Privacy policy
How we process your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Owner
- Grupo Deportivo Balear de Taekwon-Do ITF (sporting name: Escola Balear de Taekwon-Do ITF)
- Type of entity
- Non-profit sports club
- Tax ID (NIF)
- G56816929
- Registered address
- Carrer d'Aragó, 135, ground floor A, 07005 Palma (Balearic Islands, Spain)
- info@tkd-balear.es
- Phone
- 628 98 10 64
- Registers
- Balearic Islands Register of Sports Entities, no. DC-3421. Palma Municipal Register of Civic Entities, no. 2249/26.
For any data protection matter: rgpd@tkd-balear.es.
2. What data we process and why
| Processing activity | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Trial class and contact | Name, phone, email, group, venue and message. | To respond to your request and suggest a group and a day, or add you to the waiting list. Basis: your consent (art. 6.1.a GDPR) and taking pre-contractual steps at your request (art. 6.1.b). | Until the request is resolved and, if you don't enrol, for a maximum of 12 months (because of the waiting list). |
| Scholarship applications | Details of the applicant (family or organisation), the child's name and age, venue, reason and the information you provide. | To review the application and contact you. Basis: consent (art. 6.1.a GDPR). | Applications arrive by email at the club's account; the website does not store them. If no scholarships are available, they are kept while the application remains on the scholarship waiting list (until the end of the season, renewable at the request of the family or organisation). If it is declined or leaves the list, it is deleted no more than 6 months later. If it is granted or the person enrols as a student, their data moves to the club's management platform and is processed like that of members and students. |
| Members and students | The data collected on enrolment on the club's management platform: identification, contact details, legal guardian, sporting and payment data. | To manage the membership: classes, fees, licence, sports insurance, gradings and communications. Basis: performance of the contract (art. 6.1.b) and legal obligations (art. 6.1.c). Optional uses, such as images, are based on consent. | While you are a member and, afterwards, for the legally required periods. One year after you leave, the data is reduced or anonymised in line with our retention policy. |
| Child protection | Data contained in reports sent to the child protection officer. | To handle and manage reports about possible situations of risk to children. Basis: legal obligation under Spanish Organic Law 8/2021 (LOPIVI) (art. 6.1.c) and protection of vital interests (art. 6.1.d). | The time needed to handle the report, plus the applicable legal periods. |
In the website forms we only ask for the data that is strictly necessary. Please don't include health information or documents: if they were needed, we would ask for them through a secure channel.
3. Minors
Data of children under 14 is processed only with the consent of the person holding parental responsibility or guardianship (art. 7 LOPDGDD). Those over 14 can consent for themselves, except where the law requires the assistance of their parents or guardians.
4. Recipients
We do not sell or share your data. It is only disclosed to or accessed by:
- Providers that deliver services to us as data processors, under contract and with safeguards: web hosting (Hostinger), email (Google Workspace), visit measurement if you accept it (Google Analytics) and the club's management platform (app.taekwon-do.es) with its technology providers.
- For members, the Asociación Española de Taekwon-Do ITF Unificado (AETU) and the insurer, to process the licence and the sports accident insurance.
- For scholarships, the social organisation supporting the family, only if you authorise it.
- Public authorities, courts and law enforcement where there is a legal obligation.
Our email provider and some technology providers of the management platform (hosting, email delivery and backups) may process data outside the European Economic Area. In that case, the transfer is covered by the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to rgpd@tkd-balear.es or by post to our address. If you feel we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
We apply technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted access, an activity log on the management platform and backups.
7. Changes to this policy
We may update this policy to reflect legal or operational changes. The current version is always the one published on this page.
Last updated: 12 November 2026.
This page is a translation provided for your convenience. In case of any discrepancy, the Spanish version prevails.