Privacy Policy

Last updated: 27 June 2026

We take the protection of your personal data seriously. This Privacy Policy explains how we collect, use and protect your personal data when you visit our website, contact us, request information or book one of our private boat tours.

This Privacy Policy is based on the requirements of the EU General Data Protection Regulation, especially the transparency obligations under Article 13 GDPR, which require website operators to inform users about the controller, purposes of processing, legal basis, retention periods, recipients and user rights.

1. Data Controller

The controller responsible for the processing of personal data on this website is:

Brisa Balear Charter, Bartolome “Tolo” Ripoll
Adress: Ciudad de la Plata núm 1 bloque B 5º C Palma de Mallorca Spain 07006
Email: hola@brisa-balear-charter.com
Phone: +34683160096
VAT / Tax ID: 43093915B

Hereinafter referred to as “we”, “us” or “our”.

2. Personal Data We Collect

We may process the following categories of personal data:

• Name
• Email address
• Phone number
• Tour request or booking details
• Preferred date and time
• Number of guests
• Message content submitted through the contact form
• Communication history
• Technical data such as IP address, browser type, device information and access time

We only collect personal data that is necessary to answer your request, process your booking, operate the website securely or comply with legal obligations.

3. Contact Form and Enquiries

When you use our contact form, send us an email or contact us by phone or messaging service, we process the information you provide in order to respond to your enquiry.

This may include your name, contact details, preferred tour, requested date, group size and any additional information you provide voluntarily.

The legal basis for processing your data is:

• Article 6(1)(b) GDPR, if your enquiry relates to a booking, offer or pre-contractual communication.
• Article 6(1)(f) GDPR, our legitimate interest in responding to customer enquiries and managing communication.
• Article 6(1)(a) GDPR, your consent, where consent is specifically requested, for example for optional marketing communication.

Consent under the GDPR must be freely given, specific, informed and unambiguous.

4. Bookings and Tour Requests

If you book or request a private boat tour, we process your personal data to organise and provide the requested service.

This may include:

• Confirming availability
• Preparing the booking
• Communicating tour details
• Managing changes or cancellations
• Providing customer support
• Fulfilling accounting, tax or legal obligations

The legal basis is Article 6(1)(b) GDPR, as the processing is necessary for the performance of a contract or for steps prior to entering into a contract.

Where we are legally required to retain certain information, the legal basis is Article 6(1)(c) GDPR.

5. Communication via Email, Phone or Messaging Services

We may contact you by email, phone or messaging service in relation to your enquiry or booking.

If you contact us through third-party messaging services such as WhatsApp, the respective provider may process personal data under its own privacy terms. We recommend that you review the privacy information of the relevant provider.

We do not use your contact details for marketing unless you have given separate consent or unless legally permitted.

6. Website Hosting and Technical Data

When you visit our website, technical data may be processed automatically to display the website correctly, ensure security and maintain website functionality.

This data may include:

• IP address
• Date and time of access
• Browser type and version
• Device information
• Operating system
• Referrer URL
• Pages visited

The legal basis is Article 6(1)(f) GDPR, our legitimate interest in providing a secure, stable and functional website.

7. Cookies and Similar Technologies

Our website may use cookies or similar technologies.

Strictly necessary cookies may be used to provide core website functions. Analytics, marketing or third-party cookies are only used where legally permitted and, where required, after your consent.

In Spain, the Spanish Data Protection Authority, AEPD, provides guidance and tools for GDPR compliance and cookie use.

A separate Cookie Policy or cookie banner should be used if the website uses analytics, tracking pixels, embedded maps, booking widgets, social media plugins or advertising tools.

8. Recipients of Personal Data

We may share personal data with service providers where necessary for operating the website and providing our services.

Possible recipients include:

• Website hosting providers
• Email service providers
• Booking or reservation tools
• Payment providers, if applicable
• IT service providers
• Accounting or legal advisors
• Authorities, where legally required

All service providers are required to process personal data only in accordance with applicable data protection laws.

We do not sell personal data.

9. International Data Transfers

Some service providers may process personal data outside the European Economic Area.

Where this occurs, we ensure that appropriate safeguards are in place, such as EU Standard Contractual Clauses or other legally recognised transfer mechanisms.

This may be relevant if we use services such as Google, Meta, WhatsApp, online booking systems, analytics tools or cloud-based software providers.

10. Data Retention

We store personal data only for as long as necessary for the purposes for which it was collected.

General retention periods:

• Contact form enquiries: normally up to 12 months, unless further communication or legal reasons require longer storage.
• Booking-related data: for the duration of the booking relationship and thereafter as required for legal, tax, accounting or liability purposes.
• Technical website logs: only for a limited period necessary for security and technical operation.
• Marketing consent data: until consent is withdrawn or the purpose no longer applies.

After the relevant retention period expires, personal data will be deleted or anonymised unless legal retention obligations apply.

11. Your Rights

Under the GDPR, you have rights regarding your personal data. These include the right of access, rectification, erasure, restriction of processing, data portability, objection and the right not to be subject to automated decision-making in certain cases.

You may also withdraw consent at any time where processing is based on consent.

To exercise your rights, please contact us at:

hola@brisa-balear-charter.com

You also have the right to lodge a complaint with a supervisory authority. In Spain, the competent authority is the Agencia Española de Protección de Datos, AEPD.

12. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no online transmission or storage system can be guaranteed to be completely secure. We therefore recommend that you do not submit highly sensitive personal data through the contact form.

13. No Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects concerning you.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or business changes.

The latest version will always be available on this website.