PRIVACY
DRAFT FOR LEGAL REVIEW — not yet approved by a Spanish data-protection lawyer. Fill in the controller details before launch.
Who we are
Controller: [LEGAL ENTITY NAME, NIF, address] · Contact: [privacy@lets-ryd.com]. RYD. is an early-stage concept to measure interest in an electric scooter riding park in the Marbella area. Nothing has been built or approved.
What we collect and why
- Age band, area, scooter ownership and likely visit frequency — to measure local demand (legal basis: consent, GDPR Art. 6(1)(a)).
- A contact email — for under-18s only a parent/guardian's email, never the child's. Used to send one confirmation message.
- Technical: language, campaign (UTM) source, a salted one-way hash of your IP (anti-spam, deleted with the entry).
We do not collect names, birth dates, schools or precise locations. We use no advertising cookies, profiling or retargeting. Site analytics are aggregate counts with no cookies or identifiers.
Children
Under-18 entries are an expression of interest only. We create no identifiable child profile and send no promotional messages unless the parent/guardian confirms via the emailed link, and separately opts in to updates. In Spain, children under 14 cannot consent themselves; we apply the parental-confirmation process to everyone under 18.
Marketing
Updates are optional and requested separately on the confirmation page. Taking part in the interest survey never depends on it.
Retention
Unconfirmed entries are deleted after [14] days. Confirmed entries are kept while the concept is being assessed, then deleted or re-consented. [Define final period.]
Your rights
Access, rectification, erasure, restriction, portability and withdrawal of consent at any time — use the link in your confirmation email (withdrawal deletes the contact email immediately) or write to [privacy@lets-ryd.com]. You may complain to the Spanish AEPD (aepd.es).
Processors
Hosting [Vercel], database [Supabase, EU region], email [Resend]. [Confirm DPAs and international transfer safeguards.]