Privacy Policy

1. Introduction

24Kiteboard (hereafter referred to as “Us”, “We”, “Our”) wants to give you the best experience possible. We are very committed to your privacy and keeping your personal data safe. We are bound by the General Data Protection Act (GDPR) and will protect your personal information in accordance with its principles.

This privacy statement aims to provide a clear view of what personal data we collect and how we use it, our dedication to protecting it and your rights and options to control your personal information and protect your privacy.

2. When does this privacy statement apply?

This Privacy Statement applies to 24Kiteboard processing of all personal data of its Customers, Suppliers, Business Partners, and Others. It does not cover the processing of personal data of employees concerning their employment with 24Kiteboard.

2.1 What is personal data?

Within 24Kiteboard, we consider all information that relates to you and identifies you personally, alone or in combination with other information available to us, as personal data.

2.2 What categories of personal data do we collect?

We collect your data through various sources, such as when you purchase a ticket from us, book a service, sign up for our newsletter, or browse our websites.

We also collect personal data through cookies and similar technologies. Cookies are small files of information stored on your equipment which save and retrieve information about your visit to this website – for example, how you entered our site, the date and time of visit, location information, IP addresses, how you navigated through the site, and what information was of interest to you. Read more about how we use cookies in our Cookie Statement.

2.2.1 Personal identification information

When you contact us, we may record your name and contact details, including your address, telephone number, social media account, and email address.

2.2.2 Information about your visits to our websites or other digital media

When you visit our websites, we may register your IP address, browser type, operating system and referring website web-browsing behaviour.

2.2.3 Your communication with us

When you send us an email or chat with us via social media, we might register your communication with us. When you call us, our customer support team may register your questions, queries, or complaints in our database. We don’t record phone calls.

2.2.4 Information you choose to share with us

You can share information with us, for example, by commenting on our social media posts, completing a customer survey, or entering a contest.

3. Who is responsible for your data?

24Kiteboard is responsible for processing all personal data that falls within the scope of this Privacy Statement. 24Kiteboard may share your data with third parties. Still, if it does so, it will remain responsible for your data unless your data has been summoned as part of a court order or another legal obligation to share these data, which rests on 24Kiteboard.

4. What purposes do we use your data, and how do we collect it?

We may use your data for various purposes, as set out below. This may include data that you provided to use explicitly and data that we collected ourselves (for example, data relating to your website visits). Some information we collect is legally mandated or otherwise necessary for delivering our services or products, and some information we collect is based on your consent. If you do not allow us to collect all the information we request, we may not be able to deliver all our services or products effectively.

1. To send you our newsletter

When you sign up for our newsletter, we will send you regular updates on 24Kiteboard services and products that may be relevant to you. We can update you via e-mail, regular mail, or social media channels. You have the right to unsubscribe from our newsletter at any time by using the “unsubscribe” button at the bottom of the newsletter.

On what grounds do we process your data when we send you our newsletter?

We process this personal information based on your consent if you have subscribed to our newsletter.

2. To send you personalised marketing messages

When you visit our website, sign up for our newsletter, participate in sweepstakes, or share your contact details with us via one of our representatives, we may send you direct marketing communications, such as email, phone, or social media. Where applicable law requires, we ask for your consent to send personalised marketing communications.

The messages you receive will be personalised and tailored to your individual preferences and interests. We use analytics to generate such personalised messages. These analytics process your personal information and place you in marketing, which determines the content of the messages and the offers you will receive from us.

We also undertake opinion research (such as asking if you would like to participate in a survey) to learn about your experience and improve your experience with 24Kiteboard, including by sending you personalised messages.

On what grounds do we process your data when we send you personalised messages?

We process this personal information for legitimate business purposes, including sending you relevant information about our products and services, events, prize giveaways or promotions, and 24Kiteboard news that might be of interest to you.

3. To combine and analyse your data

We will use your personal information to create a profile based on the information we hold about you, which is stored and processed in a central marketing database. This is necessary to ensure that we have all accurate information about you in one place. We create your profile in accordance with your preferences to provide you with the best personalised experience, to send you personalised marketing messages and newsletters and for opinion research purposes. Below, you can find a more detailed description of the ways in which we will use your personal information for these purposes.

The way you and other customers interact with our brands across all the different channels described above (e.g. our website, social media channels and marketing messages we send you) and the information we collect in that regard from each of these channels provides us valuable information about your interests and preferences and the interests and preferences of our customers in general. If you consent thereto, we may combine the information we collect with information we lawfully obtain from third parties.

On what grounds do we process your data when we combine and analyse data?

We process this personal information based on your consent, where required, for example, if we combine third-party databases with ours. We also process this information based on our legitimate business purposes, which include the ability to enhance, modify, personalise or otherwise improve our services and communications towards our customers to understand better how people interact directly with us (through our communications or our websites), determine the effectiveness of promotional campaigns or advertising, and/or to identify and prevent fraud.

4. To develop and improve our services

We utilise aggregated personal data to examine customer behaviour and tailor our products and services accordingly. Additionally, we may process your personal data for analytics purposes. By analysing aggregated personal data, we ensure that our offerings remain relevant to our customers. This involves assessing how frequently you read our newsletters, how often you visit our website, and which pages you click on, helping us understand your preferences for products and services.

We also use surveys to test our customers’ satisfaction levels. This research is conducted through 24Kiteboard. We use your responses to such surveys to assess quality and improve your customer experience.

Using the information provided, we can tailor our offerings, promotions, newsletters, or Website to enhance their relevance and appeal to our customers.

On what grounds do we process your personal data?

We process this personal information for legitimate business purposes, which includes the ability to enhance, modify, personalise or otherwise improve our services and communications towards our customers, to better understand how people interact directly with us (through our communications or our websites), determine the effectiveness of promotional campaigns or advertising, and/or to identify and prevent fraud.

