Privacy policy

Last updated: 23 October 2026.

1. Controller and contact

UP AND DOWN SPORTS, S.L., Spanish tax ID B57395329, C/ Caputxins, 4, 3.º A, Edificio A, 07002 Palma de Mallorca, Illes Balears, España. Privacy and rights enquiries: mobility@upanddownsports.es.

2. Data, purposes and legal bases

Enquiries and professional proposals: we use details you provide, such as name, company, role, email, phone, message and documents, to respond and consider the proposal. The basis is our legitimate interest in handling communications addressed to the company and professional relationships (GDPR Article 6(1)(f); Spanish LOPDGDD Article 19 within its professional-contact limits). Where you request steps before a contract to which you would be a party, GDPR Article 6(1)(b) applies.

Delivery and security: infrastructure receives technical data such as IP address, request, date and browser information to deliver pages and prevent abuse, based on our legitimate interest in operating and protecting the service. This is separate from the aggregate counters below. There is no behavioural advertising.

Legal duties and claims: necessary data may be processed to meet legal obligations (Article 6(1)(c)) and handle or defend claims (Article 6(1)(f)). Contacting us does not subscribe you to marketing. This website has no forms, accounts, payments or embedded chat.

3. Information you provide

Contact is voluntary. Please provide a way to reply and the details needed for your enquiry; without them we may be unable to respond. We do not request identity documents, banking details or sensitive data for an initial discussion. The site is intended for professional relationships, not for collecting children's data.

4. Visit statistics

The application counts page loads by day, approximate country and section and stores the date and time of each group's latest load. These tables contain no IP addresses, visitor identifiers, messages or individual browsing histories. Infrastructure supplies the country and browser information is checked to exclude known bots. No analytics cookies or fingerprinting are used. Counts do not identify people or companies, are not unique-visitor counts and may include unrecognised automated traffic.

5. Retention

Enquiries are kept while needed to respond and resolve the resulting process or negotiation. Afterwards, only information needed for legal obligations or potential liabilities is retained, with restricted access and statutory blocking where applicable, and deleted when those periods expire. Infrastructure technical data is retained according to security needs and the providers' criteria below; it is not necessarily erased when you close your browser. The observed cookie's duration is specified in the cookie policy. Aggregate counters are retained to compare activity over time.

6. Providers and recipients

Publication uses OpenAI Sites and Cloudflare infrastructure. Email is handled using email services, including Google Gmail. Choosing WhatsApp opens the WhatsApp/Meta service; email is available as an alternative. This website's code loads no WhatsApp widget and sends no forms to AI services. Communications are handled through the company's customer-contact and email services.

Technology providers may access data as necessary for their services; their own processing may also be governed by their policies. Authorities or courts may receive data where legally required, as may advisers involved in a matter or claim. We do not sell personal data. Provider information: OpenAI · Cloudflare · Google · WhatsApp.

7. International processing

These providers operate internationally and may process data outside the European Economic Area, including the United States. We do not claim all processing stays in Spain or the EU. Their policies describe destinations and applicable transfer mechanisms, including adequacy decisions where they cover the recipient and standard contractual clauses in other applicable cases. You may contact us for information on safeguards applicable to your data and how to obtain a copy.

8. Rights and complaints

You may request access, rectification, erasure, restriction, objection and portability where applicable. In particular, you may object on grounds relating to your situation to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Browsing alone is not treated as consent.

Write to mobility@upanddownsports.es, identifying the right you wish to exercise. Additional identity information will only be requested where necessary. We respond within the statutory one-month period, subject to extensions allowed by the GDPR and notified to you. You may complain to the Spanish Data Protection Agency. This website makes no automated decisions with legal or similarly significant effects and builds no individual profiles.