1. Who we are
The controller of your personal data is EMTF España (European Moo Duk Kwan Tang Soo Do Federation — Spain).
Registered address: Finca Rustica, Rambla Charrara, Ricote,
Company number / NIF: na
Privacy contact: [email protected]
We have not appointed a Data Protection Officer, as we are not required to. Any privacy question can go to the contact above.
2. Who this policy covers
This policy covers anyone whose data we handle: website visitors, people who book a trial class or make an enquiry, students and members, parents and guardians of junior students, instructors, and clubs affiliated with EMTF España.
3. What data we collect
Contact details: name, e-mail, telephone number, postal address.
Student details: date of birth, programme, class attendance, belt grade, grading results and certificates.
Parent or guardian details: for students under 18, the name and contact details of the responsible adult.
Health information: only what you choose to tell us so we can teach you safely (for example a condition or injury an instructor should know about).
Payment details: membership plan, payment history and direct-debit or card reference. Full card and bank details are held by our payment provider, not by us.
Photos and video: only with separate consent (see section 7).
Website data: technical data and cookies, as described in our Cookie Policy.
4. Why we use it and our legal basis
Purpose
Legal basis (GDPR)
Answering enquiries and booking trial classes
Steps at your request before a contract — Art. 6.1(b)
Running your membership: classes, attendance, gradings, belt records, certificates
Performance of a contract — Art. 6.1(b)
Collecting membership fees and keeping accounts
Contract — Art. 6.1(b); legal obligation — Art. 6.1(c)
Health information for safe training
Your explicit consent — Art. 9.2(a)
Registering students and gradings with the European federation (EMTF)
Contract — Art. 6.1(b)
Child protection and safeguarding duties
Legal obligation under Spanish law (Ley Orgánica 8/2021, LOPIVI) — Art. 6.1(c)
News, offers and event updates by e-mail, SMS or WhatsApp
Your consent — Art. 6.1(a); for existing members, about similar services, as permitted by Art. 21 LSSI
Photos and video for our website and social media
Your consent — Art. 6.1(a)
Keeping our website secure and working
Legitimate interest — Art. 6.1(f)
You must give the data marked as required on our forms so we can book you in or enrol you. Everything else is optional.
5. Children and young people
Most of our students are children. Under Spanish law (Art. 7 LOPDGDD), anyone 14 or over can consent to the use of their own data; for students under 14, a parent or legal guardian gives consent and exercises the student's rights. Membership agreements for anyone under 18 are signed by a parent or guardian. We collect only what we need to teach, grade and keep each student safe.
6. Who we share your data with
We never sell your data. We share it only with:
The European Moo Duk Kwan Tang Soo Do Federation (EMTF) — name, date of birth, club and grade, to register memberships, gradings and certificates.
Service providers who process data for us under a written contract (Art. 28 GDPR): our CRM, booking and messaging platform (HighLevel / LeadConnector), our website host (Vercel), our database host (Supabase), and our payment provider ([Stripe / GoCardless]).
Insurers, accountants and advisers, where needed to run the school.
Public authorities, only where the law requires it.
7. Photos and video
We ask separately before using any image of a student. Consent for training records and consent for public use (website, social media) are separate choices. For students under 14, a parent or guardian decides. You can withdraw consent at any time and we will stop using the image from then on.
8. International transfers
Some of our providers are based in, or use servers in, the United States or the United Kingdom. Transfers to the UK rely on the European Commission's adequacy decision. Transfers to the US rely on the EU–US Data Privacy Framework where the provider is certified, or otherwise on the Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards used.
9. How long we keep it
Enquiries and trial bookings that do not lead to enrolment: up to 12 months, then deleted.
Member records: while you are a member, then for as long as the law requires — accounting records for 6 years, and other records for the period needed to deal with any claim.
Grade and certificate records: kept so your rank can be verified in future, unless you ask us to delete them.
Marketing: until you unsubscribe or withdraw consent.
Photos and video: until you withdraw consent.
10. Your rights
You have the right to access your data, correct it, have it deleted, object to or restrict its use, receive it in a portable format, and withdraw any consent at any time (without affecting what was done before). To use any of these rights, e-mail [privacy e-mail] with proof of identity. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.
11. Security and automated decisions
We use access controls, encryption in transit and restricted admin access to protect your data. We make no decisions about you by automated means alone, and we do no profiling with legal or similarly significant effects.
12. Changes to this policy
We may update this policy. The current version is always on our website, with the date below. If a change materially affects you, we will tell you directly.
Effective date: [date]
13. Short notice for forms
Controller: EMTF España. Purpose: to answer your enquiry and book your trial class. Legal basis: steps taken at your request. Recipients: our service providers, never sold. Rights: access, correction, deletion and others — [email protected].