Privacy Policy.

The data controller responsible for personal data described in this policy is:

Important — our role as an intermediary

Ronda connects players with independent coaches, clubs, courts, and service providers. When we introduce you to a coach, club, or other provider and you share information with them (or they with you), that provider acts as an independent data controller for the data they receive. Their processing is governed by their own privacy practices, and Ronda is not responsible for it. This policy covers only processing carried out by Ronda.

2.1 Website visitors

• Usage and technical data: IP address, pages visited, referral source, device/browser type, approximate location, session data, and analytics data collected via cookies or similar technologies (see Section 9).
• Enquiry data: information you submit through forms or search/filter tools — name, email, phone, sport, skill level, dates, budget, and the content of your request.

2.2 WhatsApp Community members

• Your phone number, profile name/photo, and messages posted in our groups (Announcements, Tennis Mallorca, Padel Mallorca, Pickleball Mallorca, Juniors), which are visible to other members and admins as determined by WhatsApp’s design.
• The Juniors group is intended to be operated by parents/guardians on behalf of minors. Any information about a minor shared in that group is provided by, and is the responsibility of, the parent or guardian.

2.3 Coaches, clubs, and partners

• Contact details, professional background, certifications, availability, pricing, affiliations, and content provided for directory listings, interviews (including YouTube video content), and promotional material.

2.4 Concierge and booking clients

• Name, contact details, travel dates, accommodation, preferences, skill level, special requirements, and payment-related information necessary to arrange services. We do not store full card details; payments are processed by third-party payment providers under their own terms.

2.5 Google Business Profile, reviews, and social media

• Interactions with our Google Business Profile, Facebook, Instagram, LinkedIn, or YouTube channels are processed by those platforms under their own privacy policies. We receive and may respond to messages, comments, and reviews directed at us.

2.6 Events and photography

• If you attend a Ronda event (e.g. pop-up matches, meetups), we may take photographs and video for community and promotional purposes on the basis of our legitimate interest, with clear notice at the event. You may object at the event or afterwards, and we will make reasonable efforts to avoid featuring you or to remove identifiable images on request.

2.7 Data you are responsible for

You are responsible for ensuring the personal data you provide to us is accurate, current, and lawfully shareable — including any data you share about third parties (e.g. a playing partner, family member, or your child). By providing third-party data, you confirm you are authorized to do so.

Legitimate interests balancing

Where we rely on legitimate interest, we have assessed that our interests (operating and growing a community-driven racket sports platform, keeping the community safe, and communicating with our audience) are not overridden by your rights, particularly given the nature of the data involved and your reasonable expectations. You may object at any time (Section 10).

Aggregated and anonymized data

We may create and use aggregated or fully anonymized data (which can no longer identify you) for any lawful business purpose, without restriction, including statistics, market analysis, and content.

We do not carry out automated decision-making producing legal or similarly significant effects.

• Your phone number and profile information are visible to other group members and admins by WhatsApp’s design; joining a group constitutes your acknowledgment of this visibility.
• Group content is governed by our house rules published in each group description. We may remove content or members who breach the rules, on the basis of our legitimate interest in a safe, functional community.
• WhatsApp itself is operated by Meta and processes your data under its own privacy policy and terms; Ronda does not control and is not responsible for WhatsApp’s own processing.
• You may leave any group at any time within WhatsApp, or ask us to remove you.
• We do not maintain a separate permanent archive of group message content outside WhatsApp.

• Independent providers you ask to be connected with (coaches, clubs, courts, equipment providers, wellness providers). Once shared at your request, they process your data as independent controllers (see Section 1).
• Processors supporting our operations, under our instructions and appropriate contractual safeguards: hosting and infrastructure, database services, design and content tools, communication platforms (WhatsApp/Meta, email providers), analytics providers (Section 9), and — where applicable — payment processors.
• Professional advisors (legal, accounting, insurance) under confidentiality obligations.
• In a business transfer: if Ronda is involved in a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the successor entity as part of that transaction, subject to this policy or equivalent protections.
• Authorities and courts, where required by law or necessary to protect our rights, our community, or others.

We do not sell personal data.

