1. Data controller
In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), users are informed that personal data provided through this website will be processed by:
Data controller: EXPLOTACIONES A. EL CANAL S.L.
Tax identification number (NIF): B92199538
Address: C/ La Colina, s/n, 29620 Torremolinos, Málaga, Spain
Telephone: (+34) 952 375 795
Email: info@lacolinapadel.com
Website: www.lacolinapadel.es
2. What personal data may we process?
Depending on the user’s relationship with Club La Colina, the following categories of data may be processed:
- identification details, such as first and last names;
- contact details, such as email address and telephone number;
- information voluntarily included by the user in messages or enquiries;
- data required to manage requests for information, activities, registrations or services;
- where applicable, details of parents, guardians or legal representatives of minors;
- where strictly necessary for certain activities, information about special needs, allergies, intolerances or other details relevant to the participant’s safety.
Personal data that is unnecessary for the relevant purpose will not be requested.
3. Why do we process personal data?
Enquiries and requests for information
Data provided through forms, email, telephone or other contact channels may be used to:
- respond to enquiries and requests for information;
- provide information about the club’s facilities and services;
- answer questions about padel, football, camps, events or other activities;
- manage requests relating to bookings, registrations or the purchase of services.
Management of activities and services
When the user requests or purchases an activity or service, data may be used to:
- manage registration or participation;
- organise the requested activity or service;
- maintain the necessary communications with the user;
- handle administrative, financial or invoicing matters where applicable;
- deal with issues or requests relating to the service.
Camps and activities involving minors
For activities intended for minors, the data required to manage registration, maintain contact with their parents, guardians or legal representatives and ensure the activity runs appropriately may be processed.
Where information particularly relevant to a minor’s safety is needed, such as allergies, intolerances or certain health circumstances, it will be requested only when necessary, and enhanced confidentiality and protection measures will apply.
Photographs and images
Club La Colina may take photographs or make recordings during certain activities or events.
Where these images are to be used for promotional, advertising or publicity purposes on the website, social media or other club communication channels, the relevant authorisation will be obtained in advance where required.
For minors, particular attention will be paid to the safeguards established by data protection and child protection legislation.
4. Legal basis for processing
The legal basis depends on the purpose for which the data is processed.
To respond to requests relating to the purchase, booking or participation in services and activities, processing may be necessary to take pre-contractual steps requested by the data subject or to perform a contractual relationship.
For certain general enquiries, authorisations to use images or other voluntary processing, the legal basis may be the data subject’s consent.
Where data must be processed to comply with legal obligations applicable to EXPLOTACIONES A. EL CANAL S.L., processing will be based on compliance with those obligations.
Where special categories of data are collected, such as health information required for safe participation in an activity, the data subject or their legal representative will be specifically informed about the processing and its applicable legal basis.
Where consent is the basis for processing, it may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
5. Data concerning minors
Club La Colina runs activities in which minors may participate and therefore pays particular attention to protecting their personal data.
In Spain, processing based on a minor’s own consent may take place when the minor is over fourteen years of age, without prejudice to cases where the involvement of parents, guardians or legal representatives is required.
Where the minor is under fourteen and processing is based on consent, authorisation from the person holding parental responsibility or guardianship is required.
For the registration or purchase of activities intended for minors, regardless of the participant’s age, the process may be required to be handled by their parent, guardian or legal representative where appropriate given the nature of the service.
Club La Colina will exercise particular care when publishing or sharing photographs, videos or other personal data of minors.
6. How long do we retain data?
Personal data will be retained only for as long as necessary to fulfil the purpose for which it was collected.
In particular:
- enquiry data will be retained for as long as necessary to respond and follow up;
- data arising from services, activities or registrations will be retained for the time needed to manage the relevant relationship;
- data subject to administrative, tax, accounting or legal obligations will be retained for the periods required by applicable law;
- images processed on the basis of consent may be retained while that consent remains valid and the authorised purpose continues to exist;
- particularly sensitive information about activity participants will be retained only for the time strictly necessary.
Once the purpose of processing has ended, data may remain appropriately blocked for the limitation periods relating to potential legal liabilities and will subsequently be deleted.
7. Who receives the data?
As a general rule, personal data will not be disclosed to third parties except where:
- it is necessary to provide a service requested by the user;
- there is a legal obligation;
- public administrations, authorities, courts or tribunals require it in the lawful exercise of their powers;
- the data subject has expressly authorised disclosure.
Certain technology or professional providers may have access to personal data to provide services to EXPLOTACIONES A. EL CANAL S.L., such as website hosting, email, technology maintenance, administrative management or equivalent services.
Where these providers act on behalf of the controller, they will be considered data processors and will be subject to the obligations established in Article 28 of the GDPR.
8. External platforms and services
The website may include links to external platforms used, for example, to make bookings or access other services.
When the user accesses an external platform and provides data directly to it, processing will also be subject to the terms and privacy policies established by its respective operator.
Users are advised to consult those policies before providing personal information.
9. International data transfers
EXPLOTACIONES A. EL CANAL S.L. will seek to use providers that process data within the European Economic Area or offer appropriate safeguards under the GDPR.
If a provider involving an international transfer of personal data must be used, the transfer will take place only where a valid legal basis exists and the safeguards required by Chapter V of the GDPR have been adopted.
Users may request further information about the safeguards applicable to any international transfers that take place.
10. Data subjects’ rights
Data subjects may exercise the rights recognised by data protection legislation.
In particular, they may request:
- access to their personal data;
- rectification of inaccurate or incomplete data;
- erasure of their data where the legal requirements are met;
- restriction of processing in certain circumstances;
- objection to processing where applicable;
- data portability where applicable;
- withdrawal of consent at any time where processing is based on consent.
These rights may be exercised by sending a request to:
EXPLOTACIONES A. EL CANAL S.L.
C/ La Colina, s/n
29620 Torremolinos, Málaga, Spain
or by email to:
The request must allow the data subject to be identified and specify the right they wish to exercise. Where there are reasonable doubts about the applicant’s identity, additional information may be requested to verify it.
Exercising these rights is free of charge, except in the exceptional cases provided for by law.
11. Complaints to the Spanish Data Protection Agency
If a data subject considers that the processing of their personal data breaches applicable legislation, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):
The data subject may first contact EXPLOTACIONES A. EL CANAL S.L. using the contact details in this Privacy Policy to try to resolve any matter relating to the processing of their data.
12. Automated decisions and profiling
EXPLOTACIONES A. EL CANAL S.L. does not make decisions through this website based solely on automated processing that produce legal effects on users or similarly significantly affect them.
No user profiles are created for advertising or tracking purposes through this website.
13. Security and confidentiality
EXPLOTACIONES A. EL CANAL S.L. will apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk and protect personal data against loss, destruction, alteration, unauthorised access, use or disclosure.
Anyone with access to personal data will be subject to the relevant duty of confidentiality.
14. Accuracy of data
The user guarantees that the data provided is true, accurate and up to date.
When providing data about third parties, the user must have sufficient authority to do so and inform those people where legally required.
The user must notify any relevant changes to their personal data to keep it up to date.
15. Changes to the Privacy Policy
EXPLOTACIONES A. EL CANAL S.L. may amend this Privacy Policy where necessary to reflect legislative changes, guidance from supervisory authorities, changes to the services offered or changes to the way personal data is processed.
The current version will be the version published on this website at any given time.
Last updated: September 2026.