Your privacy is important to us, so through this document, we explain what data we collect from users, how we use it, and why, among other details.
For your information, we will never ask for more information than we actually need for the services required; we will never share it with third parties, except by legal obligation or with your prior authorization; and we will never use your data for any purpose not previously indicated.
As a user, you must read this Privacy Policy carefully on a regular basis and whenever you enter your personal data, as it may be modified. The provider has the power to make changes to the information contained on the website in order to comply with regulations or update this Policy. The provider is under no obligation to notify users of changes made; publication on the website is sufficient.
Identity: PARCS AQUÀTICS DE LA COSTA BRAVA SL (Also referred to as the Provider)
NIF: B62365077
Postal address: Carretera de Vidreres, km. 1.2, 17310, Lloret de Mar, Girona
Email: protecciodades@waterworld.es
PARCS AQUÀTICS DE LA COSTA BRAVA SL, as the party responsible for the website and in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR), regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data, as well as with the rest of the current legislation on personal data protection, and with Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary security measures, of both a technical and organizational nature, to guarantee and protect the confidentiality, integrity, and availability of the data entered.
The data we collect, how we obtain it, and the purpose of processing are as follows:
1. Contact form and/or information request: Required data: name, email address, telephone number. Purpose: to respond to enquiries and/or provide the information requested by the User. Legal basis: User consent.
2. Newsletter subscription form: Required data: email address. Purpose: to send the User commercial information of interest about our products and/or services via email, SMS, social networks or any other electronic or physical means, provided that the User has given explicit consent. Legal basis: User consent.
3. If purchasing through our website: Required data: first and last name, date of birth, email address, telephone number, image and, optionally, postal code and country. Purpose: contracting our service / purchasing our product. Legal basis: User consent.
4. If purchasing a 2nd Day ticket: Required data: first and last name, photograph and postal code. Purpose: purchase of the 2nd Day Pass. Legal basis: performance of the contract.
5. CV submission form:
6. WhatsApp: the use of this application is detailed in the “WhatsApp” section of this privacy policy.
7. To carry out the contractual relationship and the administrative, tax, and accounting management required under applicable law:
You may withdraw your consent at any time by sending a written request with the subject line “Unsubscribe” (“Baixa”) to the email address provided.
In accordance with the GDPR, PARCS AQUÀTICS DE LA COSTA BRAVA SL does not engage in spam practices; therefore, it does not send commercial communications by email that have not been previously requested or authorised by the User. Consequently, in all communications received from the provider, the User will have the opportunity to withdraw consent and stop receiving them.
We will not process your personal data for any purpose other than those described above, except where required by law or by judicial order.
Your personal data will not be used for automated decision-making.
Failure to provide the requested personal data or refusal to accept this privacy policy will make it impossible to fulfil the purposes described above.
Where a prior contractual relationship exists between the parties, the legal basis for processing administrative, tax, and accounting obligations will be the existing commercial relationship between the parties.5. CV submission form:
6. WhatsApp: the use of this application is detailed in the “WhatsApp” section of this privacy policy.
7. To carry out the contractual relationship and the administrative, tax, and accounting management required under applicable law:
You may withdraw your consent at any time by sending a written request with the subject line “Unsubscribe” (“Baixa”) to the email address provided.
In accordance with the GDPR, PARCS AQUÀTICS DE LA COSTA BRAVA SL does not engage in spam practices; therefore, it does not send commercial communications by email that have not been previously requested or authorised by the User. Consequently, in all communications received from the provider, the User will have the opportunity to withdraw consent and stop receiving them.
We will not process your personal data for any purpose other than those described above, except where required by law or by judicial order.
Your personal data will not be used for automated decision-making.
Failure to provide the requested personal data or refusal to accept this privacy policy will make it impossible to fulfil the purposes described above.
Where a prior contractual relationship exists between the parties, the legal basis for processing administrative, tax, and accounting obligations will be the existing commercial relationship between the parties.
PARCS AQUÀTICS DE LA COSTA BRAVA SL will provide information to law enforcement authorities when required by a court order or by legal obligation. The information provided will be limited exclusively to what the provider holds at that time.
PARCS AQUÀTICS DE LA COSTA BRAVA SL will carry out international data transfers when using the following tools necessary for the development of its activity, which may store your data. These tools include:
Google Analytics: used to analyse and measure how users interact with the website through cookies. The information generated and collected by these cookies about usage (including the IP address) will be transmitted directly to and stored by Google, Inc., located at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, USA. Google, Inc. is certified under the EU–US Data Privacy Framework approved by the European Commission.
As a User–Data Subject, you may request the exercise of the following rights before PARCS AQUÀTICS DE LA COSTA BRAVA SL by submitting a written request to the postal address indicated in the header or by sending an email to protecciodades@waterworld.es, indicating as subject: "DATA PROTECTION: DATA SUBJECT RIGHTS".
Rights:
As a User, you also have the right to withdraw the consent granted at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to its withdrawal.
You also have the right to lodge a complaint with the supervisory authority if you consider that your rights regarding the protection of your personal data have been violated (www.aepd.es).
