Privacy Policy

Your Rights

Under the GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure ('right to be forgotten')
• Right to restriction of processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, contact us at: ria.aquaclubetavira@gmail.com

Data Controller Contact

RIA Aqua Clube Tavira

Porta 5 - Pavilhão Municipal Dr. Eduardo Mansinho, Tavira

Purpose of Processing

Your data is used for:

• Managing registrations and enrolments
• Communication about club activities and events
• Payment processing and invoicing
• Compliance with legal obligations (sports insurance, federation)
• Sending newsletters and relevant information (with consent)

Data Security

We adopt appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction, in accordance with Art. 32 GDPR.

Retention Period

Data will be retained for the duration of the enrolment contract and, after termination, for the legally required period (minimum 10 years for accounting documents). Data collected solely on the basis of consent will be deleted upon withdrawal of consent.

Right to Lodge a Complaint

If you believe that the processing of your data violates GDPR, you have the right to lodge a complaint with the national supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD):

Data Controller

RIA Aqua Clube Tavira, headquartered at Porta 5 - Pavilhão Municipal Dr. Eduardo Mansinho, Tavira, is the data controller for your personal data, pursuant to the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).

Legal Basis

Data processing is based on the explicit consent of the data subject (Art. 6(1)(a) GDPR), the performance of a contract to which the data subject is party (Art. 6(1)(b)), and compliance with legal obligations (Art. 6(1)(c)).

Sharing with Third Parties

Your data will not be sold to third parties. It may be shared with partner entities strictly necessary for service delivery (e.g., sports insurer, swimming federation) and with technology service providers processing data on our behalf, under confidentiality agreements.

Data Collected

We collect the following personal data:

• Full name and date of birth
• Contact details (email, phone, address)
• Tax number (NIF) and ID card
• Guardian information (for minors)
• Health information relevant to sports practice
• Photographic records (with express consent)