This policy explains how we handle personal details under the EU General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") and Spain's Organic Law 3/2018, of 5 December, on data protection and digital rights (the "LOPDGDD").
Who is responsible for your details
The association that runs Honey Weed Club is responsible for your personal details (in legal terms, the "data controller"). These are its details:
| Controller | Asociación La Pipa del Sr. Holmes, a private, non-profit association known as Honey Weed Club |
|---|---|
| Tax number (NIF) | G26584029 |
| Address | Av. Antonio Machado, 25, 29630 Benalmádena (Málaga) |
| hi@ |
For anything about your personal details, write to us at hi@weedclubbenalmadena.com.
This website
This website doesn't ask you for any personal details. It has no forms, no analytics, no advertising and no tracking pixels, and it doesn't embed content from social networks.
Everything it uses is served from our own domain, including the fonts and the map on our Visit page. The map images come from OpenStreetMap, but our server fetches them, so your browser never connects to OpenStreetMap.
The age check
When you confirm that you're 18 or over, the website saves one essential cookie that remembers your answer for 30 days, so you aren't asked again on every page. It doesn't identify you and isn't used for anything else. Our Cookies policy explains it.
Hosting
Like any website, ours runs on servers that receive some technical data whenever you visit. Our hosting provider keeps it in its logs to protect the website and keep it running.
| What | Your IP address, your type of browser and device, the date and time of your visit and the pages you request. |
|---|---|
| Why | To keep the website secure and working: for example, to detect attacks and fix errors. |
| Legal basis | Our legitimate interest in keeping the website secure and available (Article 6(1)(f) GDPR). |
| How long | Only as long as it's needed for those purposes. Netlify keeps its system logs for up to 90 days online and up to one year in archive, under its data processing agreement. |
| Who receives it | Netlify, Inc., our hosting provider, which handles it on our behalf (as a "data processor"). Netlify is based in the United States, so this involves a transfer of data outside the European Union, which relies on the EU–US Data Privacy Framework, which Netlify has signed up to (and, if that framework stopped applying, on the EU's standard contractual clauses). |
Links to other services
Some links take you to services run by others, such as WhatsApp, or Google Maps for directions. Nothing is sent to them until you follow one of those links. Once you do, their own privacy policies apply.
Questions on WhatsApp or by email
If you write to us on WhatsApp or by email, we use your number or email address and your messages to answer you, and for nothing else.
| What | Your phone number and the name and photo on your WhatsApp profile (as your settings allow), or your email address, and the messages you send us. |
|---|---|
| Why | To answer your questions: for example, about membership or how to find us. |
| Legal basis | Your consent, which you give by writing to us and can withdraw at any time (Article 6(1)(a) GDPR). When you ask about membership, also the steps you ask us to take before you apply (Article 6(1)(b) GDPR). |
| How long | Only as long as we need the conversation to answer you. |
| Who receives them | We don't pass them on to anyone, unless the law obliges us to. WhatsApp is a service of WhatsApp Ireland Limited, which provides it under its own terms and privacy policy. Emails go through our email provider, which handles them on our behalf (as a "data processor"). |
Please don't send us photos of your identity document on WhatsApp or by email. Registration is completed in person, at the club, with the original.
Membership applications and the members' register
To manage its membership, the association keeps a register of its members. Only adults aged 18 and over can apply, and registration is completed in person, at the club.
| Whose details | People who apply for membership, and members. |
|---|---|
| What | The details on the membership application: name and surname, ID number, date of birth, signature and email address. |
| Why | To review your application, check that you're 18 or over, keep the register of members, confirm that you're a member when you visit and manage your membership. Also to meet the association's legal obligations, such as keeping an up-to-date list of its members (Organic Law 1/2002 on the Right of Association, Article 14). |
| Legal basis | Your membership of the association, which you ask for when you apply (Article 6(1)(b) GDPR), and the legal obligations that apply to associations (Article 6(1)(c) GDPR). |
| Do you have to give them? | Yes, if you want to become a member. Without them, the association can't review your application or keep you on its register. |
| How long | While you're a member and for one year after you leave, unless the law requires them to be kept for longer (for example, while a legal claim could still be made). If your application isn't accepted, only as long as we need to review it. |
| Who receives them | We don't share who our members are. We only pass members' details on when the law obliges us to: for example, if a court or another public authority requires them. |
Your details are used to manage your membership and to meet the association's legal obligations, and for nothing else.
Adults only
This website and the association are for adults aged 18 and over. We don't knowingly hold personal details of anyone under 18. If you think we do, please tell us and we'll delete them.
Your rights
You have these rights over your personal details:
- Access: you can ask whether we hold personal details about you, and for a copy.
- Rectification: you can ask us to correct them if they're wrong or incomplete.
- Erasure: you can ask us to delete them.
- Objection: you can ask us to stop using them where we rely on our legitimate interests.
- Restriction: you can ask us to limit how we use them, for example while we check that they're accurate.
- Portability: you can ask for the details you gave us in a common digital format, or ask us to send them to someone else.
- Withdrawing consent: where we rely on your consent, you can withdraw it at any time. This doesn't affect what we did with it before.
Some rights have limits. For example, we can't delete details that the law obliges us to keep for as long as that obligation lasts.
To use any of these rights, write to hi@weedclubbenalmadena.com or send a letter to Av. Antonio Machado, 25, 29630 Benalmádena (Málaga), saying which right you want to use. It's free. We'll reply within one month. If a request is complex, or we receive a lot of them, the law allows us to extend that by two more months, and we'll tell you if we need to. If we have reasonable doubts about who you are, we may ask you to confirm your identity.
Making a complaint
If you think we haven't handled your details properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es. We'd be grateful if you told us first, so we can try to put it right.
Security and confidentiality
We take technical and organisational measures, appropriate to the risk, to protect personal details against loss, misuse and unauthorised access. This website uses an encrypted connection (HTTPS).
Only the people who need members' details for their role in the association can see them. Everyone who handles personal details for the association has a legal duty to keep them confidential (Article 5 LOPDGDD), and that duty continues after their role ends.
No automated decisions or profiling
We don't make decisions about you by automated means alone, and we don't build profiles of you. The association reviews each membership application in person.
Changes to this policy
If the way we handle personal details changes, we'll update this policy and the date at the top of this page. Our Legal notice and Cookies policy complete it.