SECURITY MEASURES:
The data you provide will be treated confidentially. The provider has adopted all necessary technical and organisational measures and all levels of protection required to guarantee the security in the processing of personal data and to avoid its alteration, loss, theft, unauthorised processing or access, in accordance with the state of technology and the nature of the stored data. Likewise, it is guaranteed that the processing and recording in files, programs, systems or equipment, premises and centres comply with the integrity and security requirements and conditions established in current regulations.
LANGUAGE
The applicable language of this privacy policy is Spanish. Therefore, in the event of any contradiction between versions provided in other languages, the Spanish version shall prevail.
SOCIAL NETWORKS
PARCS AQUÀTICS DE LA COSTA BRAVA SL may have a presence on social networks. The processing of the data of persons who become followers on social networks (and/or carry out any link or connection action through social networks) of the official pages of PARCS AQUÀTICS DE LA COSTA BRAVA SL shall be governed by this section, as well as by the terms of use, privacy policies and access regulations belonging to the relevant social network, previously accepted by the user.
PARCS AQUÀTICS DE LA COSTA BRAVA SL will process your data for the purpose of properly managing its presence on social networks, informing about activities, products or services of the provider, as well as for any other purpose permitted by social network regulations.
It is prohibited to publish content that:
Violates fundamental rights of individuals, lacks courtesy in the network, or may generate negative opinions about users or third parties, and in general any content that PARCS AQUÀTICS DE LA COSTA BRAVA SL considers inappropriate. In particular, content that violates legality, honesty, responsibility, respect for human dignity, protection of minors, public order, privacy, consumer protection and intellectual and industrial property rights.
Is allegedly illegal under national, EU or international regulations, or that performs activities that are allegedly illegal or contravene principles of good faith.
Thus, PARCS AQUÀTICS DE LA COSTA BRAVA SL reserves the right to remove from the website or corporate social networks, without prior notice, any content considered inappropriate. In any case, if you submit personal information through a social network, PARCS AQUÀTICS DE LA COSTA BRAVA SL is exempt from liability regarding the security measures applicable to the platform; and the User, should they wish to know them, must consult the corresponding specific terms and conditions of the relevant social network.
CV SUBMISSION
If the User submits their CV through our website, they are informed that the provided data will be processed in order to make them part of any selection processes that may exist, due to the analysis of their profile and contact information in order to select the best candidate for the job vacancy identified by the Controller. We inform you that this is the only official procedure for accepting your CV; therefore CVs sent by other means will not be accepted. If any modification to your data is required, we kindly ask you to notify us in writing as soon as possible, in order to keep your information properly updated.
The data will be retained for a maximum period of one year, after which it will be deleted, ensuring full confidentiality in its processing and subsequent destruction. After this period, if you wish to continue participating in the Controller’s selection processes, you must resubmit your CV.
The processing of personal data of individuals who make enquiries via WhatsApp of PARCS AQUÀTICS DE LA COSTA BRAVA SL is governed by this section, as well as by the terms of use, privacy policies, and access regulations of the corresponding application accepted by the user. PARCS AQUÀTICS DE LA COSTA BRAVA SL will process the data provided for the purpose of properly managing the enquiry, as well as for any other administrative purpose related to the service. The data is shared with WhatsApp Ireland Limited, which implements security measures to ensure confidentiality, integrity and availability of information, as stated in its privacy policy. International data transfers may be carried out, as indicated in its policy. These transfers are covered by appropriate safeguards in accordance with adherence to the WhatsApp LLC Data Privacy Framework. No further disclosures are planned, except when legally required or by judicial order. Data will be retained only for as long as necessary to fulfil the purpose for which it was collected and, once no longer needed, will be securely blocked, archived, and stored for the legally established period.
BIOMETRIC DATA
As from the 2026 season, AQUADIVER will no longer process biometric data for the purchase of the promotional ticket 2nd DAY PASS as a method of access to the park.
For customers who have contracted this promotion and whose biometric data (fingerprint) has been processed, we inform you that this processing was voluntary and chosen by the customer. The purpose of the processing was to manage access to the park, with their consent.
These data were retained for the duration of the season and only as long as the user had not exercised any of the rights available to them. The data were not shared with third parties, except where there was a legal obligation or a court order. Once the data were no longer necessary, they were deleted using appropriate security measures.
PARCS AQUÀTICS DE LA COSTA BRAVA SL es reserva el dret a modificar la present política per a adaptar-la a novetats legislatives o jurisprudencials.
The consent given, both for the processing and the transfer of data of the data subjects, may be revoked at any time by notifying PARCS AQUÀTICS DE LA COSTA BRAVA SL under the terms established in this Policy for the exercise of rights. This revocation shall in no case have retroactive effect.
Their data will be retained for as long as necessary for the purpose for which it was collected, due to legal obligation or judicial requirement, and as long as they do not withdraw their consent or until they exercise their right to erasure, objection, or restriction of processing. However, we will retain the data for the periods legally established under applicable regulations.
As a general rule, the relationship between PARCS AQUÀTICS DE LA COSTA BRAVA SL and users of its telematic services on this website shall be governed by Spanish legislation and jurisdiction, to which both parties expressly submit. The Courts and Tribunals of the provider’s domicile shall have jurisdiction for the resolution of any disputes arising from or related to its use (if the user is not considered a consumer under the TRLGDCU), or those of the user’s domicile (if the user is considered a consumer under the TRLGDCU).