Privacy Policy

Last updated: 19 May 2026

This Privacy Policy explains how Mallorca Spa Living ("we", "us", "our") processes personal data of users of mallorcaspaliving.com (the "Site"). We comply with Regulation (EU) 2016/679 ("GDPR"), Spanish Organic Law 3/2018 ("LOPDGDD"), and Law 34/2002 ("LSSI-CE").

1. What data we collect

• Identification data: full name.
• Contact data: email address, phone number.
• Project data: location in Mallorca, whirlpool/jacuzzi model of interest, installation preferences, accessories, estimated budget, free-text messages.
• Technical data: IP address, browser, device type, pages visited, referring URL — collected via essential and analytics cookies (see our Cookie Policy).

2. Why we use your data (legal basis)

• To answer your enquiry and prepare a personalised quote — legal basis: pre-contractual measures at your request (Art. 6.1.b GDPR).
• To send commercial communications about our products and services — legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time.
• To comply with our legal obligations (e.g. tax, accounting) — legal basis: legal obligation (Art. 6.1.c GDPR).
• To improve the Site and our services via analytics — legal basis: your consent (cookies).

3. Who we share your data with

We do not sell your personal data. We may share it with the following recipients, only where necessary:

• Our hosting and form-processing provider (Formspree, Inc. — USA, covered by Standard Contractual Clauses).
• Email and CRM tools we use to respond to enquiries.
• Accountants, tax authorities and public bodies where legally required.
• Manufacturers or installers, only when needed to fulfil your specific quote request, and always under confidentiality.

4. International transfers

Some of our service providers are located outside the European Economic Area (mainly the USA). When this happens, we ensure adequate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

5. How long we keep your data

• Enquiry data: up to 24 months from your last contact, unless a contract is signed.
• Contract data: for the duration of the contract and for legally required retention periods (typically 6 years for tax records).
• Marketing data: until you withdraw your consent.

6. Your rights

Under GDPR you have the right to:

• Access your personal data.
• Request rectification of inaccurate data.
• Request erasure ("right to be forgotten") where applicable.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

To exercise any right, email [email protected] with a copy of an ID document. We respond within one month.

7. Security

We apply appropriate technical and organisational measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access — HTTPS encryption, access controls, and provider due-diligence.

8. Changes to this policy

We may update this Privacy Policy from time to time. The version in force is the one published on this page, with the date shown at the top.

If you have any questions about this policy, contact us at [email protected].