Privacy Policy – Mallorca Yachts Hire

The controller of your personal data is Mallorca Yachts Hire, the brand under which this website is operated. We have not published a separate company registration number, VAT number or street address, and none should be assumed.

For any question about this policy, your data, or an enquiry you have sent us, write to [email protected].

• Enquiry form: name, email, phone number (optional), chosen yacht (optional), charter start and end dates, number of guests, your message, plus the page URL and referrer from which you submitted the form.
• Direct contact: anything you tell us by email, by phone, or in a WhatsApp conversation that you start with us.
• WhatsApp button activity: before opening WhatsApp, the site logs the page URL, referrer, language and the prefilled message text in our booking system, so we can match the conversation to the right enquiry.
• Server logs: IP address, date and time, requested page and browser, generated automatically by the hosting infrastructure.
• Browser storage: a local record that you dismissed the cookie notice; a session record of a yacht you selected, used only to prefill the enquiry form and deleted when you send it or close the tab; and anonymous visitor and session identifiers used for our own visit measurement, kept for 30 days.
• Visit measurement data: pages viewed, time on page, the referring site, campaign parameters in the link (UTM or ad click id), device type, browser, operating system, screen size, browser language and the country derived from your IP address; we do not store the IP address itself. If you then send an enquiry or tap a phone or WhatsApp link, that action is linked to the same visit so we know which channel brought it.

• Answering an enquiry and preparing a quote: based on pre-contractual steps taken at your request.
• Managing a confirmed charter, including communicating with you and with the crew: based on performance of the charter contract.
• Keeping booking and accounting records: based on our legal obligation to retain tax and accounting documentation.
• Supplying guest names to the captain, skipper or driver who will carry out the charter, and, where the charter requires it, to port authorities for the crew list: based on the legal obligation that maritime and port regulations impose on charter operations.
• Keeping server logs and running our own visit-measurement script: based on our legitimate interest in keeping the website secure and understanding how it is used, which does not override your rights given the limited, non-identifying nature of this data.

• Our own team, who read and respond to enquiries through an internal messaging tool.
• The captain, skipper or driver assigned to a confirmed charter, who receives guest names, headcount and dates needed to prepare and run the trip, and, where required, the crew list for the port authorities.
• Our hosting provider, which stores the static website and the booking system on our behalf.
• Google, which serves the web fonts used on the site and receives the visitor's IP address for that purpose.
• jsDelivr, the content delivery network that loads the phone-number validation library used in the enquiry form.
• WhatsApp (Meta), if you choose to message us there; that conversation is governed by WhatsApp's own privacy policy, not this one.

We do not sell personal data to anyone, and none of the above is used to make automated decisions about you.

Google and jsDelivr may process the limited data described above (such as your IP address, when loading fonts or scripts) outside the European Economic Area, including in the United States. These providers rely on safeguards recognised under the GDPR, such as standard contractual clauses.

If you contact us through WhatsApp, Meta may process your messages outside the European Economic Area under its own privacy policy, which governs that part of the conversation.

• Enquiries that do not result in a booking are deleted after 24 months.
• Booking records are kept for as long as Spanish tax and accounting law requires.
• Server logs are kept for a short period for security purposes only.
• The local-storage identifier used for visit measurement expires 30 days after your last visit and can be cleared from your browser at any time.
• The session-storage record of a selected yacht is deleted as soon as you send the form or close the tab.

We limit access to enquiry and booking data to the people who need it to answer you or run your charter, and we keep server logs only for the short period needed to detect and respond to security issues. The website itself is a static site, which reduces the points at which personal data could be exposed.

You may ask us to:

• give you access to the personal data we hold about you;
• correct inaccurate data;
• erase data we no longer need;
• restrict or object to certain processing;
• receive your data in a portable format.

We do not send marketing emails unless you ask us to, and we do not use your data for automated decision-making. To exercise any of these rights, write to [email protected]; we may ask for information to confirm your identity and will respond within one month.

If you believe we have not handled your data correctly, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

Our charters and this website are intended for adults making travel arrangements; we do not knowingly collect personal data from children. If we become aware that a minor has sent us data without a parent or guardian's involvement, we will delete it.

We may update this policy as our services or obligations evolve. Any revised version will be published on this page with its date of effect.