1. USER INFORMATION

 

Who is the controller of your personal data?

Club De Golf Son Servera is the Controller of the USER’s personal data and informs him/her that these data shall be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and the Organic Law 3/2018 of 5 December (LOPDGDD).

 

What data types do we request and process?

According to the form or the way we obtain your data, we always ask for the minimum necessary to fulfil the purposes detailed in each case.

 

For what purpose do we process your personal data and why do we do it?

In the form Contact

• Respond to queries or any type of request made by the user through any of the contact methods available at the controller's website.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)
• Send commercial communications.
  (with the consent of the data subject, Article 6(1)(a) GDPR)
• Conduct market research and satisfaction surveys.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)

 

In the Newsletter form

• Send newsletters, news, offers and online promotions.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the online forum form

• Participate in online forums proposed by the controller.
  (with the consent of the data subject, Article 6(1)(a) GDPR)
• In the Curriculum Vitae form
  To involve the interested party in the personnel selection processes and analyse the applicant's profile with the aim of selecting a candidate for the vacant position of manager.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the Testimony form

• Moderate and publish user experiences, opinions and suggestions.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the Comments form

• Moderate and publish opinions on a publication on the website.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the form Ethical or complaints channel

• Manage irregularities reported through the ethical channel and determine investigations.
  for the performance of a legal obligation, 6.1.c GDPR

 

In the form User register

• Manage the user account and provide personalised website access.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the e-commerce form

• Manage online purchases/orders, payments and shipment.
  (for the performance of a contract or pre-contract, 6.1.b GDPR)
• Manage purchases and quotes.
  (for the performance of a contract or pre-contract, 6.1.b GDPR)
• Conduct satisfaction and quality surveys.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)

 

In the form Loyalty card

• Manage loyalty card requests.
  (with the consent of the data subject, Article 6(1)(a) GDPR)
• Send commercial communications.
  (with the consent of the data subject, Article 6(1)(a) GDPR)
• Conduct market research and satisfaction surveys.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)

 

In the form Promotions and competitions

• Manage participation in promotions, contests and competitions.
  (with the consent of the data subject, Article 6(1)(a) GDPR)
• Send commercial communications.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the Competition Registration form

• Process and manage participation in competitions organised by the responsible person.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the form Membership registration

• Process membership requests and keep members informed.
  (for the performance of a contract or pre-contract, 6.1.b GDPR)
• Send commercial communications.
  (with the consent of the data subject, Article 6(1)(a) GDPR)
• Conduct market research and satisfaction surveys.
  (for the legitimate interests of the controller, Art. 6.1.f GDPR

 

In the form Reservations

• Formalise reservations.
  (for the performance of a contract or pre-contract, 6.1.b GDPR)
• Send commercial communications.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)

 

In the form Appointments

• Schedule meetings and appointments.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)

 

In the form Social networks

• Maintain relationships with users via social networks.
  • Process requests and consultations.
  • Report on activities and events.
  • Inform about activities, events, products and services.
  • Interact via official profiles.

 

The user has a profile on the same social network and has decided to join the Controller's social network, thus showing their interest in the information that will be published on it. Therefore, at the moment they request to follow our official page, they provide us with their consent for the processing of their data.

The User may access the social network's own privacy policies at any time, as well as configure their profile to ensure their privacy.

Once the User becomes a follower or joins the Controller's social network, they will be able to publish comments, links, images, photographs, or any other type of content supported by it.

The User must, in all cases, be the copyright holder of the published content and own the intellectual property rights, or have the consent of the affected third parties.

• Sending commercial communications relating to the activities of companies within the Group, as well as external companies with which commercial cooperation or intermediation agreements have been established.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the form Instant messaging

• Schedule meetings and appointments.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)
• Send commercial communications.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)
• Manage purchases and quotes.
  (for the performance of a contract or pre-contract, 6.1.b GDPR)
• Manage online purchases/orders, payments and shipment.
  (for the performance of a contract or pre-contract, 6.1.b GDPR)
• Send commercial quotes for products and services.
  (for the performance of a contract or pre-contract, 6.1.b GDPR)
• Send commercial communications.
  (with the consent of the data subject, Article 6(1)(a) GDPR)
• Respond to queries or any type of request made by the user through any of the contact methods available at the controller's website.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)

 

In the form Video surveillance

• Security and access control.
• Labour and internal activity control.
• Retention period: maximum 30 days.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the form Images and recordings

• Manage static/dynamic image files and publications.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the form Clients and suppliers

• Commercial management with clients and suppliers.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)

 

In the form Advertising exclusion

• Avoid sending commercial communications to users who opted out.
  (for compliance with a legal obligation, GDPR 6.1.c)

 

In the form Commercial advertising

• Advertising management and commercial prospecting.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)

 

