In accordance with Article 10 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, we inform you that PUERTO DEPORTIVO BAIONA, S.A., with NIF A-36896637 and registered office at AVDA MONTERREAL S/N 36300 BAIONA is responsible for the management and operation of the site marina-baiona.com.

If you wish to contact us, you can do so by post at the address indicated above or via email at info@marina-baiona.com

Access to our domain can be made directly or through any existing redirection, with this same Privacy Policy being applicable.

Privacy Policy

This Privacy Policy describes how we process your personal data (e.g., collection, use, communication, storage, and protection of your personal information) and provides information about your rights as a data subject.

PUERTO DEPORTIVO BAIONA, S.A., (hereinafter THE OWNER) is the data controller, as well as responsible for the collection, use, communication, storage, and protection of your personal data, in accordance with the General Data Protection Regulation, internal rules and policies, or any applicable national regulations.

In compliance with Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), as well as the new General Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, through this document, THE OWNER informs:

Identity and contact details of the Controller

Our identifying information:

PUERTO DEPORTIVO BAIONA, S.A.

You can contact us by:

Postal mail:
AVDA MONTERREAL S/N, 36300 BAIONA PONTEVEDRA
Email: info@marina-baiona.com
Phone: +34 986 385 107
Website: marina-baiona.com

Categories of personal data

We process the following categories of personal data:

Identifying data – first and last name, ID number or equivalent
Administrative data – Company name, address, bank details, and contact persons
Contact data – email, phone number, and address.

Digital data – cookies, IP address, websites and social networks, and other data publicly accessible on the Internet, etc.
Employment data – data of our own employees, CVs, education, professional experience, and health.
Business data – suppliers and customers.
Other data necessary for processing – for more information on the category of personal data in the development of our Activity, you can consult our Register of Activities, section “Data Category”.

How do we collect your data?

We collect information about you from the following sources:

When communicating or interacting with you by phone, email, or other contact methods.
Through the Contact form on the website.
Through the Mooring reservation request form on the website.
Through time tracking tools.
When you visit our facilities.
When you provide us with a CV or documentation.

For more information on the different data collection mechanisms in the development of our Activity, you can consult our Register of Activities.

How long do we keep your data?

The data will be kept as long as there is a commercial, contractual, or professional relationship with the data subject and subsequently for the years necessary to comply with the corresponding legal obligations in each case. Notwithstanding the above, they will be kept as long as they are necessary for processing and the data subject does not request their deletion.

Regarding labor or social security data, documentation, or computer records or supports in which the corresponding data proving compliance with obligations regarding affiliation, registrations, cancellations, or variations that may occur in relation to these matters have been transmitted, as well as contribution documents and receipts justifying the payment of wages and the delegated payment of benefits, according to Article 21 of Royal Legislative Decree 5/2000, of August 4, which approves the revised text of the Law on Infractions and Sanctions in the Social Order, their retention will be 4 years.

Regarding accounting and tax documentation, for tax purposes, the accounting books and other mandatory record books according to the applicable tax regulations (Personal Income Tax, VAT, Corporate Tax, etc.), as well as the documentary supports justifying the entries recorded in the books (including computer programs and files and any other justification that has tax significance), must be kept at least during the period in which the Administration has the right to check and investigate and, consequently, to settle tax debt, according to Articles 66 to 70 of the General Tax Law, which will be 4 years.

Regarding accounting and tax documentation, for commercial purposes, books, correspondence, documentation, and vouchers concerning your business, duly ordered from the last entry made in the books, except as established by general or special provisions, this commercial obligation extends both to the mandatory books (income, expenses, investment goods, and provisions), as well as the documentation and vouchers supporting the entries recorded in the books (invoices issued and received, tickets, corrective invoices, bank documents, etc.), according to Article 30 of the Commercial Code, which will be 6 years.

Data relating to the time tracking of workers will be kept, as established by Royal Decree-Law 8/2019, of March 8, on urgent social protection measures to fight against job insecurity in the working day, for 4 years.

For more information on the retention of data in the development of our Activity, you can consult our Register of Activities, section “Deletion Period”.

To whom do we transfer your data?

Depending on the purpose of the processing, your personal data could be transferred to or processed by different categories of recipients:

External collaborators or professionals (Labor and Tax Advisors, Mutual insurance company in charge of health surveillance, Occupational Risk Prevention Company, …)
Public administrations (General Treasury of the Social Security, State Public Employment Service, Ministry of Labor, Ministry of Finance, and entities or bodies that grant aid or subsidies of interest to the company, which will use them in the legitimate exercise of their powers)

In any case, we transfer your data only to the extent strictly necessary and in the manner required to carry out the purposes described in this privacy policy and only to entities with which we have signed agreements protecting your rights and freedoms in relation to your personal data; these entities and/or professionals considered as Data Processors will be governed by the provisions of Art. 28 of the GDPR and this entity ensures that they take all necessary security measures in accordance with Art. 32 of this GDPR.

For more information on the transfer of data to third parties in the development of our Activity, you can consult our Register of Activities, section “Category of Recipients”.

Where do we process your data?

In order to carry out our activity and provide our services, we process your personal data according to the conditions established in this privacy policy within the European Union (EU).

For more information on where we process data in the development of our Activity, you can consult our Register of Activities, section “International Transfer”.

For what purposes do we process your data?

Your data will be collected for processing operations relevant to the following purposes:

Receiving contact information or other requests made by you through any of our communication channels.
Administrative tasks derived from the provision of our services.
Communication of rates or mooring reservations.
Responding to questions about any of our services.

