union).
- Database: Supabase Inc. (servers in the European Union, Stockholm, Sweden).
- Sending the confirmation and notification emails: Infomaniak Network SA (Switzerland, a country with an adequacy decision of the European Commission).
Supabase Inc. is based in the United States. Although the data is stored in the EU, it may be accessed from the United States for support; this transfer relies on the EU-US Data Privacy Framework or, failing that, on the European Commission's standard contractual clauses. Data processed by Infomaniak Network SA stays in Switzerland, whose level of protection the European Commission recognises as adequate.
7. WhatsApp, Instagram and external links
If you message us on WhatsApp or Instagram, or click links to Google Maps, those services process your data as independent controllers under their own privacy policies. This website does not embed content from those services or load their scripts.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, by writing to litorevolleyacademy@gmail.com or by post to Calle de la Barraca 279, 46011 València (Valencia), stating which right you wish to exercise. We may ask you to prove your identity.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security
We apply appropriate technical and organisational measures: encrypted connection (HTTPS), a database with encrypted and restricted access, access to requests only for authorised Litore staff with username and password, and technical logs without the content of the forms.
10. Changes to this policy
We may update this policy to reflect legal or service changes. The date of the last update is shown at the top of this page.