Erik on the Shore
Book your sessionBook

Legal

Privacy policy

In short: I only use your data to answer your request and organise your session. I don’t sell it, I don’t use it for advertising and the website doesn’t store it in any database.

Data controller

Eric Mateu Hernandez (Erik on the Shore), Spanish tax ID 47441514N, Passatge Riu Llobregat 13, 08917 Badalona (Barcelona), España. Email: erikontheshore@gmail.com.

What data I use and why

  • Booking form: name, email, dates, surf level, the service you’re interested in and your message. I use them to reply, send you a quote and organise the session.
  • WhatsApp, email or phone: if you contact me that way, I use your number or email and what you tell me, for the same purpose.
  • If you book: the data needed to provide the service, take payment and meet my tax obligations.
  • Photos and videos of your session: they’re delivered to you. I only publish them on the website or social media with your permission, and you can withdraw it at any time.
  • Website security: when you send the form, Cloudflare Turnstile checks technical data from your browser and your IP address to tell people from bots.

Legal basis

  • Your consent, given when you tick the box on the form or contact me (art. 6.1.a GDPR).
  • Steps prior to a contract and its performance when you ask for a quote or book (art. 6.1.b GDPR).
  • Legal obligations, such as tax rules (art. 6.1.c GDPR).
  • My legitimate interest in protecting the site from spam and abuse (art. 6.1.f GDPR).

How long I keep it

Requests that don’t become a booking are deleted no later than one year after our last contact. If you book, I keep the data for as long as we work together and then for the periods required by law (for example, tax law). Published photos are removed when you ask.

Providers involved

I don’t share your data with anyone unless the law requires it. These providers help run the site and only process data on my behalf:

  • Cloudflare (website hosting, Turnstile spam protection and cookie-free visitor statistics).
  • Resend (delivers the email with your request to my inbox).
  • Google (Gmail, where I receive and answer emails).
  • Meta (WhatsApp, if you message me there).
  • PayPal or your bank, if you pay that way.

Some of these providers may process data outside the European Economic Area, in particular in the United States. Those transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

Your rights

You can ask me to access, correct or delete your data, to restrict its use, object to it, ask for portability and withdraw your consent at any time. Email erikontheshore@gmail.com saying which right you want to exercise. I’ll reply within one month.

If you think I haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Children

If you are under 14, I need consent from your parent or guardian to process your data. Sessions for minors are always booked through a responsible adult.

Last updated: