Privacy Policy

The controller of your personal data is:

Ruben Afonso Unipessoal, Lda. (trading as Madeira Surf Center) · VAT no. 515 733 113
Estrada da Calçada, n.º 38, 9240-218 São Vicente, Madeira, Portugal
book@madeirasurfcenter.pt · +351 911 986 083

• Contact form: name, email, phone (optional), subject and message — to answer your request; it is recorded in our customer file.
• Board rental request: name, email, phone, dates, boards, extras, pick-up location and notes — to prepare the booking and the rental contract.
• Bookings of lessons, surf guide, SUP and surf camp: made on the BookingKit platform (name, contact details, participants and payment) — to provide the service.
• Rental contract: identification, contact details and electronic signature — to enter into and prove the contract and to manage the deposit.
• Accommodation (Madeira Surf Lodge): bookings made on the Amenitiz platform or on booking platforms.
• Online shop: orders placed on Shopify (shop window on our website, payment on Shopify).
• Newsletter: your email, the date and page where you gave your consent and the date you confirmed it — to send you news and offers.
• Website statistics: anonymous browsing data (Google Analytics), only if you accept analytics cookies.

We do not store payment card data: payments are made on certified platforms (BookingKit, Shopify, SumUp, Amenitiz).

• Performance of a contract or pre-contractual steps: information requests, bookings, rentals and accommodation.
• Compliance with legal obligations: invoicing, accounting and the complaints book.
• Consent: newsletter and analytics or marketing cookies. You can withdraw it at any time, without affecting processing carried out before.
• Legitimate interest: website security and abuse prevention (for example, limiting repeated form submissions).

Data is only shared with the entities that help us provide the service, each with its own policies and security measures:

• BookingKit (activity bookings and payments);
• Amenitiz (accommodation bookings);
• Shopify (online shop);
• SumUp (payments at the desk);
• firma.dev (electronic signature of the rental contract);
• Google (website statistics, only with your consent);
• the hosting of the website and CRM, on servers in the European Union.

We do not sell personal data. Outside these cases, we only pass it on to third parties with your consent or when required by law.

Some of these platforms (for example, Google and Shopify) may process data outside the European Union. In those cases, transfers are protected by the safeguards provided for in the GDPR, such as adequacy decisions or standard contractual clauses approved by the European Commission.

• Contact requests and customers: while there is a business relationship and for as long as needed to handle complaints.
• Invoicing and accounting records: for the legal period (10 years).
• Newsletter: until you withdraw your consent. A subscription request that is not confirmed within 7 days expires and is deleted after 30 days.
• Cookies: see the Cookie Policy.

At any time, you can ask for access to, rectification, erasure, restriction of processing and portability of your data, object to processing and withdraw any consent you have given.

To do so, send an email to book@madeirasurfcenter.pt from the address you gave us, stating what you would like. We reply within one month at the latest.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.

Subscribing asks for your explicit consent and only becomes active after you click the link we send you by email (double opt-in). We keep the date and origin of your consent. You can unsubscribe at any time using the link at the end of each newsletter or by email.

We only use cookies that are not strictly necessary with your consent. The details are in the Cookie Policy, and you can change your choice at any time under "Cookie settings" at the bottom of every page.

We may update this policy. The version in force is always the one published on this page, with the date of the last update at the top.