Privacy Policy

1. Data Controller

Desert Adventure S.L.
VAT: B04923033
Address: Calle Juan Carlos I, No. 48 — 04740 Roquetas de Mar (Almería, Spain)
Email: info@desert340.com
Phone: +34 614 16 98 00

2. Data We Collect

We collect data that users voluntarily provide through our website forms:

• Registration form: name, surname, ID/passport, date of birth, email, phone, vehicle details and, if applicable, blood type and size.
• Contact and dossier form: name, email, phone and message.
• Newsletter: email address only.

3. Purpose and Legal Basis for Processing

Purpose	Legal basis
Event registration management	Performance of contract (Art. 6.1.b GDPR)
Handling enquiries and contact	Legitimate interest / consent (Art. 6.1.a and 6.1.f GDPR)
Sending newsletter and commercial communications	Explicit consent (Art. 6.1.a GDPR)
Compliance with legal obligations (tax, insurance)	Legal obligation (Art. 6.1.c GDPR)
Health data in participant medical forms	Explicit consent (Art. 9.2.a GDPR)

4. Retention Period

Data will be kept for as long as necessary to fulfil the purpose for which it was collected and, in any case, for the legally established periods. As a general rule, data will be deleted after 5 years from the last interaction, unless a longer legal retention obligation applies (e.g. tax data: 6 years; health data: as per applicable health regulations).

5. Data Recipients

Data may be shared with the following recipients:

• Banking institutions for payment processing.
• Tax and accounting advisors for invoicing and tax compliance.
• Insurance companies for participants' civil liability policies.
• Event medical services, with access limited to the medical form and only in emergencies.
• Public authorities when required by applicable law.

No international transfers of data outside the European Economic Area are made.

6. Your Rights

You may exercise the following rights at any time:

• Access: to know what data we process about you.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request deletion of your data.
• Objection: to object to processing in certain circumstances.
• Restriction: to request restriction of processing.
• Portability: to receive your data in a structured format.
• Withdrawal of consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, write to info@desert340.com or to the postal address above, enclosing a copy of your ID document.

If you believe that processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. Security

Desert Adventure S.L. has implemented the necessary technical and organisational measures to ensure the security, integrity and confidentiality of personal data, preventing its loss, alteration or unauthorised access by third parties.

8. WhatsApp Communications

If you have provided your phone number and given your express consent, we may use WhatsApp as a channel to send you information related to our events and services (notices, updates, confirmations and commercial communications).

Data processed: name, phone number and, where applicable, email.
Legal basis: your express consent (Art. 6.1.a GDPR), which you may withdraw at any time without affecting the lawfulness of prior processing.
Recipient: WhatsApp (Meta Platforms Ireland Ltd.) acts as the messaging channel provider. If communication takes place within a WhatsApp group, your phone number, name and profile picture may be visible to other group members.
Opt-out: you may unsubscribe at any time by replying "STOP" on WhatsApp or writing to info@desert340.com.

Last updated: June 2026 · Applicable regulation: GDPR (EU) 2016/679 · LOPDGDD 3/2018