Privacy Policy

Introduction

Surf & Watersports Madeira ("we," "our," or "us") operates the website madeirasurf.org (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our surf guide services.

We respect your privacy and are committed to protecting your personal data. This policy will inform you about how we handle your data and tell you about your privacy rights under the General Data Protection Regulation (GDPR) and applicable Portuguese and European Union law.

Information We Collect

Personal Information You Provide

When you use our Service, you may voluntarily provide us with:

• Contact Information: Name, email address, phone number when you contact us via WhatsApp or email
• Surf Profile: Skill level, experience, and preferences when using our Spot Finder tool
• Communication Data: Messages and inquiries you send to us
• Booking Preferences: Information about surf schools or services you're interested in

Information Collected Automatically

When you access our Service, we automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, time spent, click patterns, referring URLs
• Location Data: General geographic location based on IP address
• Cookies: See our Cookie Policy for details

How We Use Your Information

We use the information we collect to:

• Provide personalized surf spot recommendations based on your skill level
• Respond to your inquiries and provide customer support
• Connect you with verified surf schools and operators
• Send you relevant information about surf conditions (with your consent)
• Improve our website and services based on user behavior
• Ensure the security and integrity of our Service
• Comply with legal obligations

Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: When you explicitly agree to receive communications or use certain features
• Legitimate Interest: To improve our services and provide relevant recommendations
• Contract Performance: To fulfill requests you make through our Service
• Legal Obligation: When required by applicable law

Data Sharing and Third Parties

We may share your information with:

• Surf Schools: When you request to be connected with a specific operator (with your consent)
• Service Providers: Analytics, hosting, and communication services that help us operate
• Legal Requirements: When required by law or to protect our rights

We do NOT sell your personal information to third parties for marketing purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact inquiries are retained for up to 2 years. Analytics data is anonymized after 26 months. You can request deletion of your data at any time.

Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at info@madeirasurf.org

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes SSL/TLS encryption, secure hosting, and limited access to personal data by our team.

Cookies

We use cookies and similar technologies to enhance your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Children's Privacy

Our Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) or your local supervisory authority.