Privacy policy

1. Data controller

Controller: mdemarketing.online (Andreu Matali), tax ID [NIF], address [dirección].
Data protection contact: hola@tubarcodealquiler.es

This policy applies to tubarcodealquiler.es under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. What data we process and why

2.1 Listed company data

The directory shows contact data of boat hire companies: trade name, address, phone, website, opening hours, category and public ratings. It comes from publicly available sources, mainly Google Maps, and is refreshed every quarter.

In most cases this is data of legal entities, which falls outside the GDPR. Where the owner is a sole trader or the data identifies a natural person, processing relies on our legitimate interest (art. 6(1)(f) GDPR) in running an informational directory of professional contact details the company itself has made public, in line with art. 19 LOPDGDD. Only professional contact data is shown; never personal data of any other kind.

You may object to this processing or request rectification or erasure of the listing at any time: we remove it within 48 working hours and exclude it from future refreshes (see section 5).

2.2 Data you send us

When	Data	Purpose	Legal basis	Retention
Company form	Company name, town, phone, website, contact email, request type, message	Handle the add, correction or removal request and confirm it to you	Consent (art. 6(1)(a)) and, for removal or rectification requests, legal obligation (art. 6(1)(c))	While the request is handled and up to 12 months afterwards, as a record
Contact email	Your address and whatever you write	Reply to your enquiry	Consent / legitimate interest in replying	Up to 12 months after the conversation ends
Browsing	Technical usage data (pages viewed, device, approximate country), without identifying you	Measure use of the site and improve it	Legitimate interest; see the cookie policy	As configured in the analytics tool (max. 14 months)

The email you leave in the form is never published on any listing. We only use it to confirm the change.

3. Recipients and processors

We do not sell or share data with third parties. We use providers acting as processors, who access data only to provide their service:

Hosting: Vercel Inc. (USA), under the European Commission's standard contractual clauses, with EU servers where possible.
Form: the provider that processes the form submission and delivers it to us by email.
Analytics: Google Analytics 4 (Google Ireland Ltd.), only if enabled, with IP anonymisation and without sharing identifiers with Google Ads.

Any resulting international transfers rely on the standard contractual clauses or the EU-US Data Privacy Framework.

4. Automated decisions

We make no automated decisions and build no profiles with your data.

5. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@tubarcodealquiler.es or through the company form. Say which listing or data is concerned and, for a company, something that lets us verify you are the owner (an email from the company's domain or a call from the listed phone).

Response time: 48 working hours for listing updates and removals; at most one month for other requests, as the GDPR requires.

If you believe we have not handled your request properly you may complain to the Spanish Data Protection Agency (www.aepd.es).

6. Security

The site is served over HTTPS only. Form data is transmitted encrypted and kept in the controller's mailbox with restricted access. We store no user databases on the site.

7. Minors

The site is not aimed at children under 14 and does not knowingly collect their data.

8. Changes to this policy

We will review this policy when processing, providers or regulations change. The date of the last review is shown at the bottom of the page.