In the form Rights of the interested parties

• Respond to GDPR rights requests.
  (for compliance with a legal obligation, GDPR 6.1.c)

 

In the form Money Laundering Prevention

• Prevent money laundering and terrorism financing.
  (for compliance with a legal obligation, GDPR 6.1.c)

 

In the form Users Web, app and other platforms

• Identify users accessing corporate platforms.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)

 

In the form Training, workshops or activities

• Manage access and usage conditions.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)

 

In the form Wi-Fi network connection

• Conduct market research and satisfaction surveys.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)
• Conduct satisfaction and quality surveys.
  (in accordance with the legitimate interests of the controller, Art. 6.1.f GDPR)
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the form Legal representatives and contact persons

• Manage relationships with representatives and contact persons.
• The data collected will be processed for the management of the informed purposes.
• The person responsible has adequate security measures in place for the security of this data.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

In the form Legal representatives and contact persons

• In the event that you are the legal representative or contact person for any of the entities or individuals with whom the Foundation has relations, the data controller will process your data to monitor the development of the intended relationship.
  (with the consent of the data subject, Article 6(1)(a) GDPR)

 

For how long will we keep your personal data?

Data shall be stored no longer than necessary for processing purposes or legal obligations. Afterwards, data will be securely anonymised or destroyed.

 

To whom do we disclose your personal data?

No personal data communication to third parties is foreseen except where necessary for service providers related to communications, always under confidentiality and processor agreements.
Third-party data provided by the User
In the event that the USER provides personal data of third parties for any purpose, they guarantee that they have previously informed the affected parties and obtained their consent for the communication of their data to the Data Controller.

The USER guarantees that the individuals concerned are of legal age and that the information provided is accurate and truthful.

The Controller may verify the consent of said data subjects through an initial non-commercial email requesting confirmation of the consent given on their behalf by the USER.

In the event that liabilities arise from a breach of these terms by the USER, they shall be responsible for the consequences of such breach.

 

Do we make international transfers?

In accordance with Article 44 of the GDPR, the authorisation of an international data transfer to a country that has not been declared as having an adequate level of protection may only be granted if sufficient safeguards are obtained.
Thus, it may be granted if the controller provides a written contract, concluded between the exporter and the importer of data, which includes the necessary guarantees for the protection of the data subjects and guarantees the exercise of their rights.
It is possible that the controller uses service providers who have servers or premises elsewhere, and therefore these transfers are carried out.
To consult the updated list of suppliers, please contact the manager or via contabilidad@golfsonservera.com.

 

What are your rights?

Users have the right to:

• Withdraw consent at any time.
• Access, rectify, port or erase data.
• Limit or object to processing.

 

Contact details to exercise your rights:

Club De Golf Son Servera
C/ Del Golf, SN – 07559 Costa dels Pins (Balearic Islands)
E-mail: contabilidad@golfsonservera.com

 

2. COMPULSORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

The USERS, by marking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or download forms, expressly, freely and unequivocally accept that their data are necessary for the supplier to meet their request, voluntarily providing their data in the remaining fields. The USER ensures that the personal data provided to the CONTROLLER are true and is responsible for communicating any changes to them.

The user guarantees that the personal data provided to the controller are truthful and undertakes to communicate any changes thereto.

The CONTROLLER informs that all data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the USER. If not all data are provided, there is no guarantee that the information and services provided will be completely adapted to the User’s needs.

If you provide us with personal data of other individuals by any means, the controller warns that you must do so with their consent and having previously informed them of the points contained in this Privacy Policy.

Furthermore, the responsible person undertakes to provide any third party whose data you provide to us with the relevant information, in accordance with the provisions of Article 14 of the General Data Protection Regulation.

 

3. SECURITY MEASURES

That in accordance with the provisions of the current regulations on the protection of personal data, the CONTROLLER is complying with all the provisions of the GDPR and LOPDGDD regulations for processing the personal data for which they are responsible, and is manifestly complying with the principles described in Article 5 of the GDPR, by which they are processed in a lawful, fair and transparent manner in relation to the data subject and appropriate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that all appropriate technical and organisational policies have been implemented to apply the security measures established by GDPR and LOPDGDD in order to protect the rights and freedoms of the USERS, and has communicated the appropriate information for them to be able to exercise their rights and freedoms.

For more information about privacy safeguards, you can contact the DATA CONTROLLER via:

Club De Golf Son Servera
C/ Del Golf, SN – 07559 Costa dels Pins (Balearic Islands)
E-mail: contabilidad@golfsonservera.com

 

4. VALIDITY

This privacy policy is effective from 16/04/2026.

The controller reserves the right to amend this policy to adapt it to future legislative or jurisprudential updates that are applicable, or for other technical, operational, commercial, corporate reasons, etc. If, as a consequence of the changes, users' rights are affected, the controller undertakes to inform them of the reasons.