Privacy Policy

This policy explains how we handle your personal data when you visit www.lenam.net, ask us for a quote or contact us through any channel, and what rights you have. It complies with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD).

1. Data controller

  • Controller: LENAM VELA LIGERA, S.L. (“Lenam”)
  • Tax ID (NIF): B60973468
  • Registered office: Passatge del Pi, s/n, 08339 Vilassar de Dalt (Barcelona), Spain
  • Workshop and customer service: Carrer de Sant Celoni, 69, 08450 Llinars del Vallès (Barcelona), Spain
  • Email: info@lenam.net
  • Phone and WhatsApp: +34 678 35 12 35

For any question about your personal data, email us at info@lenam.net.

2. What data we process

  • Quote and contact forms: first name and surname, email, phone number, region or country, the reason for your enquiry, the model you are interested in and your message.
  • Spare parts form: name, phone number, email, delivery address, boat and part references.
  • Technical data about the submission: the page and button you sent the form from, the language, the date and time and, only to stop spam, a hash (a coded summary) of your IP address.
  • Email, phone, WhatsApp or Instagram: the information you give us when you write to us or call us, plus your phone number or username.
  • Customers: the data needed for the order or service, delivery, invoicing and warranty.
  • Browsing: statistics on how the website is used, only if you accept analytics cookies (details in our cookies policy).

Fields marked with an asterisk, including the phone number, are required: without them we cannot deal with your request. We do not need special categories of data, such as health data, so please do not include them in your messages.

You normally give us the data yourself. If you write to us on behalf of another person or an organisation (for example, a club, a school or a public body) and give us other people’s data, please make sure you are entitled to do so and that they know about this policy.

3. Why we use your data and on what legal basis

Handling your request for a quote, spare parts or information

We use your data to reply to you by email, phone or WhatsApp, to prepare your quote and to follow up on your enquiry, whether you contact us through the website or any other channel.

Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). If your enquiry is not about a possible purchase or service, our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR).

Managing our relationship with customers

If you buy a boat, spare parts or accessories from us, we use your data to manage the order, delivery, invoicing, payments, warranty and after-sales support, and to meet our accounting and tax obligations.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and compliance with our legal, commercial and tax obligations (Art. 6(1)(c) GDPR).

In both cases, if you act on behalf of a club, a school, a company or a public body, we process your business contact details on the basis of our legitimate interest in maintaining our relationship with that organisation (Art. 6(1)(f) GDPR and Art. 19 LOPDGDD).

Website security and spam prevention

To prevent bulk submissions and other misuse of the forms, we keep a hash (a coded summary) of the IP address from which each form is sent, never the address itself, together with the times of the submissions, for a maximum of 24 hours, and we use it only to limit repeated submissions. In addition, our hosting provider’s server logs technical connection data, such as IP addresses, to protect the service.

Legal basis: our legitimate interest in protecting the website and our email from misuse (Art. 6(1)(f) and Recital 49 GDPR). You can object to this processing on grounds relating to your particular situation, as explained in section 7.

Website statistics (Google Analytics 4)

Only if you accept analytics cookies, we use Google Analytics 4 to find out, in aggregate, how many people visit the website, which pages they view, what type of device they use and their approximate location, and how many click the quote, call or WhatsApp buttons or send a form. We do not send Google your name, email, phone number or the content of the forms, and we do not use this data for advertising. According to Google, Google Analytics 4 does not log or store IP addresses.

Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22(2) LSSI). You can withdraw it at any time using the “Cookie settings” link in the footer.

Videos and map (YouTube and Google Maps)

YouTube videos and the Google Maps map only load if you accept “Videos and maps” in the cookie notice or click the video or map button. At that point your browser connects to Google’s servers, which receive your IP address and technical data about your browser and use their own cookies. Google Ireland Limited decides how it handles that data, as described in its privacy policy.

Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22(2) LSSI), which you give by accepting that category or clicking the button. You can withdraw it via “Cookie settings”.

Contact via WhatsApp or Instagram

If you choose to message us on WhatsApp, for example with the button on the website, or on Instagram, we use your phone number or username, your profile name and your messages to reply to you. These services are provided by WhatsApp Ireland Limited and Meta Platforms Ireland Limited (Instagram), which process your data under their own policies; see the WhatsApp privacy policy.

Legal basis: you start the conversation. If you ask us for a quote or for information about a purchase or a service, we take steps at your request before entering into a contract (Art. 6(1)(b) GDPR); for other enquiries, our legitimate interest in replying to you (Art. 6(1)(f) GDPR).

