Last updated: 02/08/2026
1. Data Controller
Company name: KENKATSU BENIDORM S.L.
Address: Camí del Planet, 31, 03502 Benidorm, Alicante/Alacant, Spain
Tax ID (CIF/NIF): B22544753
Contact email: info@kenkatsubenidorm.es
Phone: +34 623 62 66 81
The legal controller before the Spanish Data Protection Agency (AEPD) is KENKATSU BENIDORM S.L.
2. Data We Collect
KENKATSU BENIDORM S.L. collects the following personal data:
- Identification data: First name, surname, email
- Contact data: Postal address, phone (when required to provide the service)
- Browsing data: IP address, browser type, pages visited (via technical and analytics cookies)
- Special category data — Health: Medical information relevant to physiotherapy services, hyperbaric treatments and injury history. These data are processed with enhanced security measures and only with the data subject’s explicit consent, in accordance with the GDPR for special category data.
- Payment data: Information needed to process transactions (handled by the corresponding payment gateway)
Important: Health-related data are special category data under the GDPR. They are processed with enhanced security measures and only with your explicit consent.
3. Purpose of Processing
Personal data collected are used for the following purposes:
- Booking and service management: Processing and managing bookings for sports services, treatments and accommodation
- Marketing communications: Sending information about services, offers and news from the centre (with the data subject’s consent)
- Legal compliance: Meeting legal and tax obligations
- Service improvement: Analysing website use to improve the user experience
- VIP list: Sending exclusive information about the centre’s opening and launch offers
4. Legal Basis
Processing of your personal data is based on:
- Consent of the data subject: For marketing communications and inclusion on the VIP list
- Performance of a contract: For booking management and provision of services
- Legal obligation: For tax and legal compliance
- Legitimate interest: For improving our services and website security
5. Data Retention
Personal data will be retained for as long as necessary to fulfil the purpose for which they were collected and, in any case, for the periods set by applicable law. In particular:
- Customer data: For the duration of the contractual relationship and statutory retention periods (minimum 6 years for tax records)
- VIP list data: Until the data subject requests removal or withdraws consent
- Browsing data: According to cookie settings (see our Cookie Policy)
6. Sharing Data with Third Parties and Processors
Your personal data may be shared with the following processors, acting under strict confidentiality agreements and in accordance with data protection law:
- Google (Google LLC): For Google Analytics (web traffic analysis) and Google Ads (advertising). Servers located in the USA, under the EU–US Data Privacy Framework.
- Meta Platforms Inc. (Facebook/Instagram): For social media management and advertising on these platforms. Servers located in the USA, under the EU–US Data Privacy Framework.
- Payment gateway / Cloudbeds: To process bookings and transactions. Payment data are handled under those providers’ security policies.
- Hosting and technical service providers: Companies providing hosting, maintenance and technical support under strict confidentiality agreements.
- Legal obligations: When required by law or competent authorities.
International transfers: When using Google and Meta (Facebook/Instagram) services, your data may be transferred to servers in the United States. These transfers are covered by the EU–US Data Privacy Framework, which ensures an adequate level of data protection.
7. Your Rights
Under the General Data Protection Regulation (GDPR) and Spanish data protection law (LOPD), you have the right to:
- Access: Obtain information about your personal data that we process
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data when they are no longer necessary
- Objection: Object to processing of your data for marketing purposes
- Restriction: Request restriction of processing in certain circumstances
- Portability: Receive your data in a structured, commonly used format
- Withdraw consent: At any time, without affecting prior processing
To exercise your rights: You may send a written request to info@kenkatsubenidorm.es or by post to our address (Camí del Planet, 31, 03502 Benidorm, Alicante), stating the right you wish to exercise and attaching a copy of your ID document.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:
- Encryption of data in transit (HTTPS/SSL)
- Restricted access to personal data for authorised staff only
- Regular backups
- Intrusion detection systems
9. Cookies
Our website uses technical cookies required for its operation. For more information, see our Cookie Policy.
10. Changes
We reserve the right to amend this Privacy Policy. Any changes will be communicated via our website. The date of the last update is shown at the beginning of this document.
11. Supervisory Authority
If you believe the processing of your personal data does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
Contact
For any enquiry about this Privacy Policy or the processing of your personal data, you can contact us at:
Email: info@kenkatsubenidorm.es
Phone: +34 623 62 66 81
Address: Camí del Planet, 31, 03502 Benidorm, Alicante/Alacant, Spain
