Privacy Policy

Privacy Policy — Club Deportivo Atmosfera

This page is legally binding in Spanish. This is an English courtesy translation. In case of discrepancies, the Spanish version shall prevail.

1) Who we are (Data Controller)

Club Deportivo Atmosfera
Plaza de las Aceitunas 29, 41110 Bollullos de la Mitación (Seville), Spain
Tax ID (NIF): G90155482
Website: https://www.skydiveatmosfera.com
Contact email: info @ skydiveatmosfera.com

Club Deportivo Atmosfera complies with the EU General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and Spain’s LOPDGDD 3/2018.

2) Scope of this policy

This policy applies to browsing our website, contact/request forms, blog comments (if enabled), and communications you send us by electronic or postal means. It does not apply to third‑party websites you may access via links.

3) Data we process, purposes and legal bases

3.1. Contact/Request forms

  • Data: name, surname, email, phone, message and any data you include.
  • Purpose: handle enquiries, quotes and pre‑contractual/contractual management.
  • Legal basis: consent (Art. 6.1.a GDPR) and pre‑contractual measures/contract performance (Art. 6.1.b).

3.2. Bookings/Service provision

  • Data: identification and contact details; data needed to manage jumps/courses; documentation required by law or for safety (e.g., proof of insurance).
  • Purpose: manage the contractual relationship, invoicing, accounting and after‑sales service.
  • Legal basis: contract performance (6.1.b) and legal obligations (6.1.c).

3.3. Health data (only if strictly necessary)

  • Data: information strictly necessary to assess suitability for the activity or to manage insurance/accidents.
  • Purpose: jump/course safety and insurance processing.
  • Legal basis: explicit consent (Art. 9.2.a) and, where applicable, claims handling/insurance purposes (Art. 9.2.f/h, as appropriate).
  • Note: we apply data‑minimisation and enhanced confidentiality.

3.4. Site comments (WordPress)

  • Data: data shown in the comment form, IP and browser user‑agent to help spam detection.
  • Purpose: publish comments and ensure site security.
  • Legal basis: legitimate interests (6.1.f) in keeping the site secure and moderating content.
  • Gravatar: an anonymous hash of your email may be sent to Gravatar to check if you use it. Privacy policy: https://automattic.com/privacy/. After approval, your profile image will be public next to your comment.

3.5. User accounts and access (if applicable)

  • Data: credentials and display preferences.
  • Purpose: manage your account and session.
  • Legal basis: contract performance (6.1.b).

3.6. Media content

  • If you upload images, avoid including EXIF GPS location data. Others may download and extract such data.

3.7. Cookies and similar tech

  • We use technical cookies and, where applicable, preference, analytics or marketing cookies.
  • Details for each cookie (purpose, duration, provider and legal basis) are set out in our Cookie Policy and the site’s consent banner.

3.8. Embedded third‑party content

  • Pages may embed content (e.g., videos, images, articles). Embedded content behaves as if you visited that third‑party site, which may collect data, use cookies and track you under its own policies.

4) Retention periods

  • Enquiries & communications: up to 12 months from your last interaction or until you withdraw consent.
  • Contract & billing data: for the statutory periods (e.g., up to 6 years for accounting/tax records).
  • Comments: indefinitely while the content remains published or until you request deletion.
  • Accounts: for the duration of the relationship; after closure, for limitation periods on liabilities.
  • Cookies: as set in the Cookie Policy/consent banner.

5) Recipients and processors

  • Service providers (hosting, maintenance, email and office tools) processing data on our behalf under data‑processing agreements.
  • Insurers and partners strictly necessary to manage insurance, incidents or claims.
  • Public authorities where there is a legal obligation or requirement.
  • Skydive Spain (DZ) where needed to deliver the service within the operational framework of the jump/course.
    We do not sell personal data.

6) International transfers

Some providers may be located outside the EEA. Where this occurs, we ensure adequate safeguards (e.g., adequacy decisions, Standard Contractual Clauses, or adherence to recognised transfer frameworks) and disclose this in the Cookie Policy or when relevant.

7) Security

We implement appropriate technical and organisational measures to protect the confidentiality, integrity and availabilityof personal data, considering the state of the art, implementation costs, and the nature, scope, context and purposes of processing.

8) Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time by contacting:
Email: info @ skydiveatmosfera.com
Postal: Club Deportivo Atmosfera, Plaza de las Aceitunas 29, 41110 Bollullos de la Mitación (Seville), Spain.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es

9) Minors

Our services are not directed to minors. If we become aware of minors’ data without valid authorisation, we will erase it.

10) Automated decision‑making

We do not make automated decisions that produce legal effects or similarly significantly affect you. Security/anti‑spam tools may perform automated evaluations to protect the site.

11) Social media

Our official presence on social networks is subject to each platform’s terms and policies. We process your data to manage interactions, messages and promotions based on our legitimate interests (6.1.f) and your consent where applicable.

12) Changes to this policy

We may update this Privacy Policy to reflect regulatory or processing changes.