Privacy Policy

Last updated: 23 June 2026

1. Who is responsible for your data

Miraflores Bowls Club ("we", "us", "the Club") is the data controller responsible for the personal data you share with us through this website and our membership and rink-booking forms.

Address: Calle Juliana, Urbanización Miraflores, 29649 Mijas Costa, Málaga, Spain
Contact email: mirafloresbowlsclub@gmail.com

2. What personal data we collect

We only collect personal data that you choose to provide us, primarily through:

• Membership Enquiry Form: full name, email address, telephone number, and any message or comments you include.
• Visitor Rink Booking Form: full name, email address, telephone number, preferred date, number of players, and bowls hire requirements.
• Direct correspondence: any personal data you include when you email or otherwise contact us.

We do not knowingly collect special categories of personal data (e.g. health or religious information), and we ask that you do not include such information in any form or message unless strictly necessary.

3. Why we process your data

• To respond to membership enquiries and provide information about joining the Club.
• To process and confirm visitor rink bookings.
• To manage our ongoing relationship with members, visitors, and enquirers.
• To comply with applicable legal, tax, or accounting obligations.
• To maintain and improve this website and our services.

4. Legal basis for processing

In accordance with Article 6 of the General Data Protection Regulation (GDPR / RGPD), we process your data on the following legal bases:

• Consent — when you voluntarily submit a form on this website.
• Performance of a contract or pre-contractual relationship — to process a membership application or rink booking you have requested.
• Legitimate interest — to respond to general enquiries and carry out ordinary club administration, where this does not override your rights and freedoms.

5. How long we keep your data

We retain data submitted via our forms only for as long as necessary to handle your enquiry or booking, and afterwards for a reasonable period in case of follow-up — generally no longer than 24 months — unless a longer period is required by law (for example, tax or accounting obligations) or you become a member, in which case your data is retained for the duration of your membership and for any further period required by applicable law.

6. Who we share your data with

We do not sell or rent your personal data. We may share it with:

• Formspree, Inc., our form-processing provider, which transmits form submissions to the Club by email and acts as a data processor on our behalf.
• Our website hosting provider, to the extent necessary to operate this website.
• Public authorities, where required by law.

Where a service provider we use is based outside the European Economic Area (EEA) — such as Formspree, based in the United States — any transfer of personal data is carried out under appropriate safeguards (such as Standard Contractual Clauses or an equivalent adequacy mechanism), in accordance with Chapter V of the GDPR.

7. Your rights

Under the GDPR and Spanish Organic Law 3/2018 on Data Protection and Digital Rights Guarantee (LOPDGDD), you have the right to:

• Access the personal data we hold about you.
• Request rectification of inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Request restriction of processing.
• Object to processing.
• Request portability of your data.
• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at mirafloresbowlsclub@gmail.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es if you believe your data protection rights have been infringed.

8. Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet can be guaranteed to be 100% secure.

9. Children

This website and our services are not directed at children under 16, and we do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above indicates when it was last revised. We encourage you to review this page periodically.