Privacy Policy

Effective Date: 26-01-2026

Your Privacy Is Important to Us
It is AtoZ Surf School’s policy to respect your privacy regarding any information we may collect while operating our website. This Privacy Policy applies to atozsurfing.com (hereinafter, “us”, “we”, or “AtoZ Surf School”). We respect your privacy and are committed to protecting the personal data you may provide through the Website.
This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your personal data, including your rights under the General Data Protection Regulation (GDPR).
This Privacy Policy applies only to information collected through the Website and does not apply to information collected offline or through other channels.

Contents

1. Website Visitors
2. Personally-Identifying Information
3. Purposes and Legal Basis for Processing
4. GDPR Compliance (EEA Residents)
5. Data Retention
6. Data Sharing and Third Parties
7. Cookies
8. Security
9. Children’s Information
10. Privacy Policy Changes
11. Contact Information & Data Controller

1. Website Visitors
Like most website operators, AtoZ Surf School collects non-personally-identifying information that web browsers and servers typically make available, such as browser type, language preference, referring website, and the date and time of each visitor request.
AtoZ Surf School collects this information to better understand how visitors use the website and to improve its functionality and performance. From time to time, we may publish aggregated, non-personally-identifying information (for example, website usage trends).
We may also collect Internet Protocol (IP) addresses as part of our analytics and security processes.

2. Personally-Identifying Information
Certain interactions with the Website require us to collect personally-identifying information. The types of personal data we may collect include:

• Name and surname
• Phone number
• IP address

Personal data is collected only when voluntarily provided by users, for example when contacting us or booking surf lessons.

3. Purposes and Legal Basis for Processing
We process personal data for the following purposes:

• To provide and manage surf lessons
• To communicate with customers, including responding to inquiries and providing information about our services

The legal bases for processing your personal data under GDPR include:

• Your consent
• The performance of a contract or steps prior to entering into a contract
• Our legitimate interests, provided they do not override your fundamental rights and freedoms

4. GDPR Compliance (EEA Residents)
If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR).
Your Rights Under GDPR
You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure of your personal data (“right to be forgotten”)
• Restrict processing of your personal data
• Object to processing based on legitimate interests
• Withdraw consent at any time

To exercise these rights, please contact us using the details provided below.
International Data Transfers
If personal data is transferred outside the European Union, we ensure appropriate safeguards are in place, including contractual protections compliant with GDPR requirements.
Supervisory Authority
You have the right to lodge a complaint with your local data protection authority if you believe your personal data has been processed unlawfully.

5. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, administrative, or operational requirements. When personal data is no longer required, it is securely deleted or anonymized.

6. Data Sharing and Third Parties
We do not sell or rent personal data.
We may share personal data with trusted third-party service providers who assist us in operating the Website and providing our services, including:

• Hosting providers
• Google Analytics (website analytics service)

These third parties process data only on our behalf and are contractually obligated to comply with applicable data protection laws, including GDPR.

7. Cookies
To enhance your experience, AtoZ Surf School uses cookies and similar technologies.
Cookies may be used for:

• Essential website functionality
• Website analytics

Non-essential cookies are used only after obtaining the user’s explicit consent, in accordance with GDPR requirements. A cookie consent banner is provided on the Website, allowing users to manage their preferences.
Users can also control cookie settings through their browser settings. Please note that disabling cookies may affect certain features of the Website.

8. Security
The security of your personal data is important to us. We use commercially reasonable technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.
However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children’s Information
AtoZ Surf School does not knowingly collect personal data from children under the age of 16. If you believe that a child has provided personal data on our Website, please contact us and we will take steps to remove such information promptly.

10. Privacy Policy Changes
AtoZ Surf School may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.
Your continued use of the Website after changes are made constitutes acceptance of the updated Privacy Policy.

11. Contact Information & Data Controller
For the purposes of GDPR, AtoZ Surf School acts as the Data Controller.
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:
Email: info@atozsurfing.com