The best water park
in the Costa Brava
Get avantatge of our offers and buy your ticket now!
The best water park
in the Costa Brava
Get avantatge of our offers and buy your ticket now!
Your privacy is important to us, so through this document, we explain what data we collect from users, how we use it, and for what purposes, among other details.
For your information, we will never ask for more information than is strictly necessary for the requested services; we will never share it with third parties, except when legally required or with your prior authorization; and we will never use your data for any purpose other than those previously stated.
As a User, you should carefully read this Privacy Policy on a regular basis and whenever you provide your personal data, as it may be subject to modification. The provider reserves the right to make changes to the information contained on the website in order to comply with regulations or update this Policy. The provider is not obliged to notify Users of any such changes, as their publication on the website shall be sufficient.
Identity: PARCS AQUÀTICS DE LA COSTA BRAVA SL (also the provider)
NIF: B62365077
Postal address: Carretera de Vidreres, km. 1.2, 17310, Lloret de Mar, Girona
Email: protecciodades@waterworld.es
PARCS AQUÀTICS DE LA COSTA BRAVA SL, as the entity responsible for the website and in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as other applicable regulations on data protection, and Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary technical and organizational security measures to ensure and protect the confidentiality, integrity, and availability of the data provided.
The data we collect, how we obtain it, and the purpose of its processing are as follows:
1. Contact form and/or information request:
Data required: name, email, telephone.
Purpose: to respond to inquiries and/or provide the information requested by the User.
Legal basis: User’s consent.
2. Newsletter subscription form:
Data required: email.
Purpose: to send the User commercial information of interest regarding our products and/or services via email, SMS, social media, or any other electronic or physical means, provided that the User has given express consent.
Legal basis: User’s consent.
3. If you make a purchase through our website:
Data required: first and last name, date of birth, email, telephone, image, and optionally, postal code and country.
Purpose: to manage the contracting of our service or the purchase of our product.
Legal basis: User’s consent.
4. CV submission form:
Data required: name, telephone, address, email, CV.
Purpose: to include the applicant in current or future recruitment processes in which the candidate’s profile may fit. To carry out this selection, PARCS AQUÀTICS DE LA COSTA BRAVA SL may conduct psychotechnical or competency tests to verify whether the candidate’s profile meets the vacancy requirements. Such data will not be used for other purposes. Detailed information can be found in the “CV Submission” section of this policy.
Legal basis: User’s consent.
5. WhatsApp: the use of this application is detailed in the “WhatsApp” section of this policy.
6. To carry out the contractual relationship and administrative, fiscal, and accounting management as required by current legislation:
Data required: first and last name; telephone, address, ID number, email, and signature may also be requested.
Purpose: to manage internal commercial, fiscal, and administrative processes.
Legal basis: data subject’s consent and contractual relationship.
You may withdraw your consent at any time by sending an email with the subject "Unsubscribe" to the address indicated above.
In accordance with the LSSICE, PARCS AQUÀTICS DE LA COSTA BRAVA SL does not engage in spam practices and therefore does not send commercial communications by email that have not been previously requested or authorized by the User. Consequently, in every communication you receive from the provider, you will have the option to revoke your express consent to continue receiving our messages.
We will not process your personal data for any purpose other than those described, except when required by law or a judicial order.
Your personal data will not be used for automated decision-making.
Failure to provide the requested personal data or to accept this privacy policy will make it impossible to achieve the purposes described above.
In cases where a prior contractual relationship exists between the parties, the legal basis for fulfilling the administrative, fiscal, and accounting obligations required by current legislation will be the pre-existing commercial relationship established between the parties.
PARCS AQUÀTICS DE LA COSTA BRAVA SL will provide information to law enforcement authorities under a court order or as required by law. The information provided will be limited to what the provider has at that time.PARCS AQUÀTICS DE LA COSTA BRAVA SL will carry out international data transfers when using the following tools necessary for its activities, which may store your data. These tools are as follows:
Google Analytics: used to perform analysis and metrics on how users interact with the website through cookies. The information generated and collected by these cookies about usage (including IP address) will be transmitted directly and stored by Google, Inc., located at Delaware, 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, United States (“Google”), on its servers in the United States. Google, Inc. is bound by the EU–US Privacy Shield Framework, approved by the European Commission.
As a User-Data Subject, you may request the exercise of the following rights from PARCS AQUÀTICS DE LA COSTA BRAVA SL by submitting a written request to the postal address indicated at the top or by sending an email to recursoshumans@waterworld.es, indicating as the subject: "DATA PROTECTION: RIGHTS OF THE DATA SUBJECTS".
Rights:
Right of access: allows the data subject to know and obtain information about their personal data being processed.
Right of rectification: allows correcting errors and modifying data that are inaccurate or incomplete.
Right of erasure: allows the deletion of data that are inadequate or excessive.
Right to object: the data subject’s right to prevent the processing of their personal data or to stop such processing.
Restriction of processing: involves marking the stored personal data to limit their future processing, for the exercise or defense of claims.
Data portability: provides the data subject with the data being processed so that they can transmit them to another controller without impediment.
Right not to be subject to automated individual decisions (including profiling): the right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects them.
As a User, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with the supervisory authority if you consider that your rights regarding the protection of your personal data may have been violated (aepd.es).
