Privacy policy

This is a courtesy translation. In case of any discrepancy, the Spanish version prevails.

Basic information on data protection

• Controller: José Luis Álvarez Aguilera, Calle la Calera, 7, 18014 Granada
• Purpose: to manage applications to join the club, the member account and profile, messaging between members, plans organised within the club, to handle enquiries and to ensure the security of the service
• Legal basis: consent when applying for access, performance of the contract once you are a member, compliance with legal obligations and legitimate interest
• Recipients: technology providers that provide services on behalf of the controller. Data is not disclosed to third parties for their own purposes
• Rights: access, rectification, erasure, objection, restriction, portability and the right to lodge a complaint with the supervisory authority
• Additional information: as set out below

Detailed information

Data controller

• Owner: José Luis Álvarez Aguilera
• Tax ID: 75015613D
• Registered address: Calle la Calera, 7, 18014 Granada
• Email for data protection matters: granadaplanes@gmail.com

Data processed

• Application data: full name, date of birth, city, occupation, Instagram or LinkedIn if provided, who invited you if applicable, why you want to join, how much time you spend in Marbella, a photograph and a WhatsApp number
• Account data, once the application is approved: email address and encrypted password
• Member profile data: name, date of birth (only the calculated age is shown to other members, never the exact date), cities where you live, current area in Marbella, country, occupation, industry, a short description, what you would like to share within the club, and interests
• Messages: the content of private conversations between members
• Plans: the plans you create or join within the club
• Record of consents: acceptance of the terms and of this policy, and confirmation of legal age, with their date

No special categories of data are requested or processed. No identity documents are requested: confirmation that you are over 18 is based on the date of birth you yourself provide in your application.

Your WhatsApp number

It is requested in the application so that the club team can write to you directly if anything comes up regarding your application or your membership — this is a small private club, not a website with thousands of people. This number is not shown to other members or published on your profile; it is used only by the club team.

Who sees your profile

Your profile (photo, name, age, city, what you would like to share and your interests) is seen by other members with approved access, within the sections of the club. Your exact date of birth, your email address and your WhatsApp number are never shown to other members.

Purposes and legal bases

• Reviewing and deciding on your application: consent given when submitting it
• Creating the account and authenticating you once the application is approved: performance of the contract
• Showing your profile to other members and allowing you to use the club’s messaging and plans: performance of the contract
• Contacting you directly by WhatsApp or email when necessary: the club’s legitimate interest, given its private and small nature
• Handling enquiries and requests: performance of the contract or legitimate interest, as the case may be
• Keeping a record of the consents given: compliance with legal obligations
• Preventing fraud, abuse and unauthorised access: legitimate interest
• Reviewing reports that other members send about messages or profiles: legitimate interest in ensuring compliance with the Community rules

CLUB171 is a free club: no payment or billing data is processed.

Recipients

Hosting, database, authentication and email-delivery providers provide services on behalf of the controller as data processors. The up-to-date list of providers and the region in which they operate is kept documented by the controller and can be requested by writing to granadaplanes@gmail.com.

Data is not disclosed to any other recipients unless required by law.

International transfers

Where a provider processes data outside the European Economic Area, the transfer is covered by the safeguards provided for in data protection law. Specific information about each provider can be requested at the address indicated.

Retention periods

• Application data: while it is being reviewed and, once decided, for as long as necessary to manage club membership or to justify the decision taken
• Account and member profile data: while the account remains active
• Messages and plans: while the account remains active
• Record of consents: for as long as liability may arise
• Security and administrative activity logs: for as long as necessary for their purpose

Once you ask to leave the club, the data is deleted or blocked, keeping only what is legally required.

Rights

You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consents given where the processing is based on them, without the withdrawal affecting the lawfulness of prior processing.

You can write to granadaplanes@gmail.com to exercise any of these rights, including a request to leave the club.

You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), calle Jorge Juan 6, 28001 Madrid, electronic office at www.aepd.es.

Security

Photographs are stored in a private storage bucket. Access to data is restricted through row-level policies and column permissions. Passwords are stored encrypted.

Version of this policy: 2026-09-25