ESENIT

Privacy Policy

Last updated: 22 November 2025

1. Data Controller

Identity of the Data Controller: Latido y Raqueta
Contact: tayleonojeda@gmail.com

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we inform you about the processing of your personal data.

2. Data We Collect

2.1. Contact Data

When you use our contact form or send us an email, we may collect:

  • First and last name
  • Email address
  • Province of residence
  • Information about your medical condition (if voluntarily provided)
  • Any other information you choose to share in your message

2.2. Browsing Data

When you visit our website, we may automatically collect:

  • IP address
  • Browser and device type
  • Pages visited
  • Date and time of access
  • Time spent on the website

3. Purpose of Data Processing

The personal data we collect is used for the following purposes:

  • Enquiry management: To respond to information requests submitted through the contact form or email
  • Programme information: To provide you with information about the Latido y Raqueta programme, locations, start dates, and participation requirements
  • Programme enrolment: To manage your enrolment as a participant in the programme (if applicable)
  • Coordination with institutions: To coordinate your participation with collaborating clubs, hospitals or associations (only with your explicit consent)
  • Service improvement: To analyse the use of our website in order to improve the user experience
  • Informational communications: To send you updates about the project (only if you have given your consent)

4. Legal Basis for Processing

The legal basis for the processing of your personal data is:

  • Consent of the data subject: By sending us a message or completing our contact form, you consent to the processing of your data for the stated purposes
  • Performance of a contract: When you enrol as a participant in the programme
  • Legitimate interest: To analyse website usage and improve our services

5. Data Retention

Personal data will be retained for:

  • General enquiries: The time necessary to respond to your enquiry plus 1 additional year for internal management purposes
  • Programme participants: For the duration of your participation in the programme plus the period established by law for the retention of medical/sports documentation (generally 5 years from completion)
  • Browsing data: Maximum 2 years

Once these periods have elapsed, the data will be securely deleted or anonymised.

6. Data Recipients

Your personal data may be shared with:

  • Technical service providers: Companies that help us keep the website running (hosting, email, etc.)
  • Collaborating sports clubs: Only if you enrol in the programme and choose to participate at a specific club
  • Collaborating hospitals: Only if you enrol in the programme and choose to participate through a hospital
  • Patient associations: Only with your explicit consent

Important: We never sell, rent or share your personal data with third parties for marketing purposes without your explicit consent.

7. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that adequate safeguards are in place to protect your data, such as:

  • Standard contractual clauses approved by the European Commission
  • Certification under the EU-U.S. Data Privacy Framework
  • Other legally recognised safeguards

8. Your Rights

In compliance with the GDPR and the LOPDGDD, you have the following rights:

8.1. Right of Access

You may request information about what personal data we hold about you.

8.2. Right to Rectification

You may request that we correct any inaccurate or incomplete personal data.

8.3. Right to Erasure (“Right to Be Forgotten”)

You may request that we delete your personal data when it is no longer necessary for the purposes for which it was collected.

8.4. Right to Restriction of Processing

You may request that we restrict the processing of your data in certain circumstances.

8.5. Right to Data Portability

You may request to receive your personal data in a structured, commonly used and machine-readable format.

8.6. Right to Object

You may object to the processing of your personal data in certain circumstances.

8.7. Right to Withdraw Consent

Where processing is based on your consent, you may withdraw it at any time.

How to Exercise Your Rights

To exercise any of these rights, you may contact us at:

We will respond within a maximum period of 1 month from receipt of your request.

Right to Lodge a Complaint

If you consider that the processing of your personal data infringes applicable legislation, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD):

  • Web: www.aepd.es
  • Address: C/ Jorge Juan, 6, 28001 Madrid
  • Telephone: 901 100 099 / 912 663 517

9. Security Measures

We have implemented appropriate technical and organisational measures to protect your personal data against:

  • Unauthorised access
  • Accidental loss
  • Destruction or damage
  • Misuse
  • Unauthorised disclosure

These measures include, among others:

  • Encryption of sensitive data
  • HTTPS protocols for data transmission
  • Restricted access to personal data, limited to authorised personnel only
  • Regular backups
  • Data protection training for staff

10. Cookies

This website uses cookies to improve the user experience. For more information about the cookies we use, please refer to our Cookie Policy (if applicable).

You can configure your browser to reject all cookies or to indicate when a cookie is being sent. However, some website features may not function properly if you disable cookies.

11. Third-Party Links

Our website may contain links to other third-party websites (for example, ANHP, Red Cardiopulmonar, RFETM). We are not responsible for the privacy practices of these websites. We recommend that you read the privacy policy of each website you visit.

12. Minors

The Latido y Raqueta programme is aimed at persons over 18 years of age. We do not intentionally collect personal data from minors without the consent of their parents or legal guardians.

If we discover that we have collected personal data from a minor without appropriate consent, we will take steps to delete such information as soon as possible.

13. Health Data (Special Category)

Given that the Latido y Raqueta programme is aimed at persons with cardiopulmonary and vascular conditions, we may process health data, which is considered a special category of personal data under the GDPR.

Legal basis for the processing of health data:

  • Explicit consent of the data subject
  • Necessary for preventive medicine or occupational medicine purposes
  • Public interest in the area of public health

Additional safeguards:

  • Access restricted to healthcare or authorised personnel only
  • Encryption of health data
  • Medical confidentiality respected at all times
  • Ability to withdraw consent at any time

14. Updates to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will take effect from the date of publication on this website.

We recommend that you review this policy periodically to stay informed about how we protect your personal information.

Significant changes will be communicated through a prominent notice on our website or by email (if we have your email address).

15. Contact

If you have any questions, concerns or comments about this Privacy Policy or the processing of your personal data, you may contact us at:

We will respond as soon as possible, within a maximum of 10 working days.

Latido y Raqueta
Breathe, play, live · Every heartbeat counts

Last updated: 22 November 2025