Some providers process data outside the European Economic Area (e.g. Meta/WhatsApp, hosting providers). Where this occurs, transfers are protected by safeguards recognized under GDPR Chapter V, such as European Commission adequacy decisions or Standard Contractual Clauses, as implemented by the relevant provider. You may contact us for more information on the safeguards applicable to a specific transfer.

Our services are operated from Spain and primarily directed at players, residents, and visitors connected to Mallorca.

• United Kingdom: If UK GDPR applies to you, the rights and safeguards described in this policy apply equivalently; the UK supervisory authority is the ICO (ico.org.uk).
• Switzerland: Equivalent rights apply under the Swiss FADP; the supervisory authority is the FDPIC.
• United States and other countries: We provide the protections in this policy to all users regardless of location. We do not “sell” or “share” personal data as those terms are defined under US state privacy laws (e.g. the California CCPA/CPRA), and we honor reasonable access and deletion requests from any user.

By using our services from outside the EU, you understand your data will be processed in Spain and by our providers as described above.

We retain personal data no longer than necessary, and specifically:

• Enquiries: while actively assisting you and for a reasonable follow-up period, then deleted or anonymized.
• Client and transaction records: for the duration of the relationship plus the periods required by Spanish commercial, tax, and accounting law (generally up to 6 years under the Commercial Code; up to 4 years for tax purposes).
• Data relevant to potential legal claims: until the expiry of applicable limitation periods, where we reasonably consider it may be needed to establish, exercise, or defend legal claims.
• Directory and published content: while the listing or content remains live, subject to consent withdrawal.
• Marketing lists: until you opt out or withdraw consent; we may keep a minimal suppression record (e.g. your email) to ensure we respect your opt-out.
• Blocked/removed members: we may retain minimal records of removals from the community where necessary to enforce our rules and protect members.

The Website uses, or may use:

• Strictly necessary cookies (site functionality, security, remembering search/filter preferences) — no consent required.
• Analytics cookies — set only with your consent via our cookie banner.
• Marketing/social cookies — set only with your consent, if and when enabled.

You can withdraw or change your cookie choices at any time via your browser settings.

Under GDPR you may, free of charge, request: access, rectification, erasure, restriction, objection (including to direct marketing, which we will always honor), portability, and withdrawal of consent (without affecting prior processing). You may also complain to the Agencia Española de Protección de Datos (www.aepd.es) or your local supervisory authority.

To exercise rights, contact us at privacy@rondamallorca.com. Please note:

• We may require reasonable proof of identity before acting on a request, to protect your data from unauthorized access.
• We will respond within one month, extendable by two further months for complex or numerous requests, in which case we will inform you.
• Where requests are manifestly unfounded or excessive, particularly due to repetitive character, we may charge a reasonable administrative fee or refuse the request, as GDPR permits.
• Erasure and objection rights are subject to legal exceptions — for example, we may retain data needed to comply with legal obligations or to establish, exercise, or defend legal claims.

Our Website and services are directed at adults. The Juniors WhatsApp group exists for parents and guardians to coordinate junior play on their child’s behalf; parents/guardians are responsible for information they share about their child. Under Spanish law (LOPDGDD Art. 7), a minor’s own consent to data processing is valid only from age 14; below that age, parental consent is required. We do not knowingly collect data directly from children under 14. If you believe a child has provided us data without appropriate consent, contact us and we will delete it.

We apply technical and organizational measures appropriate to the risk, including restricted access and reputable, security-conscious providers. No transmission or storage method is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach likely to result in a high risk to your rights, we will notify you and the AEPD as required by GDPR Arts. 33–34.

The Website and our communications may contain links to third-party sites, platforms, and services (e.g. WhatsApp, YouTube, club websites, booking tools). We are not responsible for the privacy practices or content of third parties. Review their policies before providing them data.

• This policy may be published in English, Spanish, and German. In case of discrepancy, the English version prevails.
• This policy and any disputes relating to it are governed by Spanish law, and — without prejudice to mandatory consumer protections in your country of residence — subject to the courts of Palma de Mallorca, Spain.
• We may update this policy as our services evolve. The “Last updated” date reflects the current version; material changes will be flagged on the Website or in the WhatsApp Community. Continued use after an update constitutes acknowledgment of the revised policy.

Questions about this policy or your data? Reach us any time.