Privacy notice
Who looks after your information, why we use it and how to make a request.
Effective 7 September 2026
Who is responsible
Lluc Matas Pomar is responsible for the personal information processed for NUS Cycling Mallorca. For collection enquiries, privacy questions or requests to exercise your rights, contact legal@nusmallorca.com.
legal@nusmallorca.comFirst access and email updates
If you choose to sign up, we use your email address to send NUS collection news and launch updates on the basis of your consent. We also keep your selected language, the form you used, and the time and version of your consent. Signing up is optional: without your email we cannot add you to the list, but you can still browse and contact us. First access is not a purchase or reservation. You can withdraw your consent at any time by emailing us, or through the unsubscribe link in a marketing message.
When you contact us
We use your email address, the information you include and our correspondence to answer your enquiry or handle your request. Our basis is our legitimate interest in responding to people who contact NUS; where an enquiry concerns a prospective contract, we use it to take the steps you request before that contract. Please send only the information needed for your enquiry. We process privacy-rights requests to meet our legal obligations.
Simple website counts
We count page views, valid signup attempts and signup requests accepted by our server, grouped by page or form and language. This helps us understand whether the site and signup process work. Our basis is our legitimate interest in operating and improving NUS using minimal data. These counts use no analytics cookies, local storage, persistent visitor identifiers or profiles. We do not include your email, IP address, referral URL, query strings or an individual event timestamp in measurement records. Page-view counting respects your browser’s Do Not Track setting. Hosting and security providers still receive connection information needed to serve requests. You can contact us to object to processing based on legitimate interests.
Service providers and transfers
Resend manages our subscriber list, Railway hosts the application and Cloudflare provides network and security services. These providers process information needed to deliver their services and may use infrastructure or subprocessors outside the European Economic Area, including in the United States. Their data-processing terms describe the applicable safeguards, including standard contractual clauses for relevant international transfers. You can request further information or a copy of the applicable safeguards by email. We do not sell your information or share the list for other organisations’ marketing.
How long we keep information
We review the signup list monthly and remove subscriptions that are 24 months old unless you have explicitly signed up again. We stop marketing when you withdraw consent; a minimal unsubscribe record is kept only to prevent further mailings and is reviewed annually for necessity. If you request erasure, we assess and remove the information that is no longer needed, keeping only what a specific legal obligation or claim requires. Resolved enquiries are deleted after 12 months. Privacy-request correspondence is kept for three years after closure to document how the request was handled, with access limited to that purpose. Aggregate measurement exports are kept for up to 12 months; temporary service logs follow the provider’s configured retention. A documented legal hold may extend retention only for the affected records, which are not used for marketing.
Your rights and requests
You can ask for access to, correction or erasure of your personal information, restriction of processing, and portability where applicable. You can object to processing based on legitimate interests and withdraw consent without affecting processing already lawfully carried out. Email legal@nusmallorca.com and explain your request; we may ask for proportionate information to verify it. We normally respond within one month. If a permitted extension is needed, we will explain it within that first month. You can also complain to the Spanish Data Protection Agency (AEPD).
legal@nusmallorca.comSpanish Data Protection Agency (AEPD)Your choices
The website currently uses no advertising or third-party analytics trackers and makes no automated decisions with legal or similarly significant effects. We do not require you to accept marketing to browse or contact NUS. If our data use changes, we will update this notice and request fresh consent where required.