1. USER INFORMATION Who is the controller of your personal data? Jetski 2 Ride S.L.U. is the controller of the user’s personal data and informs you that these data will be processed in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
- Company Name: Jetski 2 Ride S.L.U.
- VAT (NIF): B27686369
- Address: Carrer alcala galiano 6, 07590 Cala Ratjada, Mallorcaa, Mallorca
- E-mail: office@jetski2ride.com
Why do we process your personal data and what for? We process your personal data confidentially to achieve the following purposes:
- Web Browsing and Hosting (Raidboxes): To ensure the correct technical functioning of the website. Technical data (IP addresses, logs) are collected. (Legal basis: Legitimate interest of the controller, Art. 6.1.f GDPR).
- Handling inquiries (Forms, E-mail, Phone): To respond to requests made by the user. (Legal basis: Consent of the data subject, Art. 6.1.a GDPR and performance of pre-contractual measures, Art. 6.1.b GDPR).
- Instant Messaging (WhatsApp Business): For fast communication with clients (end-to-end encryption). (Legal basis: Legitimate interest, Art. 6.1.f GDPR).
- Booking Management: To formalize the jet ski rental service and process invoicing. (Legal basis: Performance of a contract, Art. 6.1.b GDPR and legal tax obligation, Art. 6.1.c GDPR).
- Images and recordings (Photo and Video): Creation of audiovisual material during the jet ski activity to be provided to the client, as it is included in the price of the contracted service. (Legal basis: Performance of a contract, Art. 6.1.b GDPR). Furthermore, this material may be used for promotional purposes on our website and social networks. (Legal basis: Legitimate interest for advertising, Art. 6.1.f GDPR, and Spanish Organic Law 1/1982, unless the user objects).
- Maps and Cookies (Google Maps and CCM19): To display interactive locations and manage cookie consent (LSSI). (Legal basis: Consent of the data subject, Art. 6.1.a GDPR and legal compliance, Art. 6.1.c GDPR).
How long will we keep your personal data? They will be kept for no longer than necessary to fulfill the purpose of the processing or while legal requirements (tax, commercial, or maritime) dictate their custody. Subsequently, they will be deleted with appropriate security measures.
To whom do we disclose your personal data? Data will not be transferred to third parties except by legal obligation. To provide services strictly necessary for the development of our activity, we share data with the following data processors under the GDPR:
- Raidboxes GmbH (Germany): Web hosting.
- Papoo Software & Media GmbH (Germany): Cookie management (CCM19).
- WhatsApp Ireland Limited / Meta (USA) & Google Ireland Limited (USA): These involve international data transfers to the USA, legally covered by the “EU-US Data Privacy Framework” (DPF).
What are your rights?
- Right to withdraw consent at any time.
- Right of access, rectification, portability, and erasure of your data, and the limitation or opposition to its processing.
- Right to file a claim with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations. You can exercise your rights by sending an e-mail to: office@jetski2ride.com.
2. SECURITY MEASURES The controller guarantees that it has implemented technical and organizational policies (such as SSL/TLS web encryption) to protect the rights and freedoms of users.