This Privacy Policy governs the processing of personal data by 7OLATU, a brand owned by INTERGAIAK INICIATIVAS DE DESARROLLO SOSTENIBLE, S.L. (hereinafter, “INTERGAIAK”), in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), and other applicable regulations.

1. DATA CONTROLLER

Company name: INTERGAIAK INICIATIVAS DE DESARROLLO SOSTENIBLE, S.L.
NIF: B01573799
Address: Calle Prado 11, 3º Izda, 01005 Vitoria-Gasteiz
Contact email: info@intergaiak.com
Telephone: 688 814 554

2. ORIGIN AND TYPE OF PERSONAL DATA

The personal data we process is collected through:

The data subject themselves, via web forms, electronic communications, social media, telephone, or in person.
Automatically obtained when visiting our website, using cookies and similar technologies. You can manage your preferences in our Cookie Policy.

Types of data processed:

Identification and contact information: name, surname, ID/NIE, CIF, address, telephone number, email.
Commercial data: selected product, size, surfboard model, wishlist/favorites, custom board measurements, comment or review.
Financial data: payment history, account or bank card number.
Web browsing data: IP address, pages visited, browser, operating system.
Images on social media or events (subject to an appropriate legal basis).

3. PURPOSES OF PROCESSING AND LEGAL BASIS

Personal data will be processed for the following purposes, based on the following legal bases:

Management of the business relationship, delivery of the order, and return processing (Art. 6.1.b GDPR).
Compliance with legal tax, accounting, and administrative obligations (Art. 6.1.c GDPR).
Sending commercial communications about our services, with prior consent or based on legitimate interest (Art. 6.1.a and 6.1.f GDPR). Consent may be withdrawn at any time.
Management of social media and publication of content (Art. 6.1.f GDPR).
Responding to requests to exercise data protection rights (Art. 6.1.c GDPR).

4. RECIPIENTS AND PROCESSORS

The data may be communicated to:

Public administrations and banking entities, when necessary to comply with legal obligations.
Suppliers acting as data processors, such as consultancies, web hosting services, technological platforms, and email marketing tools.
In the case of using third-party services such as Meta Platforms, Inc., international data transfers may occur, based on standard contractual clauses or other appropriate guarantees.

5. RIGHTS OF DATA SUBJECTS

Data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing, and portability by sending a request to the following email address: info@intergaiak.com. They also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. DATA RETENTION PERIOD

The data will be retained for as long as the relationship with the data subject is maintained and, subsequently, for the periods required by current regulations or until its deletion is requested. If the right to erasure is exercised, the data may be kept blocked only for the time necessary to comply with legal obligations or defend against potential claims.

7. SECURITY MEASURES

INTERGAIAK adopts the necessary technical and organizational measures to guarantee a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. These measures are reviewed and updated periodically.

Last updated: July 2025