For more information on the purposes of data processing in the development of our Activity, you can consult our Register of Activities, section “Purposes of Processing”.

You may withdraw your consent at any time free of charge by exercising your rights, sending your request in writing and duly identified by an accrediting document, to our address AVDA MONTERREAL S/N, 36300 BAIONA PONTEVEDRA or by email to the address info@marina-baiona.com; for more detailed information on the Exercise of your rights, you can consult our Register of Activities, section “Exercise of Rights”

Why can we process your data?

The use of your data under the conditions described above is permitted by European and Spanish data protection regulations in accordance with the following legal bases:

Art. 6. GDPR

The data subject gave their consent for the processing of their personal data for one or more specific purposes
The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
The processing is necessary for compliance with a legal obligation to which the controller is subject

For more information on the legal basis for data processing in the development of our Activity, you can consult our Register of Activities, section “Legitimation of processing”.

What are your rights?

Data protection regulations allow you to exercise your rights of access, rectification, objection, deletion (“right to be forgotten”), restriction of processing, portability, and not to be subject to automated individual decision-making before the Data Controller.

Any data subject has the Right to be provided, BEFORE their data is collected, with basic information at a first level, in a summarized form, at the same time and in the same medium in which their personal data is collected, and on the other hand, to be sent the rest of the information in a medium more suitable for its presentation and understanding.

The information to be provided by layers or levels would be as follows:

1st Layer Information

The identity of the Data Controller.
What data will be processed.
For what purpose.
Where and how they were obtained.
The legal basis for the processing.
If they will be communicated, transferred, or processed by third parties.
The reference to the Exercise of Rights procedure.

2nd Layer Information

Contact details of the controller. Identity and details of the representative (if any). Contact details of the data protection officer (if any).
Extended description of the purposes of processing. Retention periods or criteria for data storage. Automated decisions, profiles, and logic applied.
Detail of the legal basis for processing, in cases of legal obligation, public interest, or legitimate interest. Obligation or not to provide data and consequences of not doing so.
Recipients or categories of recipients. Adequacy decisions, guarantees, binding corporate rules, or specific applicable situations.
How to exercise the rights of access, rectification, deletion, and portability of data, and the restriction or objection to its processing.
Right to withdraw the consent given.
Right to lodge a complaint with the Supervisory Authority.

(The following table indicates what your rights are).

Right of access	To know what data of yours is being processed, for what purpose it is processed, where the data was obtained, and if it will be communicated or has been communicated to anyone
Right of rectification	To modify any of your data that is inaccurate or incomplete
Right of cancellation	To cancel your data if it is inadequate or excessive
Right to object	To prevent your data from being processed or to stop it from being processed, although only in the cases established by law
Right to restriction of processing	To request that the processing of data be suspended in the cases established by law.
Right to data portability	To be able to receive your data provided in a structured, commonly used electronic format and to be able to transmit it to another Controller.
Right not to be subject to automated individual decisions	So that a decision is not made about you that produces legal effects or affects you based only on the processing of your data.

These rights are characterized by the following:

Exercising them is free of charge.
You can exercise the rights directly or through a legal representative.
If the request is submitted by electronic means, the information will be provided by these means when possible, unless the data subject requests otherwise.
Before exercising your rights, we must identify you to protect your personal data against fraudulent attempts.
Your request will be resolved within one month.

If requests are manifestly unfounded or excessive (e.g., repetitive nature), the controller may:

The controller is obliged to inform you about the means to exercise these rights. These means must be accessible, and this right cannot be denied solely because you choose another medium.
If the controller does not act on the request, they will inform you, at the latest within one month, of the reasons for their inaction and the possibility of lodging a complaint with a Supervisory Authority.

If you wish to exercise any of the rights described, you can contact us through our Internal Data Protection Officer:

By postal address:

PUERTO DEPORTIVO DE BAIONA S.A.

Attn. Data Protection Officer

AVDA MONTERREAL S/N, 36300 BAIONA PONTEVEDRA

Or by email at the address: info@marina-baiona.com

Supervisory authority

If you wish to file a complaint regarding the processing of your data by THE OWNER, we inform you that you can contact the Spanish Data Protection Agency, C/ Jorge Juan, 6 28001-Madrid http://www.agpd.es

Cookies

Cookies are files that are downloaded to your computer to collect standard Internet log information and information about browsing habits. This information is used, for example, to track visitor use of the website and compile statistical reports on website activity.

You can set your browser not to accept cookies. However, some first-party cookies are necessary to allow the website user session to use our services.

For more information, visit the website’s Cookies Policy.

Minors

The User certifies that they are over 14 years old and therefore possess the necessary legal capacity to provide consent regarding the processing of their personal data, all in accordance with the provisions of this Privacy Policy.

If you wish to use our services through the web and you are 14 years old or younger, we will need the consent of your legal guardian to store your data; if we do not have it, we may proceed to block or delete it.

Register of activities

You can request an updated copy of our Register of Activities through our email address info@marina-baiona.com .

Security

THE OWNER adopts organizational and technical measures in order to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.

Updates

We keep our privacy policy under review and may change it occasionally (mainly to comply with legal and data protection practices).

Updated versions will be published on our website.

Applicable Legislation and competent courts

The terms and conditions governing this website, as well as any relationships that may arise, are protected and subject to Spanish legislation. For the resolution of any type of controversy, litigation, or discrepancy that may arise between the user and PUERTO DEPORTIVO DE BAIONA S.A. due to the use of this website, it is agreed to submit them to the Courts and Tribunals of Pontevedra, Spain.