Privacy policy

Data protection policy

The privacy and confidentiality of data are important aspects for Club Gimnàstic Ciutadella.

This data protection policy explains how we handle personal data collected from our clients, contacts, and suppliers. It may change over time due to legislative, judicial, or regulatory updates from the Spanish Data Protection Agency or the relevant authority at any given moment. As such, the club reserves the right to modify this policy to adapt to new legislative or judicial developments in force when accessing the website.

Last updated: December 4, 2024

1. Who is responsible for processing your data?

• Club Gimnàstic Ciutadella CB
• Tax ID: E57277147
• Address: C/ Paborde Marti, 3 07760 Ciutadella (Illes Balears)
• Mail: gimnastic-ciutadella@infotelecom.es

2. Why and on what legal basis do we process your data, and how long do we retain it?

The personal data we collect is necessary to provide you with our services. It is appropriate, relevant, and limited to what is required for the purposes for which it is processed.

Please inform us of any changes or modifications to your data to keep it current, accurate, and up-to-date.

At the club, we process personal data for the following purposes:

2.1.- INFORMATION AND CONTACT

Managing inquiries and requests for information about the club's services and activities, handling complaints, and receiving suggestions.

• Legal Basis: Legitimate interest in responding to and managing your inquiries.
• Retention Period: Data will be deleted once your request is addressed unless a client relationship is established.

2.2.- CLIENTS

We process client data for the following purposes:

• Managing membership registration (sign-ups).
• Facilitating necessary communications (via email or phone) to deliver services.
• Keeping you informed about the club’s activities and services.
• Administrative management and billing.
• Activity booking management.
• Access control to facilities.
• Legal Basis: The contractual relationship established.
• Retention Period: Data will be retained for a minimum of 5 years (statute of limitations for contractual actions under civil law). Payment and billing data will be retained for the period established by accounting and tax regulations.

2.2.- SUPPLIERS AND COLLABORATORS

We process supplier data to manage orders and payments and maintain a database for potential future collaborations.

• Legal Basis: The existence of a contractual relationship.
• Retention Period: Data will be retained for the duration of the contractual relationship and subsequently for the time periods required by civil, accounting, and tax legislation.

2.3.- JOB CANDIDATES

We process candidate data to manage selection processes and maintain a database with candidate information for potential employment opportunities.

• Legal Basis: Consent, considered granted by submitting a CV to the club.
• Retention Period: Data will be retained for a maximum of 2 years from receipt of the CV.

As CV information can quickly become outdated, we request that you inform us of any changes or modifications.

2.4.- VIDEO SURVEILLANCE

The club has video surveillance systems to ensure the safety and security of individuals, property, and equipment.

• Legal Basis: Public interest in ensuring security and surveillance.
• Retention Period: Video footage will be retained for a maximum of one month, after which it will be deleted.

3. Who will your data be shared with?

The club will not share your data with third parties except where required by law (e.g., tax authorities, courts, or judges through judicial channels).

No international data transfers are planned.

4. What are your rights?

You have the right to obtain information about the data we process. Below are your rights:

Right of Access:	To know if your personal data is being processed and obtain a copy of it.
Right of Rectification:	To request corrections to inaccurate data.
Right of Deletion:	To request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
Right to Restriction:	To request the restriction of data processing, in which case the data will only be retained for the establishment or defense of legal claims.
Right to Object:	In certain circumstances, for reasons related to your particular situation, you may object to data processing. The club will cease processing your data unless there are compelling legitimate grounds or for the establishment or defense of legal claims.
Right to Portability:	To receive your personal data in a structured, commonly used, and machine-readable format when processing is based on consent or a contract and carried out by automated means.
Right to Complain:	You have the right to lodge a complaint with the relevant supervisory authority (AEPD - www.agpd.es) if you are dissatisfied with the exercise of your rights.

To exercise your rights, contact us at: gimnastic-ciutadella@infotelecom.es
Please include:

1. Your full name.
2. Contact email.
3. The right you wish to exercise.
4. Relevant details for your request.

We will process your request within a maximum of one month and notify you via the email you provide.

5. Data Security

Taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of processing, as well as varying risks to individuals' rights and freedoms, the club applies appropriate technical and organizational measures to ensure a level of security commensurate with the risks. These measures prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data.