Privacy Policy

Tanja Katrin Schneider (Sunset Tours Mallorca)
Via de la Cruz, 46, 07180 Santa Ponsa (Calvià), Illes Balears, Spain
NIE: Y5012736S
Phone: +34 677 638 044
E-mail: hello@sunsettoursmallorca.com

There is no obligation to appoint a data protection officer. For any questions about data protection, please contact us directly using the details above.

We process personal data only to the extent necessary to provide this website and to respond to your enquiries and carry out booked tours. Any processing is always carried out in accordance with the GDPR and supplementary Spanish regulations.

This website is provided via the Lovable platform (Lovable Labs Incorporated, San Francisco, California, USA) and delivered via the content delivery network of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Both providers act as processors for us under Art. 28 GDPR; the transfer of data to the USA is based on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. When the pages are accessed, the provider processes technically necessary access data (server log files): IP address, date and time of access, page/file accessed, amount of data transferred, referrer URL, and browser and operating system information.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and error-free operation of the website. This data is not combined with other data sources and is generally deleted or anonymised after 30 days at the latest.

If you contact us by e-mail, phone or WhatsApp, we process the data you provide (e.g. name, phone number, e-mail address, preferred date, number of guests, content of the message) in order to respond to your enquiry.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract) or Art. 6(1)(f) GDPR for purely organisational enquiries. The data is deleted as soon as it is no longer required for the purpose; statutory retention periods (in particular tax and commercial law periods of up to six years under Spanish law) remain unaffected.

In our enquiry forms, you confirm via checkbox before submitting that you have read this privacy policy and consent to the processing of your details for handling the enquiry (Art. 6(1)(a) GDPR). The forms do not store anything on our server: they merely generate a ready-made message in your e-mail programme or in WhatsApp, which you then send yourself. You may withdraw your consent at any time with future effect.

Note on WhatsApp: The WhatsApp button on this website is a simple link. Data is only transmitted to WhatsApp once you actively click the button. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland. When using WhatsApp, data (including phone number, metadata, message content) may also be transferred to servers outside the EU, in particular in the USA. WhatsApp processes data under its own responsibility; details can be found at whatsapp.com/legal/privacy-policy-eea. If you would prefer to avoid this, please contact us by e-mail or phone.

To carry out a tour, we process master data (name, contact details, number and, where applicable, names of guests, date) as well as billing data. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and, for the retention of invoicing records, Art. 6(1)(c) GDPR in conjunction with tax law obligations.

The fonts used on this website (Cormorant Garamond and Karla) are loaded exclusively locally from our own server. There is no connection to Google Fonts or other external font services; your IP address is not transmitted to third parties.

This website does not use cookies for analysis, marketing or tracking purposes. There is no profiling and no automated decision-making. Should any services requiring consent be used in the future, we will obtain your consent beforehand pursuant to Art. 6(1)(a) GDPR.

Your data is only passed on where necessary for the performance of a contract (e.g. to our hosting and e-mail provider as processors), where you have consented, or where we are legally obliged to do so (e.g. to tax authorities or port/maritime authorities). Data is not sold.

We store personal data only for as long as necessary for the purposes stated or as long as statutory retention periods apply. The data is then deleted or anonymised.

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to withdraw any consent given at any time with future effect (Art. 7(3) GDPR).

Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

To exercise your rights, an informal message to hello@sunsettoursmallorca.com is sufficient.

Without prejudice to any other remedies, you have the right to lodge a complaint with a data protection supervisory authority – in Spain with the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or with the supervisory authority of your habitual residence.

We use TLS encryption (HTTPS) and appropriate technical and organisational measures to protect your data against loss and unauthorised access. We update this privacy policy whenever changes to the website or the legal situation make this necessary.

Details of the provider can be found in the Legal Notice.