www.wheelsandwaves.es
I. PRIVACY POLICY AND DATA PROTECTION
In compliance with current legislation, WHEELS AND WAVES (hereinafter also
www.wheelsandwaves.es) undertakes to adopt the necessary technical and organizational
measures according to the appropriate level of security for the risk involved in the data
collected.
Applicable Laws
This privacy policy complies with Spanish and European regulations on the protection of
personal data, specifically:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).
- Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
- Royal Decree 1720/2007 of 21 December (RDLOPD).
- Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
Data Controller Identity
The data controller for the personal data collected on WHEELS AND WAVES is:
LUPUS VINCIT, with Tax ID B75414557, registered in the Commercial Registry under:
TOMO/PÁGINA/CA-65564.
Legal Representative: Gaetan Mario Hansart
Contact Details:
Address: Plaza Loma del Rey, Local 40, 11300 La Línea de la Concepción, Cádiz, Spain
Phone: +34 623 60 44 31
Email: info@wheelsandwaves.es
Data Collection and Processing
In accordance with the GDPR and LOPD-GDD, personal data collected via the forms on our
website are incorporated into a processing file in order to facilitate, streamline, and fulfill the
commitments between WHEELS AND WAVES and the user, or to respond to requests or
queries. A processing activity log is maintained unless exempted under Article 30.5 GDPR.
Principles of Data Processing
The user’s personal data will be processed based on the following principles:
- Lawfulness, fairness, and transparency – data is processed only after informed, explicit user consent.
- Purpose limitation – collected for specific, legitimate purposes.
- Data minimization – only the necessary data is collected.
- Accuracy – kept accurate and up-to-date.
- Storage limitation – stored only as long as necessary.
- Integrity and confidentiality – protected against unauthorized access.
- Accountability – compliance is demonstrable.
Data Categories
Only identifying information is collected; no special categories of personal data are
processed.
Legal Basis for Processing
The legal basis is the user’s express and verifiable consent. Users may withdraw their
consent at any time, with no effect on the legality of prior processing.
Purpose of Processing
Personal data is collected to maintain the relationship between the user and WHEELS AND
WAVES and to improve our services. This may include marketing, analytics, and
customization to enhance the website experience.
Data Retention Period
Personal data will be kept for no longer than 1 year or until the user requests its deletion.
The specific retention period or the criteria for determining it will be communicated upon data
collection.
Data Recipients
Personal data will not be shared with third parties. If otherwise, recipients will be specified at
the time of collection.
Minors’ Data
Only individuals aged 14 or older may give valid consent. For users under 14, parental or
guardian consent is required.
Data Security and Confidentiality
WHEELS AND WAVES uses appropriate technical and organizational measures and SSL
encryption to protect data. However, in the event of a data breach posing a risk to
individuals’ rights and freedoms, users will be notified without undue delay.
All personal data will be treated confidentially by the data controller and any person to whom
access is granted, under legal or contractual obligation.
User Rights
Users may exercise the following rights:
- Access – Know whether personal data is being processed and access it.
- Rectification – Request correction of inaccurate or incomplete data.
- Erasure (Right to be Forgotten) – Request deletion under specific conditions.
- Restriction – Request restriction of processing in certain situations.
- Data Portability – Obtain and transfer data in a structured format.
- Objection – Object to data processing under legitimate grounds.
- Automated Decisions – Not be subject to decisions based solely on automated processing, including profiling.
To exercise these rights, users must send a written request with the subject “GDPR-WEB
ADDRESS” to:
Postal Address: Plaza Loma del Rey, Local 40, 11300 La Línea de la Concepción,
Cádiz, Spain
Email: info@wheelsandwaves.es
The request must include: full name, copy of ID, specific request, address for notifications,
date, and signature.
Third-Party Websites
This website may contain links to third-party sites with their own privacy policies. WHEELS
AND WAVES assumes no responsibility for those policies or practices.
Complaints
Users may file a complaint with the appropriate supervisory authority if they believe their
rights are violated. In Spain, this is the Spanish Data Protection Agency (AEPD):
https://www.aepd.es.
II. ACCEPTANCE AND CHANGES TO THIS POLICY
By using this website, the user confirms having read and accepted the conditions outlined in
this Privacy Policy. WHEELS AND WAVES reserves the right to amend this policy at any
time based on legal, jurisprudential, or regulatory changes.
Users are encouraged to review this page regularly to stay informed of any updates.