Personal Privacy Settings
[rcb-consent type=“change“ tag=“a“ text=“change personal privacy settings“]
[rcb-consent type=“history“ tag=“a“ text=“history of privacy settings“]
[rcb-consent type=“revoke“ tag=“a“ text=“revoke consent“ successmessage=“You have successfully revoked your consent. The page will now reload.“]
We appreciate your trust and take the utmost care and apply the highest security standards to protect your personal data from unauthorised access. The processing of personal data on our website complies with the provisions of the General Data Protection Regulation (GDPR).
Responsible Entity Nalusurf Surf School/Surf Camp, Fuerteventura Owner: Ralf Geerdts, N.I.E. X3739459G Address: Calle Laja Blanca No. 4, 35627 La Pared Telephone: +34 669 62 15 22 Email: info@nalusurf.de For enquiries regarding the collection, processing or use of your personal data, or to request information, rectification, restriction or erasure of data, please contact: info@nalusurf.de
Data Processing on Our Website When you visit our website, our web server temporarily stores every visit in a log file. The following data is collected and stored until it is automatically deleted:
- IP address of the computer making the request
- Date and time of access
- Name and URL of the retrieved file
- Amount of data transferred
- Notification as to whether the retrieval was successful
- Identification data relating to the browser and operating system used.
This data is processed for the purposes of enabling the use of the website (establishing a connection), system security, technical administration, network infrastructure and optimising the website. We are unable to link this data to specific individuals. This data is not combined with other data sources; it is also deleted following statistical analysis.
The legal basis for data processing is Article 6(1), first sentence, point (f) of the GDPR.
Collection, Processing and Use of Personal Data In data processing, your legitimate concerns are always taken into account in accordance with legal provisions. Personal data is only collected if you voluntarily provide it to us when contacting us (such as your name, email address or postal address). We use the data you provide solely to answer your enquiries without requiring your separate consent.
The legal basis for data processing is Article 6(1), first sentence, point (b) of the GDPR.
Use of Cookies for Functional Purposes To ensure you have a pleasant experience on our website and to enable the use of certain functions, we use what are known as cookies. Cookies are small text files used as identifiers. We send these via your web browser to your computer’s hard drive and can read them during your current visit (known as “session cookies”). Please note that certain cookies are set as soon as you access our website. Our cookies are protected against access by third parties in accordance with your browser’s security standards. You can prevent cookies from being stored on your computer by adjusting the settings in your browser accordingly. However, this may restrict the functionality of our websites for you.
The legal basis for data processing is Article 6(1), first sentence, point (f) of the GDPR.
To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used, and the related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at Real Cookie Banner Data Processing.
The legal bases for the processing of personal data in this context are Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR. Our legitimate interest lies in the management of the cookies and similar technologies used, and the associated consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide personal data, we will be unable to manage your consents.
Use of the Online Booking Form and Enquiry Form When you use the online contact form, we collect personal data (such as your name, mobile number and email address) only to the extent that you provide it. We use your email address solely to process your enquiry. Your data will then be deleted unless you have consented to further processing and use, or a booking is not made.
The legal basis for data processing is Article 6(1), first sentence, point (b) of the GDPR.
Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website (e.g. measuring reach). The information generated by the cookie regarding your use of this website is generally transferred to a Google server in the USA and stored there. As IP anonymisation is enabled on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On our behalf, Google will use this information to analyse your use of the website, to compile reports on website activity, and to provide us with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data. In connection with the use of Google Analytics, metadata and communication data (e.g. device information and IP addresses) as well as location data (information on the geographical position of a device or person) may be processed. Usage data (e.g., website visits, clicks, access times), contact data (e.g., email addresses, telephone numbers), content data (e.g., entries in online forms), or inventory data (e.g., names, addresses) may also be processed.
We would like to point out that on this website, Google Analytics has been enhanced with the code “gat._anonymizeIp();” to ensure that IP addresses are collected anonymously (known as IP masking).
