Skip to main content

Privacy Policy

Written by Administrator2 on . Posted in Uncategorised.

Last updated: 21 May 2026

1. Data controller

The data controller of this website (kiteschoolfuerteventura.com) is:

Giulio Maria Cappellano
NIE/CIF: ESY1343975F
Calle Benito Pérez Galdós 31
35650 El Cotillo (Las Palmas) — Spain
Phone: +34 633 168 995
E-mail: through the contact form

2. What data we collect

We process the following categories of personal data:

  • Contact form data: name, e-mail address, optional phone number, message content, language preference. Submitted voluntarily by the user when contacting us.
  • Technical data: IP address, browser type, operating system, pages visited, date/time of visit, referrer. Collected automatically by the web server log for security and statistical purposes.
  • reCAPTCHA data: Google reCAPTCHA processes hardware and software information (browser, screen size, IP address, cookies) to assess if the form is being submitted by a human. See Google Privacy Policy.

We do not collect special categories of data (health, religion, political opinions, etc.). We do not knowingly collect data from minors under 16.

3. Legal basis (Art. 6 GDPR)

  • Contact form & reply: legitimate interest (Art. 6(1)(f)) to respond to your enquiry / pre-contractual measures (Art. 6(1)(b)).
  • Server logs & security: legitimate interest (Art. 6(1)(f)) to protect the website from abuse.
  • reCAPTCHA: legitimate interest (Art. 6(1)(f)) to prevent spam and automated abuse of the contact form.

4. How long we keep your data

  • Contact form messages: up to 24 months from the last interaction, unless a longer retention is required to handle a request or to comply with legal obligations.
  • Server logs: up to 12 months.
  • reCAPTCHA: retention as per Google's policies.

5. Who has access to your data

Your data is processed by the data controller. The following third parties may process limited data on our behalf as data processors or independent controllers:

  • Google Ireland Ltd. — reCAPTCHA service (data transferred to Google LLC in the United States under SCCs).
  • Hosting provider — technical operation of the server.
  • Stay22 Inc. — affiliate redirect service, activated only when you click on a Stay22 link or widget. See Stay22 Privacy Policy.

We do not sell or rent your data to third parties.

6. International transfers

Google reCAPTCHA may transfer data to the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses. No other extra-EEA transfer takes place.

7. Your rights (Art. 15–22 GDPR)

You have the right to:

  • Access your personal data (Art. 15)
  • Request rectification of inaccurate data (Art. 16)
  • Request erasure ("right to be forgotten", Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time (where consent is the legal basis)
  • Lodge a complaint with the Spanish Data Protection Authority (AEPD) or your local supervisory authority

To exercise any of these rights, write to us through the contact form. We respond within 30 days as required by GDPR.

8. Cookies

For details on cookies used by this site, see our Cookie Policy.

9. Changes to this policy

We may update this Privacy Policy periodically. The "Last updated" date at the top will reflect any change. Significant changes will be announced on the homepage for at least 30 days.

10. Contact

For any privacy-related question or request, please use the contact form or write to the address above.