Privacy policy

Mamboria, S.L., tax ID B21930169, Ctra. N-340, 9994, 43883 Roda de Berà (Tarragona), rodaventurapark@gmail.com, 621 12 87 71.

Identification and contact data (name, surname, email and, where applicable, phone) and purchase data, for the following purposes: managing the booking and issuing tickets, sending the ticket with a QR code and necessary communications, handling queries, and, if you consent, sending you information about the park.

IP address and technical browsing data, for security, fraud prevention and aggregated usage statistics.

Payment data is processed directly by the payment gateway (Redsys) and the bank; we do not store card numbers.

Performance of the purchase contract (Art. 6.1.b GDPR); compliance with legal obligations; our legitimate interest in security, fraud prevention and improving the service through aggregated statistics (Art. 6.1.f GDPR); and, for marketing, your consent (Art. 6.1.a GDPR), which you may withdraw at any time.

We keep the data for the duration of the relationship and thereafter for the applicable legal periods.

Providers acting as data processors: the payment gateway (Redsys) and the acquiring bank, the platform's technology and hosting provider, and the email service. Some providers may be outside the EEA, in which case transfers rely on appropriate safeguards (Standard Contractual Clauses or adequacy frameworks). We do not share your data except where legally required.

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to rodaventurapark@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

We apply appropriate technical and organisational measures to protect your data (encryption in transit, access control and backups).