A connection to the Google Analytics servers is only established once you have consented to the use of Google Analytics. Prior to this, no Google Analytics cookies are set on your device. The information collected by the cookies may be sent to a Google server in the United States of America (USA) and stored there. There is no general adequacy decision by the European Commission certifying that the USA provides an adequate level of data protection. By transmitting your personal data, there is a risk that US authorities may access and process it for their own purposes. To protect your personal data, we have entered into so-called Standard Contractual Clauses (“SCCs”) with Google. SCCs are data protection regulations issued by the European Commission which impose legal obligations on the data importer; compliance with these guarantees adherence to European data protection standards.
The legal basis for this processing and the transfer of your personal data to Google in the USA is your consent in accordance with Article 6(1), first sentence, point (a) and Article 49(1), first sentence, point (a) of the GDPR. You may withdraw your consent at any time. You can do this by adjusting your privacy settings for our website via the following link: [Link]
You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that, in this case, you may not be able to make full use of all the features of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available via the following link (http://tools.google.com/dlpage/gaoptout?hl=en).
Furthermore, you can prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will then be set, which prevents your data from being collected in future when you visit this website. This procedure is particularly recommended when accessing our site via mobile devices.
For further information on terms of use and data protection, please visit www.google.com/analytics/terms/en.html or www.google.com/intl/en/analytics/privacyoverview.html.
Google Fonts
We use Google Fonts, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), on our website to ensure consistent font display; these are known as web fonts provided by Google. When you visit a page, your browser loads the required fonts into your browser cache to display text and fonts correctly. To do this, the browser you are using must connect to Google’s servers. This means that Google is aware that our website was accessed via your IP address. The use of Google Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
If your browser does not support web fonts, a standard font from your computer will be used. Further information about Google Fonts can be found at https://developers.google.com/fonts/faq?tid=231550647513.
Google reCAPTCHA
We also use the reCAPTCHA function provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) on this website. This function is primarily used to distinguish whether an input is made by a human or, in an abusive manner, by a machine or automated process. The service involves the transmission of the IP address, referrer URL (the address of the page from which the visitor comes), information about the operating system, cookies, mouse movements and keystrokes, duration of visit, user device settings (e.g. language settings, location, browser, etc.), and possibly other data required by Google for the reCAPTCHA service.
When using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC in the USA. There is no general adequacy decision by the European Commission certifying that the USA provides an adequate level of data protection. By transmitting your personal data, there is a risk that US authorities may access and process it for their own purposes. To protect your personal data, we have entered into so-called Standard Contractual Clauses (“SCCs”) with Google. SCCs are data protection regulations issued by the European Commission which impose legal obligations on the data importer; compliance with these guarantees adherence to European data protection standards.
The legal basis for this processing and the transfer of your personal data to the USA is your consent in accordance with Article 6(1), first sentence, point (a) and Article 49(1), first sentence, point (a) of the GDPR. You may withdraw your consent at any time. You can adjust your privacy settings for our website via the following link: [Link]
For more information about Google reCAPTCHA and Google’s privacy policy, please visit: https://www.google.com/intl/en/policies/privacy/
Google Tag Manager
We use Google Tag Manager from Google Inc. on our website. In Europe, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for Google Tag Manager.
With Google Tag Manager, we can centrally integrate and manage website tags via a user interface. Tags are small snippets of code that, for example, track your activities on our website. Buttons can also be integrated using these tags.
The Tag Manager itself is a domain that does not set cookies or store data, but acts solely as a manager. In the Tag Manager’s account settings, we have agreed that Google receives anonymised data from us. However, this data relates solely to our use and utilisation of the Tag Manager and does not include your personal data. Google Tag Manager itself does not process any personal data relating to you as a visitor to our website.
Further information about Google Tag Manager can be found at: https://support.google.com/tagmanager/answer/9323295?hl=en
Google Maps
Nalusurf integrates the maps from the “Google Maps” service provided by Google and processes user data in this context. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://cloud.google.com/maps-platform.
We use maps from Google Maps to show you the location of our company, as well as possible routes and how to get here.
In connection with the use of Google Maps, metadata and communication data (e.g. device information and IP addresses) as well as location data (information on the geographical position of a device or person) are processed. However, usage data (e.g. website visits, clicks, access times), contact data (e.g. email addresses, telephone numbers), content data (e.g. entries in online forms) or inventory data (e.g. names, addresses) may also be processed.
