Privacy policy
We explain clearly what personal data we may collect, why we use it and what rights you have over your information.
Your privacy is part of the experience
Costa Brava Parc Aventura processes personal data in a responsible, transparent manner, limited to the purposes necessary to handle inquiries, manage bookings, organize activities, receive job applications and send communications when there is a legal basis that allows it.
Who is the data controller?
The controller determines how and why the personal data collected through this website and the channels related to Costa Brava Parc Aventura services are processed.
The controller’s details must exactly match those indicated in the website’s Legal Notice.
What personal data do we process?
The data processed depends on how you interact with us and the service you request.
Personal and contact details
Name, surname, email, phone number and any other information you provide voluntarily.
Activity data
Park, activity, date, number of participants, group type, approximate ages and needs related to the booking.
Professional data
CV, experience, training, availability, languages and other work-related information provided in “Work with us”.
Technical data
IP address, device type, browser, language, pages visited and information obtained through authorized cookies.
We do not request special categories of personal data through the website’s general forms. We ask that you do not enter medical or especially sensitive information, unless it is strictly necessary and you have been expressly told to do so.
What do we use the data for?
Inquiries and information requests
To respond to questions received via forms, email, phone or other contact channels.
Booking and activity management
To prepare quotes, confirm availability, organize bookings, manage participants and provide the contracted activities.
Relationship with clients and groups
To manage communications with families, companies, schools, summer camps, entities, agencies and group leaders.
Work with us
To assess applications, contact candidates and manage current or future selection processes.
Newsletter and commercial communications
To send news, promotions, activities, special hours or information related to the parks when you have given your consent.
Website operation and improvement
To guarantee site security, prevent fraudulent use, obtain statistics and improve content, navigation and user experience.
Compliance with legal obligations
To meet tax, accounting, administrative, labor, consumer, security and liability obligations derived from the activity.
What is the legal basis for processing?
When you voluntarily send a form, sign up for the newsletter, accept optional cookies or authorize a specific processing.
When processing is necessary to prepare, manage or execute a booking, activity, quote or service.
When you ask us for information, availability or a proposal before formalizing a booking or contract.
When we must retain or communicate information to comply with tax, accounting, labor, administrative or security obligations.
To protect the website, prevent fraud, defend claims, guarantee system security and improve our services, provided your rights do not prevail.
When the basis for processing is consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before its withdrawal.
How long do we keep the data?
For the time necessary to respond to and follow up on the request. Subsequently, it may be kept blocked during the applicable legal periods.
During the contractual relationship and, once finished, during the periods required by tax, accounting, commercial or liability regulations.
Until you withdraw consent or request to unsubscribe from communications.
During the selection process and, for a maximum of one year if you authorize us to keep your CV for future processes, unless you request its deletion sooner.
During the periods configured in the analytics tools and according to the selected cookie preferences.
When the data is no longer necessary, it will be deleted or blocked exclusively to handle possible legal liabilities.
Who can access the data?
We do not sell or transfer personal data to third parties for their own commercial purposes.
Certain information may be accessed by providers who provide us with services necessary for the operation of the website and the activity, acting as data processors and under the corresponding confidentiality obligations.
Data may also be communicated to public administrations, courts, tribunals, security forces or other bodies when there is a legal obligation or a valid requirement.
In the case of bookings or payments managed through external platforms, the user will be informed about the identity and conditions of the corresponding provider before completing the operation.
International transfers
Some technology providers may belong to business groups located or operating outside the European Economic Area.
When this involves an international transfer of data, mechanisms recognized by regulations will be used, such as adequacy decisions by the European Commission, standard contractual clauses or other legally accepted guarantees.
This scenario may especially affect global services for analytics, email, content distribution, security or communications management.
What rights do you have?
You can exercise the rights recognized by data protection regulations free of charge.
Contact us
Send your request indicating which right you want to exercise and providing the necessary information to verify your identity.
When necessary to prevent unauthorized access, we may request additional documentation to verify the identity of the person making the request.
If you consider that the processing of your data does not respect the regulations, you can file a complaint with the Spanish Data Protection Agency: www.aepd.es .
Data of minors
Costa Brava Parc Aventura activities may be aimed at families, school groups, summer camps and participants who are minors.
Bookings, authorizations and communications related to minors must be managed by their fathers, mothers, legal tutors, educational centers or group leaders duly authorized.
Responsible persons should only provide the data of minors strictly necessary to organize the activity, guarantee their safety and comply with applicable obligations.
The use or publication of identifiable images of minors will require the corresponding authorization from the father, mother, legal tutor or authorized representative, when this is legally necessary.
How do we protect information?
We apply technical and organizational measures appropriate to the risk to protect data against loss, destruction, alteration, unauthorized access or improper disclosure.
Only authorized personnel and providers can access the information necessary to carry out their functions.
We use secure connections, updates, backups and tools to prevent malicious access.
We strive to collect only the data that is adequate, relevant and necessary for each purpose.
Although no system is completely invulnerable, we periodically review security measures and act upon any incident that may affect the confidentiality or integrity of the data.
Cookies, analytics and external services
The website may use technical cookies essential for functioning and optional analytics or external service cookies.
Google Analytics should only be activated when the user has given the corresponding consent through the cookie manager, except in legally permitted cases.
Detailed information about cookies, duration, providers, purpose and how to modify consent is available in the Cookie Policy .
The website may also show content or links from third parties, such as maps, videos, social networks or external platforms. These services may apply their own privacy policies when the user interacts with them.
Changes to this policy
This policy may be updated when the website’s services, the providers used, the data processing or the applicable regulations change.
When changes are significant, they will be reported in a visible way on the website or through appropriate channels.
Clear information, responsible use and control over your data.
For any inquiry related to this policy you can contact us at info@costabravaparcaventura.com .