Privacy policy

Controller: Alain Corulla Sorondo, self-employed professional (autónomo), trading as A-Digital Boats. Tax ID (NIF): 14305036W. Address: Calle Santa Escolástica, 49, 07702 Mahón, Illes Balears, Spain. Email: [email protected]. Phone: +34 639 568 353.

We have not appointed a data protection officer because we are not required to (Article 37 GDPR): we are a self-employed professional and we do not process data on a large scale or special categories of data. For any data protection question, write to the email address above.

Contact form. We ask for your name, a WhatsApp number or phone number, the type of business and, if you wish, your company's current website. We also ask you to tick a box to confirm you have read this policy. If the form is sent to our server, we also keep the language of the page and the address of the page you sent it from.

How it reaches us. Depending on how the form is set up, one of two things happens. Either the website opens WhatsApp with a message already written with those details, and we only receive them when you send it from WhatsApp. Or the form sends the details to our server and they reach us by email. Either way, you can also write to us on WhatsApp or by email whenever you like.

Email, phone and WhatsApp. If you write to us or call us without using the form, we process the details you give us in that contact, such as your name, your number or your email address.

Technical browsing data. Like any web server, the one that hosts this website records the IP address, the date and time, the page requested and the type of browser. We use it to keep the website secure and to spot attacks.

Analytics. If we switch on web analytics, we only collect usage data if you accept it in the cookie notice. We explain this in the cookie policy.

We do not collect special categories of data, such as health, beliefs or origin, and we ask you not to include them in your messages.

To answer your request and prepare the prototype of your website. Legal basis: your consent (Article 6.1.a GDPR), which you give by ticking the box on the form. You can withdraw it at any time, and that does not affect what we did before you withdrew it.

To deal with messages you send us by email, phone or WhatsApp without using the form. Legal basis: steps taken at your request before entering into a contract (Article 6.1.b GDPR).

To keep the website secure and detect abuse. Legal basis: our legitimate interest (Article 6.1.f GDPR), which we have weighed against your rights and which has a minimal impact on your privacy.

To measure how the website is used, only if we switch on analytics and you accept it. Legal basis: your consent (Article 6.1.a GDPR and Article 22.2 LSSI-CE).

We do not take decisions based solely on automated processing and we do not build profiles from your data. We use your data for what you asked us. If we later want to write to you for another reason, we will ask you first.

Your name, WhatsApp or phone number and type of business are needed so that we can reply. Without them we cannot deal with the request. Your current website and anything else you tell us is optional.

Requests and messages that lead nowhere: up to one year from our last contact with you, unless you ask us to delete them sooner.

If you later buy a service from us, your data becomes part of the contract and is governed by the terms of that job. Invoicing data is kept for as long as commercial and tax law require, at least six years.

Server technical logs: only as long as needed for the security and upkeep of the website and, in any case, no more than twelve months.

Your cookie choice is stored in your browser until you clear the site data (see the cookie policy).

When these periods end, we delete or anonymise the data. While any liability arising from the processing may still arise, we may keep it blocked and available to judges, courts and public authorities, as the law provides.

We do not sell your data or pass it to third parties for their own purposes. We only disclose it to the authorities when the law requires us to.

We work with providers that process data on our behalf (processors, Article 28 GDPR): Hetzner Online GmbH (Germany), which hosts this website and, where used, the server that receives the form, and our email provider, also in the European Union.

Other services are involved if you choose to use them, each with its own privacy policy. WhatsApp Ireland Ltd. (WhatsApp), if you write to us there or send the message the form prepares: it processes your data as controller of its own service. Google Ireland Ltd. (Google Analytics), only if we switch on analytics and you accept it: it processes the analytics data on our behalf.

We do not ourselves transfer your personal data outside the European Economic Area. We host the website in the European Union.

WhatsApp Ireland Ltd. and Google Ireland Ltd. belong to groups headquartered in the United States and may transfer data outside the European Economic Area. They do so under their own safeguards, such as European Commission adequacy decisions (for example, the EU-US Data Privacy Framework) or standard contractual clauses, which you can read in their privacy policies.

You can exercise these rights over your data: access (know what data we process and receive a copy); rectification (correct inaccurate data); erasure (ask us to delete it); objection to processing; restriction of processing; portability (receive it in a structured, commonly used format); and withdrawal of consent at any time. You also have the right not to be subject to decisions based solely on automated processing that significantly affect you.

To exercise them, write to [email protected] or to our postal address and say which right you want to exercise. If we have reasonable doubts about your identity, we will ask you to prove it. We reply within one month of receiving the request. That period can be extended by two further months if the request is complex or there are many, and we would tell you within the first month.

If you think we are not processing your data in line with the rules, you can complain to the Spanish Data Protection Agency (AEPD): www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid, Spain. If you live or work in another EU country, you can also go to the supervisory authority there. Before you complain you can write to us and we will go through it with you.

The website is served over an encrypted connection (HTTPS) from servers in the European Union. Only the team members who deal with requests can access the data we receive. We keep the server software up to date.

If a security breach seriously affected you, we would tell you and notify the AEPD in the cases where the law requires it.

The website is aimed at businesses and professionals in the marine industry. It is not intended for children under 14 and we do not knowingly collect their data. If we find that we have received data from a child under 14 without the permission of a parent or guardian, we delete it.

We may change this policy to reflect changes in the law or in how we work, for example if we switch on analytics or change provider. The current version is the one published on this page, with its review date.

For any data protection question or to exercise your rights: [email protected], +34 639 568 353, or by post to Calle Santa Escolástica, 49, 07702 Mahón, Illes Balears, Spain.