Privacy policy

Data controller

Hera's Gardens, NIF G56321987, registered office at Calle Topete 5, 28039 Madrid.

Data protection contact: herasgardens@gmail.com

What we collect

Membership form: first and last name, email, phone (optional), date of birth, city of residence (optional), gender (optional, you may decline to answer), and any free-text message you choose to add.

Contact form: name, email, subject and message.

In both cases we record a technical fingerprint of your connection (never the plain IP address), solely to limit automated submissions.

No identity document is collected through the site: verification happens in person, at the club.

Why we use it, and on what legal basis

Identity and contact details: to handle your membership application, that is, pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).

Technical fingerprint: legitimate interest in protecting the form against automated submissions (Art. 6(1)(f) GDPR).

How long we keep it

Applications not taken further: 12 months.

Contact messages: 6 months.

Anti-spam technical fingerprint: 24 hours.

If your membership goes ahead, member data is managed outside this website and the application is deleted.

Who has access

Only expressly authorised club members, through named accounts. Internal email notifications do not contain the application data: only a notice, a link to the back-office, and the reply email address.

The database is hosted in the European Union (Supabase, Frankfurt region). Transactional emails go through a European provider.

We do not sell or pass on your data to third parties for commercial purposes.

Your rights

You may request access to, rectification, erasure, restriction or portability of your data, and object to its processing.

Write to us at herasgardens@gmail.com. We reply within one month.

You may also lodge a complaint with the Spanish data protection authority, the AEPD (www.aepd.es).

Cookies and local storage

This site uses no advertising or analytics cookies.

We store only your language and confirmation that you are of legal age, so we do not have to ask again. Both are strictly necessary for the site to work.