Who is responsible
The data controller is the legal business operating CrossFit Puerto Banús. Its full legal identity, tax ID, and registered address must be added to this page before publication. Privacy questions can be sent to the contact email shown below.
Information we use
We may use contact details submitted through the website and order details collected during Stripe Checkout, including name, email, telephone number, delivery address, purchased items, selected variants, and payment status. We do not receive full card details from Stripe.
Why information is used
Information is used to answer enquiries, take payment, fulfil and deliver orders, send transactional messages, prevent misuse, keep required business records, and handle returns or disputes. The applicable legal bases can include performance of a contract, legal obligations, and legitimate business interests.
Service providers and retention
Order information may be processed by Stripe for payment, Resend for transactional email, Packlink and selected carriers for fulfilment, and the website hosting provider. Information is kept only for as long as needed for the stated purposes and applicable accounting, tax, consumer, and legal obligations.
Your rights
Depending on the circumstances, individuals may request access, correction, deletion, restriction, portability, or object to certain processing. They may also complain to the Spanish Data Protection Agency. Contact us first so we can identify and respond to the request.