Privacy notice

1. Who processes your data

The data controller is Spartak Borshi, surf coach in Tenerife (Spain). For any question about your data, write to privacy@seniorsurfacademy.com.

2. What data we collect and why

• Surf Camp requests: name, email, phone (optional), number of people, surf level and message (optional), language. We use them to answer you about the camp. Legal basis: your consent and the steps you ask for before a possible booking.
• Free sign-up on the site: name and email, your statement that you are at least 18 and your consent. The account is created only after you enter the code received by email. Legal basis: your consent and the service you asked for.
• Academy: name, email, language, height (if you give it, to check your stance) and access status; the lessons you mark as completed and those the coach marks as passed. We use them to give you access to the course and follow your progress. Legal basis: the service you asked for (even if free).
• End-of-lesson questionnaire: how clear the lesson was, whether you managed the exercise, whether the video worked, what was hard. We use it to improve the course. Legal basis: our legitimate interest in improving the course; answering is your choice.
• Waiting list for the full version (optional): if you choose it, we write to you when it opens. You can leave it at any time from the Academy. Legal basis: your consent.
• Scale test: you type your body weight and the number on the scale, but we save only the percentage of your weight on the front foot; your body weight is not saved.
• Videos you send to the coach: the front and side videos of your exercises, stored in a private space. Only you and the coach can see them, through links that last a few minutes. The coach uses them to correct you. Legal basis: your consent, given before each submission. If you allow it with a separate box, the videos are also measured with artificial intelligence on the coach's computer (no external services) and deleted from the computer right after; the measurements are only for the coach. We do not show them to others.
• Pain or discomfort: this is health data. We process it only if you report it and tick the explicit consent box. The coach uses it to follow you safely: when you report it, the coach receives an email. You can withdraw your consent at any time by writing to the address above.
• Technical data: to sign you in we use technical session cookies. For security, the site's provider records technical data such as your IP address and browser type.

3. Who sees your data

Only the coach sees your data. We do not sell it or use it for advertising or statistics. To run the site we rely on these providers, who process data only on our behalf:

• Supabase: database, sign-in and student videos, with servers in the European Union (Frankfurt).
• Vercel: website hosting. It is a US company: the transfer is protected by the safeguards provided by the GDPR (European Commission standard contractual clauses).
• Resend: sending emails (sign-in codes and alerts to the coach), with servers in the European Union (Ireland).
• YouTube (Google): lesson videos are embedded in privacy-enhanced mode. When you play a video, Google may collect data under its own privacy policy.

4. How long we keep it

• Academy account and progress: while your access is active, then for 12 months.
• Videos you send to the coach: deleted automatically 30 days after the coach's feedback (the written feedback stays with your account).
• Questionnaire answers, including reported pain: up to 12 months after the end of the beta.
• Surf Camp requests: 24 months.

After these periods the data is deleted, unless the law requires otherwise.

5. Cookies

We only use technical cookies needed to sign in to the Academy and the panel. We do not use profiling or statistics cookies, so we do not ask for cookie consent. YouTube may set its own cookies when you play a video.

6. Your rights

At any time you can ask to see, correct or delete your data, to restrict or object to its processing, to receive it in a readable format and to withdraw any consent given. Write to privacy@seniorsurfacademy.com: we answer within one month.

If you think your data is not handled correctly, you can complain to the Agencia Española de Protección de Datos (www.aepd.es) or to the authority of your country.

7. Changes

If we change this notice, we update the date at the top.