5. To comply with the law

In some cases, 24Kiteboard processes your personal data to comply with laws and regulations.

On what grounds do we process your personal data?

We process this personal information based on a legal obligation to disclose such personal information.

6. When you interact with 24Kiteboard directly

If you contact our Customer Service (or they contact you), we will use personal information, including your booking/order details and contact history, to address your request and offer you the best service possible. We will also use this method if it is required to fulfil a contract with a 24Kiteboard brand or if we need to meet any legal obligations.

7. When you enter into a business relationship with us

You may provide personal information to 24Kiteboard based on a contract or a broader business relationship. In this part of the policy, we set out how we may process such personal data.

1. For the assessment and acceptance of a business partner

When you get in contact with 24Kiteboard, we process your personal data for assessment and acceptance purposes, for example in order to confirm and verify your identity. Additionally, 24Kiteboard processes the personal data of business partners for various administrative functions, such as conducting due diligence and screening against publicly accessible sanctions lists from government and law enforcement agencies.

2. For the conclusion and execution of agreements with business partners

We process your personal data for administrative purposes, such as sending invoices and making payments. We also use your personal data to deliver or receive and administer our or your services or products. 24Kiteboard will process your personal data to further execute our agreement, including for the delivery of customer services.

3. For relationship management and marketing

24Kiteboard utilises information from its CRM database to deliver relevant offers and newsletters, handle account management, and communicate recalls. Additionally, we employ your personal data for creating, implementing, and analysing market surveys and marketing strategies.

4. For business process execution

We process your data in the performance and organisation of our business. This includes general management, order management and management of 24Kiteboard’s assets. 24Kiteboard also processes your data for its internal management. We provide central processing facilities to work more efficiently. We conduct audits and investigations, implement business controls, and manage and use customer, supplier and business partner directories. Also, we process your personal data for finance and accounting, archiving and insurance purposes, legal and business consulting and in the context of dispute resolution.

5. To monitor compliance

24Kiteboard continuously monitors its IT systems to ensure adherence to its internal policies and regulations, including the Terms of Service Agreement and Cookies Policy. As part of these monitoring efforts, your personal data might be accessed and reviewed.

5. Who has access to your personal data?

1. Access to your personal data within Cosmovento

As a global organisation, all the personal data we collect may be transferred internationally within our organisation, but only if there is a legitimate interest to do so (as set out in Chapter 4 above). Based on such legitimate business interest, your data may be shared within the Cosmovento Group and with companies operating under the 24Kiteboard brand. We exchange your information internally for administrative purposes and to create a complete overview of your contacts and contracts.

Cosmovento collaborators are authorised to access personal data only to the extent necessary to serve the applicable purpose and to perform their jobs.

2. Access to your personal data by third parties

The following third parties may have access to your personal data, where relevant, for the provisioning of their products or services to 24Kiteboard or to you:

1. Banks payment system operators and credit card companies, for the fulfilment of payments, as identified while you undertake your payment;
2. Insurace companies;
3. IT suppliers hosting our customer database, websites and technology service providers;
4. Parties who support 24Kiteboard in their marketing activities, such as digital agencies, mailing houses, statistical research partners, and Google and Meta;
5. Authorised representatives who sell services and products on our behalf as identified by the party you buy the services or products from;
6. Debt collectors;
7. Fraud bureaus or other organisations to identify, investigate or prevent fraud or other misconduct;
8. External dispute resolution schemes;
9. Regulatory bodies, government agencies and law enforcement bodies;
10. Our financial advisors, legal advisors and auditors; and
11. Other third parties with whom we are required by law to share the personal data.

We may also disclose your personal information to others outside the Cosmovento Group where:

12. We are required or authorised by law or where we have a public duty to do so;
13. You may have expressly consented to the disclosure, or the consent may be reasonably inferred from the circumstances; or
14. We are otherwise permitted to disclose the information under applicable privacy laws.

When such third parties are given access to your personal data, we will take the required contractual, technical, and organisational measures to ensure that your personal data are only processed to the extent necessary or within the scope of the consent we have received from you. We will ensure that third parties only process your personal data according to applicable (local) law.

We will not sell, distribute or lease your personal information to third parties other than as set out above, unless we have your permission or are required by law to do so.

3. The use of your personal data by data processor

When 24Kiteboard engages a third party to handle your data, we will establish an agreement with that party, specifying the acceptable conditions for processing personal data. This agreement will include commitments to ensure that your personal data is used exclusively for delivering services on our behalf.

6. How is your personal data secured?

Cosmovento has established necessary safeguards to maintain the confidentiality and security of your personal data. We have put in place suitable technical, physical, and organisational measures to defend personal data against accidental or unlawful destruction, loss, damage, alteration, unauthorised disclosure, and access, along with all other types of unlawful processing (including, but not limited to, unnecessary collections) or further processing. These include IT security policies, employee training, and secure servers.

7. How long do we retain your personal data?

Your personal data will be retained for as long as necessary for the purposes described in this privacy policy or as long as it is necessary to comply with statutory obligations and resolve any disputes.

8. How can you access, correct or have your personal data removed?

You can at all times request access, correction, restriction, portability or removal of the data that Cosmovento processes or if you have any questions regarding the processing of your personal data by sending a request to: contact@cosmovento.com.

If you prefer to contact us by regular mail, please send your request to the following address:

Cosmovento Lda.
24Kiteboard Compliance
Rua Dom Pedro V 41
8900-283 VRSA
Portugal

We are committed to always working with you to resolve any complaint or concern you might have about our processing of your personal data fairly. If, however, you feel that we have not adequately assisted you and do not comply with applicable privacy rules, you have the right to lodge a complaint with the data protection authority using their website.