Privacy Policy

Barcelona Lux Yacht Сharter is the party that decides why and how your personal data is used in connection with this website and our Barcelona charter service. We do not publish a separate registered address or company number on this site, but you can reach us at any time at [email protected] for any question about this policy, a booking, or your data.

We collect personal data directly from you, and a small amount automatically as you browse.

• Enquiry form: name, email, optional phone number, the yacht you selected (if any), your proposed charter start and end dates, number of guests, your free-text message, plus the page URL and referrer that led you there.
• Direct contact: anything you tell us by email, over the phone, or in a WhatsApp conversation you start with us.
• WhatsApp click record: when you tap a WhatsApp button on the site, we log the page URL, referrer, site language and the prefilled message text in our own booking system before WhatsApp opens on your device.
• Server logs: your device's IP address, the time of the request, the page requested and your browser, recorded automatically by the hosting infrastructure for a short period.
• Browser storage: a local-storage entry that remembers you dismissed the cookie notice, a session-storage entry that remembers which yacht you clicked so the enquiry form can be prefilled (cleared when you close the tab or send the form), and a local-storage entry holding random, non-identifying visit and session codes used for our own visit statistics, which expires 30 days after your last visit.

We process enquiry and contact data to take the steps you request before a contract exists, such as checking yacht availability and preparing a quote, and then to perform the charter contract once you confirm a booking in writing. If your enquiry does not lead to a booking, we keep it only to be able to follow up and compare it against future enquiries.

We rely on our legitimate interest in keeping the site, our booking system and our communications secure when we keep server logs and WhatsApp click records, and when we measure site visits in aggregate. Where a confirmed charter requires us to report guest identities to port or maritime authorities, we process that data to comply with that legal obligation. We do not use your data for automated decision-making, and we do not sell it to anyone.

Once you confirm a charter, Spanish port and maritime authorities require a crew list naming everyone on board. If you book with us, we will ask you for the full names of your guests so that the captain can prepare and submit this list before departure from Barcelona. This information is used strictly for that legal formality and for the safe running of your charter.

Access to your data is limited to people and services that need it to do their job.

• Our own team, who read and respond to enquiries through an internal messaging tool connected to our booking system.
• The captain or skipper who will run your charter, who receives the booking and guest details needed to prepare the voyage and the crew list once a booking is confirmed.
• Our hosting provider, which serves the static website and keeps the underlying server logs; we do not name this provider here, but it only processes data to keep the site running.
• Two technical suppliers used to display the site correctly: Google Fonts, which receives your IP address when a page font loads, and the jsDelivr content delivery network, which serves the phone-number input library used in the enquiry form. Neither sets cookies on our behalf.
• WhatsApp, operated by Meta, once you choose to open a conversation with us there. That conversation is then governed by WhatsApp's own privacy terms, not by this policy.

Our booking system, internal messaging tool and hosting keep data within the ordinary course of running a Spanish website. Google Fonts and jsDelivr may process the technical request data mentioned above on infrastructure located outside the European Economic Area, and WhatsApp conversations run on Meta's own infrastructure. Where this happens, these providers are responsible for putting in place recognised safeguards, such as standard contractual clauses, for any such transfer.

Enquiries that do not turn into a confirmed charter are deleted after 36 months. Records relating to a confirmed booking are kept for as long as Spanish tax and accounting rules require us to retain them. Server logs are kept only for a short period needed for security monitoring. The visit-measurement identifier in your browser expires automatically 30 days after your last visit, and you can clear it yourself at any time through your browser settings.

We limit access to enquiry and booking data to the team members and service providers named above, and we rely on our hosting provider's standard server security to protect the underlying infrastructure. The site itself sets no tracking cookies and stores no contact details in your browser; only non-identifying technical codes are kept locally for visit statistics.

You can ask us to give you access to your data, correct it, delete it, restrict how we use it, receive a copy in a portable format, or object to our use of it on legitimate-interest grounds. To exercise any of these rights, write to [email protected]. We answer within one month and may ask you to confirm your identity first, so that we do not hand your data to the wrong person.

If you are unhappy with how we have handled your request or your data, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

Our charter service and this website are addressed to adults who can enter into a booking contract. We do not knowingly collect personal data from children, and the enquiry form is not designed for use by minors.

We may update this policy if our tools, suppliers or legal obligations change. The version published on barcelonaluxyachtcharter.es at the time you visit or send an enquiry is the one that applies. This policy is governed by Regulation (EU) 2016/679 (GDPR), together with Spain's Organic Law 3/2018 of 5 December on data protection and digital rights guarantees.