Photographs on the website

Some photographs on the website show people sailing our boats, including children. We publish them with their permission or, for children, with the permission of their parents or guardians. If you appear in a photo, or your child does, and you would like us to remove it, email us at info@lenam.net and we will do so.

Legal basis: the consent of the people shown or of their legal representatives (Art. 6(1)(a) GDPR).

We do not use your data to send you advertising or newsletters, we do not build marketing profiles with it and we do not sell it.

4. How long we keep your data

  • Requests that do not lead to a purchase or booking, whether received by form, email, phone, WhatsApp or Instagram: 2 years from our last communication. After that we delete them.
  • Customers: for as long as the business relationship lasts, including the warranty period. After that, we keep the data blocked only for the legal retention periods: 6 years for commercial records (Art. 30 of the Spanish Commercial Code) and 4 years for tax-related records (Spanish General Taxation Act 58/2003). Once those periods end, we delete it.
  • IP address hash: a maximum of 24 hours; it is deleted automatically.
  • Server technical logs: the limited period set by our hosting provider for the security of the service.
  • Statistics: analytics cookies last 2 years from your last visit, and the data is kept in Google Analytics for a maximum of 14 months.
  • Your cookie choice: 12 months.
  • Photographs: for as long as they are published or until you withdraw your permission.

5. Who we share your data with

We do not share your data with third parties unless required by law, for example with the Spanish Tax Agency, the courts or other authorities that request it in accordance with the law.

Service providers that process data on our behalf (data processors) do have access to it, to the extent necessary, under a contract that requires them to protect it and to use it only on our instructions:

  • Hostinger International Ltd. (Cyprus, EU): website hosting and sending of the forms by email.
  • Google Cloud EMEA Limited (Ireland, EU), through Google Workspace: the email service where we receive your forms and messages.
  • Google Ireland Limited (Ireland, EU): Google Analytics 4 statistics, only if you accept analytics cookies.

If you are a customer and your order is delivered by a carrier, we give the carrier the details needed for delivery (name, address and phone number).

When you load a video or the map, or message us on WhatsApp or Instagram, Google Ireland Limited, WhatsApp Ireland Limited or Meta Platforms Ireland Limited process your data as independent controllers, under their own policies.

6. International transfers

Some of these providers, or companies in their groups, may process data outside the European Economic Area, particularly in the United States. In those cases, the transfer is based on:

  • the European Commission’s adequacy decision on the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795, Art. 45 GDPR) for companies certified under it, such as Google LLC and Meta Platforms, Inc.; you can check this on the official list of participating companies;
  • otherwise, standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR) or other adequacy decisions.

You can ask us for more information about these safeguards by emailing info@lenam.net.

7. Your rights

You can exercise the following rights at any time, free of charge:

  • Access: find out whether we process your data and get a copy of it.
  • Rectification: have inaccurate or incomplete data corrected.
  • Erasure: ask us to delete your data, for example when it is no longer needed.
  • Objection: object, on grounds relating to your particular situation, to processing based on our legitimate interest.
  • Restriction: ask us to suspend the use of your data while we check its accuracy or consider your objection, or to keep it even though we no longer need it, if you need it to establish or defend legal claims.
  • Portability: receive the data you gave us in a structured, commonly used format, or have us send it to another controller, where we process it on the basis of your consent or a contract and by automated means.
  • Withdraw your consent at any time, without affecting the lawfulness of the processing carried out before. For cookies, use the “Cookie settings” link in the footer.

To exercise them, email us at info@lenam.net stating which right you wish to exercise. We will only ask you to prove your identity if we have reasonable doubts about it. You can also act through a representative. We will reply within one month; this may be extended by two further months if the request is complex, in which case we will let you know within the first month.

If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or, if you live or work in another European Union country, with its data protection authority.

8. Children

The website is not aimed at children under 14. If you are under 14, please ask your parent or guardian to make the request and to decide whether to accept or reject cookies. If we find that we have received data from a child under 14 without the permission of their parents or guardians, we will delete it.

9. Automated decision-making

We do not make decisions based solely on automated processing of your data, including profiling, that produce legal effects concerning you or similarly significantly affect you.

10. Security

We apply technical and organisational measures appropriate to the risk to protect your data, such as an encrypted (HTTPS) connection across the whole website, and we only work with providers that offer sufficient guarantees.

11. Changes to this policy

We may update this policy if the website, our providers or the law change. You will always find the current version, with its date, on this page.

Version: 28 September 2026.