Privacy Policy

The controller of the personal data processed through this website is Mallorca Yachts for Rent, the brand under which loscaballosmodelcars.es operates yacht and boat charters in Mallorca. We do not publish a company registration number, tax number or street address on this site, and we have not listed any here. You can reach us for any privacy matter at [email protected], which is also the address we use for booking correspondence.

We collect personal data from these sources:

• the enquiry form: your name, email address, an optional phone number, the yacht you are interested in if you picked one, your intended charter dates, the number of guests, any free-text message you add, plus the page you submitted it from and the site or search engine that referred you;
• email, phone calls and WhatsApp messages you send us directly;
• a click record created the moment you tap a WhatsApp button on the site, before the conversation moves to WhatsApp itself — this stores the page you were on, the referring site, the site language and the pre-filled message text;
• standard server logs generated automatically whenever a page is requested, recording IP address, timestamp, the page requested and browser details;
• anonymous visit statistics described further below.

We use enquiry and contact data to answer your questions, prepare a quote and, if you go ahead, to arrange and run the charter — this rests on taking steps at your request before a contract and, once a booking is confirmed in writing, on performing that contract.

Server logs and WhatsApp click records are kept briefly for the security and proper functioning of the site and of our messaging channels, which is our legitimate interest and does not override your own rights given the limited data involved.

Where a confirmed charter requires us to report guest details to maritime or port authorities, we process that data to comply with that legal obligation.

We never use your data for automated decision-making, we do not sell it, and we do not send marketing messages unless you specifically ask us to.

Once a charter is confirmed, Spanish maritime regulations require the captain to hold a crew and passenger list before departure, and port authorities may ask to see it. For that reason we will ask you, shortly before your charter, for the full names (and, where requested by the authority, nationality or identity document details) of everyone joining the trip. This information is used solely to meet that legal requirement and to allow the crew to welcome guests safely on board.

Access to your data is limited to:

• our own team, who read and respond to enquiries through an internal messaging tool linked to our booking system;
• the captain or skipper who will run your charter, who receives the booking and guest details needed to prepare and crew the trip once it is confirmed;
• our hosting provider, which stores the website and the booking system on our behalf and does not use the data for its own purposes;
• Google, through the Google Fonts service used to display text correctly, which receives the visitor's IP address when a page loads;
• jsDelivr, the content delivery network that serves the intl-tel-input library used by the phone-number field in the enquiry form;
• WhatsApp (operated by Meta), for any conversation you choose to start through a WhatsApp button — that exchange is governed by WhatsApp's own privacy policy, not by ours.

Neither Google Fonts nor the jsDelivr library sets cookies on our behalf.

Loading Google Fonts and the jsDelivr library can involve a brief technical transmission of your IP address to servers operated by those providers outside Spain, including possibly outside the European Economic Area, as part of normal content delivery. Any message you send through WhatsApp is handled entirely by Meta under WhatsApp's own terms. Beyond these technical exchanges, we do not transfer your personal data abroad.

The site measures visits with its own script, served from its own domain, without installing any third-party analytics, advertising or social-media tracker. This measurement records pages viewed, time spent, the referring site, campaign parameters included in a link, device type, browser, operating system, screen size, browser language and the country derived from your IP address; the IP address itself is discarded rather than stored. If you send an enquiry or tap a WhatsApp or phone link, that action is linked to the same visit so we know which channel brought it to us.

The site does not set cookies. It uses small entries in your browser's storage instead:

• one to remember that you closed the cookie notice;
• one that temporarily holds the yacht you clicked on, so the enquiry form can be pre-filled — it disappears when you close the tab or send the form;
• one holding random visitor and session identifiers for the visit measurement described above, which expires 30 days after your last visit and can be cleared from your browser at any time.

None of these entries contain your name, email, phone number or any other contact detail.

Enquiries that do not turn into a booking are deleted after 12 months. Records of confirmed bookings are kept for as long as Spanish tax and accounting rules require us to retain them. Server logs are kept for a short period for security purposes and then discarded.

We limit access to enquiry and booking records to the people and systems described in this policy, rely on our hosting provider's infrastructure to keep the site and booking system running securely, and keep server logs only long enough to investigate any security issue. We do not store full payment card details on this site, since charters are quoted and confirmed in writing rather than paid online.

Under Regulation (EU) 2016/679 and Spanish Organic Law 3/2018, you may ask us to:

• confirm whether we hold data about you and give you access to it;
• correct inaccurate or incomplete data;
• delete your data once it is no longer needed for the purposes described here;
• restrict or object to certain processing, in particular processing based on our legitimate interest;
• receive the data you gave us in a portable format, where technically feasible;
• withdraw, at any time, any consent you may have given us.

To exercise any of these rights, write to [email protected]. We answer within one month and may ask for proof of identity to protect your data from unauthorised access. If you believe we have not handled your data properly, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

Our charters and this website are addressed to adults who can enter into a booking, and we do not knowingly collect personal data from children through the enquiry form or WhatsApp. If we become aware that a child's data has been submitted without appropriate consent, we will delete it.

We may update this policy if our services, the website or the law change. The version published on this page is the one that applies, so please check it again before sending us personal data if some time has passed since your last visit.