Privacy policy
Who we are
This website belongs to Vilamoura Surf School, a school of the Associação Dinamika, based at Centro Internacional Marina de Vilamoura, Av. Rocha Baixinha, Vilamoura, Algarve. For any question about your data: vilamourasurf@gmail.com or +351 912 568 342.
What this website collects
- The website does not use its own cookies or any analytics or advertising tools. The only exceptions are the Google map, explained below under Cookies, and the FareHarbor booking window, explained next.
- Online bookings and payments (group lesson, private lesson, private lessons pack and gift card) are made on FareHarbor, the school's booking system. The website only contacts FareHarbor when you press a booking button: a FareHarbor window opens (or their page, on mobile). The data you enter there (name, contact details, participants and payment) are processed by FareHarbor for the school, in accordance with the FareHarbor privacy policy. FareHarbor stores an identifier and your chosen language in your browser, as needed for the booking.
- The other booking forms and the contact form do not send or store any data on our servers. They only prepare the message, which opens in WhatsApp. It only reaches us if you decide to send it.
- As with any website, the server temporarily logs technical request data (IP address, date and time, requested page and browser), only for security and operation.
- Fonts and images are served by the website itself, with no requests to external services.
- The website opens in your system language (Portuguese, English, Spanish or French). If you choose another one in the language selector, that choice is stored only in your browser so we remember it. We do not receive it.
Cookies
On the contact page we show a Google Maps map. This map is provided by Google, which places cookies in your browser and receives your IP address, in accordance with Google's privacy policy.
That is why the map only loads if you accept in the cookie notice. If you decline, the rest of the website works the same and you can open the location in Google Maps using the button on the page.
Your choice is stored only in your browser (we do not receive it). You can change it at any time with the Cookies link in the footer of every page.
When you contact us
If you send us a message by WhatsApp, email or phone, we use the data you give us (name, contact details and what you write) only to reply and handle your booking. WhatsApp is a Meta service with its own privacy policy.
Data collected at activity check-in is used only for that purpose, as described in the terms and conditions.
Student data
When you enrol at the school, your data (and your parent or guardian's, if you are a minor) are kept in the school's internal app, hosted on a server in Germany (European Union). The data controller is the Associação Dinamika.
- Name, contact details, date of birth, address and parent or guardian: to manage your enrolment, lessons and payments, and to contact you (performance of the contract). Instructors only see the name and mobile number of the students in their lessons.
- ID card or passport number, tax number and nationality of the student and guardian: only for sports insurance, registration with the Portuguese Surfing Federation and invoices. Only reception and management can see them.
- Identity or residence documents uploaded in the app: only with your express consent. They are encrypted and you can delete them at any time.
- Declaration of fitness for sport, required by Portuguese law (Law 5/2007, art. 40).
- Permissions for photos and, for minors, for transport in the club's van: only with your consent, which you can withdraw.
Health data
The school asks for a health questionnaire (for example allergies, medication, injuries, or heart, lung or skin conditions), only for your safety during lessons.
- It is only stored with your explicit consent, or your parent or guardian's (GDPR art. 9(2)(a)). Without it, nothing is stored.
- The answers are encrypted. Only reception, management and the instructor of the lessons you are booked on can see them, and every access is logged.
- You can correct your answers in your profile. If you withdraw your consent, they are deleted.
- When you stop being a student, your health data are deleted after 3 years.
Who else processes the data
To work, the app uses Hetzner (hosting, in Germany), Brevo (sending sign-in codes by email) and, if you choose to sign in with Google, Google (email, name and photo). Health data stay encrypted on the hosting server and are not sent to any of these services. Billing data are kept for the period required by law.
Your rights
You may at any time request access to, correction or deletion of your data, or object to its processing, by writing to vilamourasurf@gmail.com. You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (cnpd.pt).
External links
The website links to WhatsApp, FareHarbor, Google Maps, Instagram, Facebook and YouTube. When you open them, the privacy policies of those services apply.
This is a translation. In case of discrepancy, the Portuguese version prevails.
