Mocean Surf Peniche Privacy Policy

(Updated 2026)

1. Introduction

Mocean Surf Peniche (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and Portuguese law.

By using our website or booking our services, you agree to the practices described in this policy.

2. Data Controller

The entity responsible for processing your personal data is:

Samuel Pinto – Mocean Surf Peniche

NIF: 254 363 725

Registered Address: Rua da Liberdade 3, 2525‑315 Casais de Mestre Mendo, Peniche, Portugal

Email: info@moceansurfpeniche.com

Phone: +351917839670

3. Personal Data We Collect

We may collect the following types of personal data:

a) Information you provide directly

Name
Email address
Phone number
Booking details
Emergency contact information
Medical information relevant to lesson safety (optional)

b) Information collected automatically

Essential technical cookies (see Cookie Policy)
IP address (for security and server logs)

We do not use analytics tools, advertising cookies, or tracking technologies.

4. Purpose of Data Processing

We process your personal data for the following purposes:

Managing bookings and lesson schedules
Providing surf and surfskate lessons
Ensuring participant safety
Responding to inquiries
Fulfilling legal obligations (RNAAT, insurance, invoicing)
Managing liability waivers
Communicating important updates related to your booking

We do not use your data for marketing unless you explicitly request it.

5. Legal Basis for Processing

We process your data based on:

Performance of a contract (booking a lesson or service)
Legal obligations (insurance, invoicing, safety requirements)
Legitimate interest (ensuring safety and service quality)
Consent (only when required, such as for optional information)

6. Data Retention

We retain your data only for as long as necessary:

Booking and service data: up to 5 years (legal requirement)
Liability waivers: up to 5 years
Email inquiries: up to 12 months
Cookies: see Cookie Policy

After these periods, data is securely deleted.

7. Data Sharing

We do not sell or share your personal data with third parties except when necessary:

Insurance providers (in case of an accident)
Accounting and invoicing services
Legal authorities when required by law
Website hosting provider (server-level processing only)

All third parties comply with GDPR requirements.

8. Your Rights Under GDPR

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing
Object to processing
Request data portability
Withdraw consent at any time
File a complaint with the Portuguese Data Protection Authority (CNPD)

Requests can be made via email.

9. Photography & Video

Photos and videos may be taken during lessons for promotional purposes. If you do not consent, you must inform the instructor before the lesson begins.

10. Data Security

We implement appropriate technical and organizational measures to protect your data from:

Loss
Unauthorized access
Disclosure
Alteration

11. Complaints & Consumer Rights

If you believe your data has been mishandled, you may contact:

CNPD — Comissão Nacional de Proteção de Dados Website: https://www.cnpd.pt

For consumer disputes unrelated to data protection:

Centro de Arbitragem de Conflitos de Consumo de Lisboa (CACCL) Website: https://www.centroarbitragemlisboa.pt

12. Updates to This Policy

This Privacy Policy may be updated periodically. The latest version will always be available on our website.

Say Hi :)