Privacy policy

Data controller

[Awaiting details], with NIF [Awaiting details] and address at [Awaiting details]. For any question about your data: [Awaiting details].

What data we process and why

Request form. Your name, email address, phone number if you give one, the boat details you provide (situation, type, length, location) and your message. They are used only to assess your case and reply to you. Alongside the request we store the page you sent it from and a reference code, so that it can be linked to the visit in the statistics.

Visit statistics. We measure which pages are visited, how long they are read and how far down people scroll, which website visitors arrive from, the type of device, operating system and browser, the approximate country, region and city, and the network operator (for example, a telecoms company or a cloud server), which helps tell visits by people apart from those by automated programs. Cloudflare infers the location and the operator from the connection. The website does not store your IP address: it only uses it in the moment, without storing it, to limit the number of submissions per minute. Nothing is stored on your device either: the visit is identified by a code that exists only in the tab’s memory and disappears when you close it.

If you do not want your visit to be measured, turn on the Global Privacy Control or Do Not Track signal in your browser: with either of them, the website sends no statistics data at all.

Legal basis

Requests: your consent when you send the form and the taking of pre-contractual steps at your request (Article 6(1)(a) and 6(1)(b) of the General Data Protection Regulation).

Statistics: the legitimate interest in knowing how the website is used in order to improve it (Article 6(1)(f) GDPR). They are not used for profiling or advertising, and they are not combined with third-party data.

How long your data is kept

Requests and statistics are deleted automatically after one year. Automatic database backups expire on their own within 30 days at most. The notification of each request that reaches the agency’s mailbox is kept for as long as needed to deal with it. If a request leads to an engagement, the necessary data is transferred to the case file and kept for as long as the legal obligations of the service require.

Who else has access

Cloudflare, Inc. hosts the website and the database and delivers the email notifications, as a data processor. Cloudflare participates in the EU-U.S. Data Privacy Framework and offers the European Commission’s standard contractual clauses for international transfers.

Zelerix, the studio that developed the website and maintains it, stores the requests and statistics in its portal so that the agency can consult them, as a data processor.

No data is disclosed to anyone else, unless required by law.

Your rights

You can request access to, rectification, erasure, restriction of processing and portability of your data, object to its processing, and withdraw your consent at any time, by writing to [Awaiting details]. If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency, the Agencia Española de Protección de Datos (aepd.es (opens in a new tab)).