PRIVACY POLICY
Last updated: 1 September 2025
At X-Jump Multi Activity, S.L. (hereinafter, “we”, “us” or “the Data Controller”), owner of pokiddocanarias.com, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share and protect your personal information.
In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we provide you with the following information regarding the processing of your personal data.
1. DATA CONTROLLER
- Identity: X-Jump Multi Activity, S.L.
- Trading Name: Pokiddo Canarias
- NIF: B22520043
- Registered Address: C/ Bentayga, 1, 1st Floor, 35110, Santa Lucía de Tirajana, Las Palmas, Spain.
- Privacy Contact Email: info@pokiddocanarias.com
- Contact Telephone: 603 59 88 40
2. PURPOSES OF PROCESSING AND LEGAL BASIS
We process your personal data for the following purposes:
| Purpose of Processing | Legal Basis |
|---|---|
| Managing enquiries, requests for information or complaints submitted to us via web forms, email or telephone. | Taking pre-contractual steps at the request of the data subject (Art. 6.1.b GDPR) and legitimate interest in responding. |
| Managing online bookings and the purchase of tickets or services, including payment and issuing invoices. | Performance of a contract (Art. 6.1.b GDPR). |
| Managing participation in competitions, prize draws or promotional events. | Performance of a contract (Art. 6.1.b GDPR) or consent (Art. 6.1.a GDPR), depending on the activity. |
| Sending commercial communications and newsletters about our services, promotions and news. | Explicit consent of the data subject (Art. 6.1.a GDPR). |
| Managing the publication of comments or photos on blogs or social media. | Explicit consent of the data subject (Art. 6.1.a GDPR). |
| Complying with applicable legal obligations (disclosure of data to law enforcement authorities, tax authorities, etc.). | Compliance with a legal obligation (Art. 6.1.c GDPR). |
3. CATEGORIES OF DATA PROCESSED
We process the data that you voluntarily provide to us, which may include:
- Identification data: First name, surname, DNI/NIE (for invoicing).
- Contact details: Email address, telephone number, postal address.
- Transaction data: Information about your bookings, payment methods and purchase history.
- Children’s data: We only process children’s data with verifiable consent from their parents or legal guardians, where necessary for participation in our activities.
- Other data: Information about allergies or relevant medical conditions for safety purposes during the activity (processed with your explicit consent and under strict security measures).
4. DATA RECIPIENTS
Your data may be disclosed to:
- Financial institutions: To process payments for bookings and purchases.
- Public authorities: Where required by law (Tax Agency, law enforcement authorities, etc.).
- Service providers: Providing us with support for IT services, web hosting, email marketing or booking management, acting as Data Processors under contracts that guarantee confidentiality and security.
We do not transfer personal data internationally to countries outside the European Economic Area (EEA).
5. DATA RETENTION
Your data will be retained for the following periods:
- Booking and invoicing data: Retained for as long as you maintain a commercial relationship with us and subsequently for the legally established periods under tax and commercial legislation (generally 6 years).
- Newsletter data: Retained until you withdraw your consent.
- Contact details for enquiries: Retained for as long as necessary to manage your request and subsequently for the applicable statutory limitation periods.
6. DATA SUBJECT RIGHTS
You have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Erase your data (Right to Erasure / Right to be Forgotten).
- Restrict the processing of your data in certain circumstances.
- Data portability: Have your data transferred to another data controller.
- Object to the processing of your data for direct marketing purposes or on grounds relating to your particular situation.
- Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You may exercise your rights by submitting a written request, together with a copy of your DNI or equivalent identification document, to our postal address or contact email indicated in section 1.
You also have the right to lodge a complaint with a competent Data Protection Supervisory Authority, such as the Spanish Data Protection Agency (www.aepd.es).
7. SOURCE OF THE DATA
The personal data we process is obtained directly from you through:
- Contact and booking forms on our website.
- Communications by email, telephone or in person.
- Subscription to our newsletter.
- Participation in competitions or promotions.
8. SECURITY MEASURES
We implement and maintain appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or accidental damage. These measures are reviewed and updated periodically.
9. CHILDREN
Our services are aimed at families, but bookings must be made by an adult. If we become aware that we have collected personal data from a child under 16 without verifiable consent from their parents or legal guardians, we will take steps to delete that information from our servers.
10. CHANGES TO THE PRIVACY POLICY
We reserve the right to modify this policy to reflect changes in legislation, case law or best practices. Any changes will be published on this website. We recommend reviewing this policy periodically.