SECURITY MEASURES:
The data you provide will be treated confidentially. The provider has adopted all necessary technical and organizational measures and all levels of protection to ensure the security of data processing and to prevent its alteration, loss, theft, processing, or unauthorized access, in accordance with the state of technology and the nature of the stored data. Likewise, it is ensured that the processing and recording in files, programs, systems, or equipment, both on-site and at centers, comply with the integrity and security requirements established by current regulations.
LANGUAGE
The language applicable to this privacy policy is Spanish. Therefore, in the event of any contradiction in any of the versions provided in other languages, the Spanish version will prevail.
SOCIAL NETWORKS
Please note that PARCS AQUÀTICS DE LA COSTA BRAVA SL may have a presence on social networks. The processing of data from people who follow or interact in any way with the official pages of PARCS AQUÀTICS DE LA COSTA BRAVA SL on social networks will be governed by this section, as well as by the terms of use, privacy policies, and access regulations of the relevant social network, which must have been previously accepted by the user.
PARCS AQUÀTICS DE LA COSTA BRAVA SL will process your data to correctly manage its presence on the social network, providing information about the provider’s activities, products, or services, as well as for any other purpose permitted by the social network’s regulations.
The publication of content is prohibited if it:
- Is allegedly illegal under national, EU, or international law, or involves activities that are allegedly illegal or violate principles of good faith.
- Violates fundamental human rights, is discourteous online, disturbs or may generate negative opinions among our users or third parties, or generally any content that PARCS AQUÀTICS DE LA COSTA BRAVA SL deems inappropriate.
- In general, violates principles of legality, honesty, responsibility, protection of human dignity, protection of minors, public order, privacy, consumer protection, and intellectual and industrial property rights.
PARCS AQUÀTICS DE LA COSTA BRAVA SL reserves the right to remove from the website or corporate social network, without prior notice, any content considered inappropriate.
In any case, if you submit personal information through the social network, PARCS AQUÀTICS DE LA COSTA BRAVA SL is exempt from responsibility regarding the security measures applicable to the platform; if the User wishes to know these, they must consult the relevant terms of the network in question.
CV SUBMISSION
If the User submits their CV through our website, they are informed that the provided data will be processed to include them in ongoing or future recruitment processes, performing an analysis of the applicant’s profile to select the best candidate for the vacancy. This is the only official procedure for submitting your CV, so CVs submitted by any other method will not be accepted. If any data changes occur, please notify us in writing as soon as possible to keep your data properly updated.
Data will be retained for a maximum period of one year, after which it will be deleted, ensuring full confidentiality both during processing and subsequent destruction. After this period, if you wish to continue participating in the Responsible’s recruitment processes, please resubmit your CV.
The processing of data from individuals making inquiries through WhatsApp of PARCS AQUÀTICS DE LA COSTA BRAVA SL will be governed by this section, as well as by the applicable terms of use, privacy policies, and access regulations of the app previously accepted by the user. PARCS AQUÀTICS DE LA COSTA BRAVA SL will process your data to properly manage your inquiry, as well as for any other administrative management purpose of the service. Your data is shared with WhatsApp Ireland Limited, whose technical security measures ensure the confidentiality, integrity, and availability of your information, according to its privacy policy. No further transfers are foreseen, except when legally required or by court order. Please note that, as indicated in its policy, international data transfers affecting your data will occur. These transfers are carried out with appropriate safeguards according to Whatsapp LLC’s adherence to the Data Privacy Framework. No further transfers are foreseen, except when legally required or by court order.Your data will be retained as long as the purpose for which it was collected lasts and, once no longer necessary, will be properly blocked, archived, and retained for the legally established period. The use of PARCS AQUÀTICS DE LA COSTA BRAVA SL’s WhatsApp for sending content other than that necessary to respond to the inquiry, or that is illegal under national or international law, infringes fundamental rights, or violates principles of legality, honesty, responsibility, privacy, consumer protection, and intellectual and industrial property rights, is prohibited.
BIOMETRIC DATA
Starting from the 2026 season, WATER WORLD will no longer process biometric data for the purchase of the promotional 2nd DAY PASS as a method of park access.
For customers who have purchased this promotion and whose biometric data (fingerprint) we have processed, we inform you that this processing is voluntary and at the customer’s discretion. The purpose of processing was to manage park access with their consent.
This data was retained for the duration of the season and as long as the customer did not exercise any of the rights protecting it. Data has not been shared, except when legally required or by court order. Once the data was no longer necessary, it was deleted with the appropriate security measures.
PARCS AQUÀTICS DE LA COSTA BRAVA SL reserves the right to modify this policy in order to adapt it to new legislation or case law.
The consent given, both for the processing and for the transfer of the data of the data subjects, can be revoked at any time by notifying PARCS AQUÀTICS DE LA COSTA BRAVA SL under the terms established in this Policy for the exercise of rights. This revocation will in no case have a retroactive effect.
Your data will be retained for as long as the purpose for which it was collected remains in effect, due to legal obligation or judicial requirement, and while you have not withdrawn your consent or exercised your right to erasure, objection, or restriction of processing. However, we will retain your data for the periods legally established in the applicable regulations.
In general, the relationships between PARCS AQUÀTICS DE LA COSTA BRAVA SL and the Users of its online services, available on this website, are governed by Spanish law and jurisdiction, to which the parties expressly submit. The Courts and Tribunals of the provider’s domicile will have jurisdiction to resolve all disputes arising from or related to the use of the services (if the User is not considered a consumer under the TRLGDCU), or the Courts and Tribunals of the User’s domicile (if the User is considered a consumer under the TRLGDCU).
