Privacy Policy

Ibiza Yachts for Rent is the controller of the personal data described in this policy, within the meaning of the GDPR and the LOPDGDD. We operate the website elarboldelaspalabras.es and the yacht and boat charter service offered through it, serving Ibiza. For any question about this policy, about a booking, or to exercise your rights, write to [email protected].

We collect data from several sources, depending on how you reach us:

• Enquiry form: name, email, phone if you choose to give it, the yacht you are interested in if any, charter start and end dates, number of guests, your message, and the page and referring site you came from.
• Email, phone or a direct message: whatever you tell us, usually your name, contact details and charter plans.
• A WhatsApp click: tapping a WhatsApp button on the site records the page you were on, the referring site, the site language and the prefilled message text, before WhatsApp opens.
• Server logs: every visit automatically generates a short technical record (IP address, time, page requested, browser) kept briefly for security.
• Your browser: a note that you closed the cookie notice, a temporary note of the yacht you clicked on so the enquiry form can be prefilled, and random visitor and session identifiers used only to count visits. None of these browser entries contain your name or contact details.

• To read and answer your enquiry and prepare a quote — a step you ask us to take before any contract exists.
• To confirm and run your charter once you accept a quote — performance of the charter contract.
• To keep the records Spanish tax and accounting rules require once a booking is confirmed — compliance with a legal obligation.
• To keep server logs and review WhatsApp-click records for security and to see which channel an enquiry came from — our legitimate interest, balanced against your own rights.

We do not use your data for automated decision-making, and we do not send marketing emails unless you ask us to.

• Our own team, who read and answer enquiries through an internal messaging tool linked to our booking system.
• The captain or skipper who will run your charter, once a booking is confirmed, so the right yacht and crew are ready for you.
• The provider hosting our website and booking system.
• Google, which serves the web fonts used on the site and receives the visitor's IP address for that purpose, and jsDelivr, the CDN that serves the phone-number field library used in the enquiry form. Neither sets cookies on our behalf.

Once a charter is confirmed, Spanish port authorities require a crew list naming everyone on board. Shortly before departure we will ask you for your guests' full names for this reason alone, and pass them only to the captain and, where the law requires it, to the port authority. We do not sell personal data or pass it to anyone for their own marketing.

Tapping the WhatsApp button only records the click details described above in our booking system, before the app opens. The conversation itself runs entirely on WhatsApp, operated by Meta, under WhatsApp's own privacy policy, which we do not control and which governs any data you share there directly.

Google and jsDelivr may process the connection data described above outside the European Economic Area, under their own transfer safeguards. If you write to us on WhatsApp, Meta may likewise process that conversation outside the European Economic Area, under WhatsApp's own terms. We do not otherwise send personal data outside the EEA.

• Enquiries that do not lead to a booking: deleted after 36 months.
• Confirmed booking records: kept for as long as Spanish tax and accounting law requires.
• Server logs: kept briefly for security, then deleted.
• Browser entries: the cookie-notice flag and the visit-measurement identifiers expire or can be cleared by you at any time; the yacht-selection entry is deleted as soon as you close the tab or send the form.

Access to enquiries and booking records is limited to the team members who need it to answer you and run your charter, through our booking system and internal messaging tool. Server logs are reviewed only to detect and prevent misuse of the site. No cookies or third-party trackers are installed on the website; the visit-counting script runs from our own domain and never stores your IP address.

Under the GDPR and the LOPDGDD you may ask us to give you access to your data, correct it, erase it, restrict or object to its use, or receive it in a portable format. Write to [email protected]; we may ask you to confirm your identity before acting on the request, and we answer within one month.

If you are not satisfied with our response, you may complain to the Agencia Española de Protección de Datos (AEPD), www.aepd.es.

Our charters and this website are addressed to adults able to enter into a charter contract; we do not knowingly collect data from children, and ask that enquiry forms are completed by an adult.

We may update this policy if our data practices change. The version published on elarboldelaspalabras.es at the time you use the site is the one that applies.