Please note that when using a mobile device, your settings regarding location data on that device may also affect the amount of data collected.
A connection to the Google Maps servers is only established once you have consented to the use of Google Maps via the integrated button on the service. Prior to this, no Google Maps cookies are set on your device. The information collected by the cookies is usually sent to a Google server in the United States of America (USA) and stored there. There is no general adequacy decision by the European Commission certifying that the USA provides an adequate level of data protection. By transmitting your personal data, there is a risk that US authorities may access and process it for their own purposes. To protect your personal data, we have entered into so-called Standard Contractual Clauses (“SCCs”) with Google. SCCs are data protection provisions issued by the European Commission that impose legal obligations on the data importer; compliance with these provisions guarantees adherence to European data protection standards.
The legal basis for this processing and the transfer of your personal data to Google Maps in the USA is your consent in accordance with Article 6(1), first sentence, point (a) and Article 49(1), first sentence, point (a) of the GDPR. You may withdraw your consent at any time. You can do this by adjusting your privacy settings for our website via the following link: [Link]
Detailed information on data processing on Google Maps and the possibility of exercising data subject rights against Google Maps can be found at: https://policies.google.com/privacy. Information on the right to object (opt-out) can be found at: https://tools.google.com/dlpage/gaoptout?hl=en. Information on the settings for the display of advertising can be found at: https://adssettings.google.com/authenticated.
YouTube
Nalusurf integrates video content from the “YouTube” service provided by Google and processes user data in this context. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use YouTube to enable us to show you video content.
In connection with the use of YouTube video content, metadata and communication data (e.g. device information and IP addresses) are processed. However, usage data (e.g., website visits, clicks, access times), contact data (e.g., email addresses, telephone numbers), content data (e.g., entries in online forms) or inventory data (e.g., names, addresses) may also be processed.
We use YouTube in enhanced privacy mode. According to YouTube, this mode means that YouTube does not store any information about the users of our website until they have consented to the processing of their data or watched the video. However, enhanced privacy mode does not necessarily prevent YouTube from transferring data. Consequently, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.
A connection to the YouTube servers is only established once you have consented to the use of YouTube via the integrated preview image within the service. Prior to this, no YouTube cookies are set on your device. Please note that it is possible for this data to be linked with other data (in some cases also on other devices). This risk is particularly high if you have a YouTube account and are logged in to YouTube. To prevent further data linking, we recommend that you log out of YouTube before visiting our company page.
The information collected by the cookies is usually sent to a Google server in the United States of America (USA) and stored there. There is no general adequacy decision by the European Commission certifying that the USA provides an adequate level of data protection. By transmitting your personal data, there is a risk that US authorities may access and process it for their own purposes.
The legal basis for data processing in connection with embedding and displaying the preview images is Article 6(1), first sentence, point (f) of the GDPR.
The legal basis for processing by YouTube and the transfer of your personal data to YouTube in the USA is your consent in accordance with Article 6(1), first sentence, point (a) and Article 49(1), first sentence, point (a) of the GDPR. You may withdraw your consent at any time. You can do this by adjusting your privacy settings for our website via the following link: [Link]
Detailed information on data processing can be found in the privacy policy at: https://policies.google.com/privacy. Information on the right to object (opt-out) can be found at: https://tools.google.com/dlpage/gaoptout?hl=en. Information on the settings for the display of advertising can be found at: https://adssettings.google.com/authenticated.
Nalusurf maintains an online presence on the social network “Facebook” and processes user data in this context. The service provider is Facebook Inc, 1601 Willow Road, Menlo Park, California 94025; Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland.
[We/Company Name] use Facebook to provide information about the company and to communicate with active users on the platform. Furthermore, data may be processed for market research and advertising purposes via Facebook. This is done, for example, through tracking, which may include interest- or behaviour-based profiling or the use of cookies. Remarketing and reach measurement are also utilised, for which access statistics – identifying returning visitors – are compiled.
In connection with the use of our online presence on Facebook, the following types of data may be processed: master data and contact details (e.g. names, addresses, email addresses, telephone numbers), content data (e.g. entries in online forms, use of the messaging function), usage data (e.g. website visits, clicks, access times), metadata and communication data (e.g. device information, IP addresses).
