Legal information

Privacy Policy

1. Data controller

Controller: InfinityPool Málaga S.L.
Tax ID (NIF / CIF): B26627281
Registered office: c/ Lozoya 8, 4D, 29004 Málaga, Spain
General email: info@infinitypool.es
Exercise of data protection rights: legal@infinitypool.es
Phone: +34 601 115 112

2. Data we process

We may process the data you provide through the form, email, phone or WhatsApp: name, phone number, email address, address or location of the pool, type of need, message and any other information you communicate voluntarily.

For job applications, we may also process your professional area of interest, the experience you describe and the CV you attach to the form or send to empleo@infinitypool.es. Please do not include special-category or sensitive data that is not necessary to assess your application.

If you contact us via WhatsApp, InfinityPool Málaga S.L. may keep the conversation in order to handle your request, carry out commercial follow-up or maintain a record of our communications.

3. Purposes

To handle requests for information, technical surveys, quotes and enquiries received through the website.
To contact you by phone, email or WhatsApp to respond to your request.
To send marketing communications by email and WhatsApp when you have expressly agreed to receive them.
To manage administrative, legal, accounting or tax obligations if a service is ultimately contracted.
To manage job applications and recruitment processes and, where specific consent has been given, retain applications for future processes.
To measure use of the website through Google Analytics 4, only if the measurement ID is configured and you accept analytics cookies.

4. Legal basis

Handling enquiries, technical surveys, quotes and job applications is based on taking pre-contractual steps at your request under Article 6(1)(b) GDPR. Marketing communications and retaining applications for future recruitment processes are based on express consent. Processing required for administrative, tax, accounting or legal obligations is based on compliance with those obligations. Non-essential web analytics is based on cookie consent.

5. Data retention

Requests and leads that do not result in a contract: up to 12 months.
Marketing communications: until you withdraw your consent or, as an internal reference, up to 24 months without interaction.
Data linked to clients, accepted quotes, invoicing or a contractual relationship: for the applicable legal periods, including up to 6 years for commercial and accounting records where applicable.
Job applications: for the relevant recruitment process. If you expressly authorise retention for future processes, for up to 12 months from receipt or until you withdraw your consent.

Where necessary, data may remain blocked for the periods required to address potential legal liabilities.

6. Recipients and providers

Personal data is not sold to third parties. Data may be processed by providers necessary for the operation of the website, email, hosting, technical maintenance and communications.

Website hosting, maintenance and technical support are managed by BigPlum Digital, which acts as a technical provider or data processor where it accesses data necessary to provide those services.

The domain name is registered and technically managed through DonDominio, a service provided by Soluciones Corporativas IP, S.L. Data associated with the domain registration is processed in accordance with the contractual and regulatory requirements applicable to that service.

Enquiries and applications are received in the corporate mailbox of InfinityPool Málaga S.L., with an internal copy sent to the historical mailbox Infinitypoolmalaga@gmail.com, managed by the company. Google may therefore process the data in those messages and any attached CVs as the email service provider.

Within InfinityPool Málaga S.L., access to enquiries and applications is restricted to expressly authorised management personnel who need it to handle the request or recruitment process. Technical providers may access the data only where strictly necessary to provide their services, subject to confidentiality duties and the company's instructions.

If you use WhatsApp, Instagram, resources hosted by Google or Unsplash, or accept Google Analytics, external providers such as Meta Platforms, Google or Unsplash may be involved under their own terms and applicable safeguards.

7. International transfers

Some technology providers may process data outside the European Economic Area. Where an international transfer takes place, the applicable safeguards recognised by the GDPR will be used, such as a current adequacy decision, the EU-U.S. Data Privacy Framework for participating organisations or standard contractual clauses approved by the European Commission. You can request information about the applicable safeguards by writing to legal@infinitypool.es.

8. Marketing communications

InfinityPool Málaga S.L. will only send marketing communications by email or WhatsApp if you tick the specific consent box. You can withdraw that consent at any time by writing to legal@infinitypool.es or by replying to the communication itself where possible.

9. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to legal@infinitypool.es, stating the right you wish to exercise and providing sufficient information to identify your request.

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out beforehand. You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you consider that the processing does not comply with the applicable regulations.

10. Required data and automated decisions

Fields marked as required are necessary to handle your request or job application. If they are not provided, we will not be able to process it correctly. InfinityPool Málaga S.L. does not make decisions based solely on automated processing or create profiles that produce legal or similarly significant effects on users or candidates. It also does not use artificial intelligence systems to analyse, classify or make decisions about enquiries, client data or job applications.

11. Security

InfinityPool Málaga S.L. applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or misuse, taking into account the type of data processed and the associated risks.

12. Job candidates

You can submit your application through the Careers form and attach your CV there, or email it directly to empleo@infinitypool.es. We process the name, phone number, email address, area of interest, experience, message and CV you provide.

We use this data to manage the relevant recruitment process on the basis of pre-contractual steps requested by the candidate. If you tick the specific optional box, we may retain your application and consider you for future processes on the basis of your consent.

We retain your data for the recruitment process and, if you have authorised retention for future processes, for up to 12 months from receipt or until you withdraw your consent by writing to legal@infinitypool.es. You can exercise the rights described in section 9 of this policy.

13. Updates

Last updated: 20 August 2026.