At Puerto Deportivo de Garrucha we take the protection of your data seriously. This policy explains what information we collect, why, how long we keep it and what rights you can exercise as a user of our website and nautical services.
The entity responsible for processing your personal data is:
UTE PUERTO DEPORTIVO DE GARRUCHA · Tax ID (CIF) U04880894
Explanada del Puerto, Local 1, Puerta 1, 04630 Garrucha (Almería), Spain
Email: info@marinagarrucha.com · Phone: +34 633 33 19 58
If you have any questions about how we process your data, contact us at any time using the email above.
Depending on how you interact with us, we may process the following categories of data:
We do not request specially protected data (health, beliefs, etc.) unless strictly necessary to provide the service and with your explicit consent.
- Identification data: first and last name.
- Contact details: email address and phone number.
- Nautical data: vessel name, length, beam and stay dates.
- Message content: information you voluntarily provide in contact or berth request forms.
- Technical browsing data: IP address, browser type, preferred language, pages visited and time on site.
- Site preferences: selected language and cookie consent.
We use your data for the following purposes:
- Managing information requests, quotes or berth reservations.
- Handling operational, technical or commercial enquiries about the harbour and its services.
- Maintaining the contractual and administrative relationship with boat owners and harbour users.
- Sending communications related to your stay, contracted services or harbour news.
- Improving browsing experience and website performance.
- Complying with legal obligations in tax, commercial, port and safety matters.
- Preventing fraud, misuse and ensuring the security of facilities.
Processing is based on one or more of the following legal grounds under Regulation (EU) 2016/679 (GDPR):
- Consent of the data subject (Art. 6(1)(a) GDPR), e.g. when submitting a form or accepting non-essential cookies.
- Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), such as managing a berth booking.
- Compliance with legal obligations (Art. 6(1)(c) GDPR), in tax, accounting or port matters.
- Legitimate interest of the controller (Art. 6(1)(f) GDPR), to ensure website security and proportionately improve our services.
We retain your personal data while there is an active commercial or enquiry relationship with the marina and, thereafter, for the periods required by tax, commercial and claims defence regulations.
Messages received through forms are kept as long as needed to resolve the request and, at most, twelve months from the last communication, unless a contractual relationship begins.
Browsing and analytics data are retained in aggregated or anonymised form according to each tool’s technical retention periods.
06Recipients and processors
We do not sell or share your data with third parties for commercial purposes. Data may only be accessed by:
- Technology providers supplying hosting, email or website maintenance services, under a data processing agreement.
- Harbour partner companies (shipyard, agencies, technical services) when necessary to provide the requested service.
- Public authorities when legally required.
All processors are contractually bound to treat data confidentially and only follow our instructions.
07International transfers
Some technology providers may be located outside the European Economic Area. In such cases we ensure an adequate level of protection through standard contractual clauses, adequacy decisions or other mechanisms provided by the GDPR.
You may exercise the following rights at any time:
To exercise them, email info@marinagarrucha.com stating the right you wish to exercise and attach a copy of your ID or equivalent document. We will respond within one month.
If you believe we have not handled your request correctly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).
- Access: know what data we process about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion when no longer necessary.
- Objection: object to certain processing based on legitimate interest.
- Restriction: request temporary suspension of processing.
- Portability: receive your data in a structured format where applicable.
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or unlawful disclosure, including encrypted communications (HTTPS), access controls, backups and staff training.
Although we work to maintain maximum security, no Internet system is completely infallible. We recommend not sharing passwords or sensitive data through unsecured channels.
Contact phone: +34 633 33 19 58
This website is not directed at children under 14. We do not knowingly collect data from minors without parental or legal guardian consent. If we discover we have received data from a minor without authorisation, we will delete it as soon as possible.
We may update this privacy policy to reflect regulatory changes or improvements to our services. The current version will always be published on this page with the corresponding update date.