With regard to data processing on our Facebook fan page, [we/Company Name] and Facebook Ireland are joint controllers in accordance with Article 26 of the GDPR. The legal basis for the processing of personal data is Article 6(1)(f) of the GDPR. You may exercise your data subject rights directly with Facebook as well as with [us/Company Name]. Under the GDPR, the primary responsibility for the processing of Insights data lies with Facebook, and Facebook fulfils all obligations under the GDPR with regard to the processing of Insights data. Further information can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
[We/Company Name], as the operator, do not make decisions regarding the processing of Insights data or any other information referred to in Article 13 of the GDPR, including the legal basis, the identity of the data controller and the retention period for cookies on users’ devices.
The European Commission’s standard contractual clauses apply to the transfer of data to Facebook, supplemented by the Facebook EU data transfer addendum, available at https://www.facebook.com/legal/EU_data_transfer_addendum. Although, according to the Facebook EU Data Transfer Addendum, Facebook Ireland is responsible for data processing, we would like to point out that it cannot be ruled out that the information collected by the cookies may be sent to a Facebook server in the United States of America (USA) and stored there. There is no general adequacy decision by the European Commission certifying that the USA provides an adequate level of data protection. By transmitting your personal data, there is a risk that US authorities may access and process it for their own purposes.
Please note that it is possible for your data to be linked to other data (in some cases, on other devices as well). This risk is particularly high if you have a Facebook account and are logged in to Facebook. To prevent your data from being linked in this way, we recommend that you log out of Facebook before visiting our company page.
Further information can be found in the privacy policies of Facebook Ireland, available at: https://www.facebook.com/about/privacy
Nalusurf maintains an online presence on the social media platform “Instagram” and processes user data in this context. The service provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; website: https://www.instagram.com.
Nalusurf uses Instagram to provide information about the company and to communicate with active users on the platform. Furthermore, data may be processed for market research and advertising purposes via Instagram. This is done, for example, through tracking, which may include interest- or behaviour-based profiling or the use of cookies. Remarketing and reach measurement are also utilised, for which access statistics – identifying returning visitors – are compiled.
In connection with the use of our online presence on Instagram, the following types of data may be processed: master data and contact details (e.g. names, addresses, email addresses, telephone numbers), content data (e.g., entries in online forms, use of the messaging function), usage data (e.g., website visits, clicks, access times), metadata and communication data (e.g., device information, IP addresses).
Instagram is a Facebook product. With regard to data processing on our Instagram fan page, we and Facebook are joint controllers in accordance with Article 26 of the GDPR. The legal basis for the processing of personal data is Article 6(1)(f) of the GDPR. You may exercise your data subject rights directly with Facebook as well as with us. Under the GDPR, the primary responsibility for the processing of Insights data lies with Facebook, and Facebook fulfils all obligations under the GDPR with regard to the processing of Insights data. Further information can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum
We, as the operator, do not make decisions regarding the processing of Insights data or any other information arising from Article 13 of the GDPR, including the legal basis, the identity of the data controller, and the retention period for cookies on users’ devices.
For the transfer of data to Instagram, the European Commission’s standard contractual clauses apply, supplemented by the Facebook EU data transfer addendum, available at https://www.facebook.com/legal/EU_data_transfer_addendum. Although, according to the Facebook EU Data Transfer Addendum, Facebook Ireland is responsible for data processing, we would like to point out that it cannot be ruled out that the information collected by the cookies may be sent to a Facebook server in the United States of America (USA) and stored there. There is no general adequacy decision by the European Commission certifying that the USA provides an adequate level of data protection. By transmitting your personal data, there is a risk that US authorities may access and process it for their own purposes.
Please note that it is possible for your data to be linked to other data (in some cases, on other devices as well). This risk is particularly likely if you have an Instagram account and are logged in to Instagram. To prevent your data from being linked in this way, we recommend that you log out of Instagram before visiting our company page.
Further information can be found in the privacy policies of Facebook Ireland, available at: https://www.facebook.com/about/privacy
