vipyachtibiza.com

Privacy

Policy

VIP YACHT IBIZA – PRIVACY POLICY
Version 1.0 · Effective date: 19 July 2025


INTRODUCTION

ARGIOD S.L. (“Vip Yacht Ibiza”, “we”, “us” or “our”) respects your privacy and is committed to protecting the Personal Data that we process about you.
This Privacy Policy explains what data we collect, how we use it, the legal bases we rely on, how long we keep it, with whom we share it, and the rights you have.

It applies to information collected through:

  • our website https://www.vipyachtibiza.com (the “Website”);

  • the embedded online-booking engine we use to reserve yacht charters and sell extras;

  • related e-commerce pages powered by WooCommerce;

  • any contact you have with us by e-mail, phone, social media or in person.

It also covers data we process about yacht owners, suppliers, and job-applicants who interact with us.


1. DATA CONTROLLER

  
Company:ARGIOD S.L.
NIF:B-22646384
Registered office:C/ Torrelaguna 61, 14 B, 28027 Madrid (Spain)
Commercial Register:Entry 1/2025/107293 · Record 10/2025/14464 · Sheet 858294
Contact e-mail:info@vipyachtibiza.com
Privacy e-mail:privacy@vipyachtibiza.com

ARGIOD S.L. determines the purposes and means of processing and is therefore the Data Controller under Regulation (EU) 2016/679 (“GDPR”).


2. WHAT PERSONAL DATA WE COLLECT

SourceExamples of dataWhy we need it
Data you provide directlyName, e-mail, telephone, postal address, nationality, boating licence, date of birth, ID/ passport, payment details, free-text messages, CV and cover letter (for applicants).Create or manage your account, process bookings, verify identity, respond to enquiries, recruitment.
Data collected automaticallyIP address, device type, browser, operating system, referral URL, pages viewed, time spent, actions in the booking engine, WooCommerce cart contents, geolocation (approx.).Site security, analytics, improve performance, remember preferences.
Third-party sourcesPayment processors, social-login providers (e.g. Google / Facebook), marketing partners.Payment verification, account creation, targeted offers (with consent).

We do not intentionally collect data from children under 16. If you believe we have done so, please contact us and we will delete it.


3. LEGAL BASES FOR PROCESSING

PurposeLegal basis (Art. 6 GDPR)
Account creation, booking & payment processingContract performance (Art. 6 1-b)
Customer support & dispute resolutionLegitimate interest (Art. 6 1-f)
Marketing e-mails / push notificationsConsent (Art. 6 1-a)
Personalised ads & analytics cookiesConsent (Art. 6 1-a)
Fraud prevention & site securityLegitimate interest (Art. 6 1-f)
Compliance with legal / tax dutiesLegal obligation (Art. 6 1-c)

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.


4. HOW WE USE YOUR DATA

  • Operate the Website & booking engine

  • Process reservations, invoices and payments

  • Provide customer service via chat, e-mail or phone

  • Send service messages (booking confirmations, reminders, safety notices)

  • Send marketing (newsletters, special offers) if you opt in

  • Run analytics to improve usability and detect errors

  • Prevent fraud & ensure security (IP blocking, payment-token checks)

  • Recruit staff and crew when you submit an application

  • Comply with law and cooperate with authorities where required


5. DATA RETENTION

CategoryStandard retentionRationale
Booking & invoicing records6 years from end of fiscal yearSpanish tax law
Marketing contact details (opt-in)Until you unsubscribe or after 2 years of inactivityAEPD guidance
Support tickets & phone logs3 yearsStatute of limitation for civil claims
Job-applicant data12 months after process endsTalent pool (with consent)
CookiesSee Cookies Policy – max 13 monthsCNIL / AEPD guidance

Back-ups are kept for a further 30 days, then safely overwritten.


6. DISCLOSURE OF YOUR DATA

We never sell your data. We share it only with:

  • Service providers under contract (hosting, booking engine, payment gateways, e-mail & SMS platforms, analytics, IT maintenance).

  • Professional advisers (lawyers, auditors, insurers, accountants) bound by confidentiality.

  • Public authorities or courts when legally obliged.

  • Successors in title if we merge, sell or reorganise our business (data will remain protected).

  • Marketing & advertising partners only if you have consented to advertising cookies.

All processors sign a Data-Processing Agreement (Art. 28 GDPR).


7. INTERNATIONAL TRANSFERS

Some providers (e.g., Stripe, Meta, Google) store data in the United States.
Transfers occur under:

  • EU-US Data Privacy Framework (adequacy decision, July 2023), or

  • Standard Contractual Clauses + supplementary measures (encryption, pseudonymisation).


8. DATA SECURITY

We apply technical and organisational measures aligned with Art. 32 GDPR: HTTPS/TLS encryption, access control by least privilege, firewalls, malware scanning, 2-factor authentication for admin users and regular staff training.

No method is 100 % secure, but we continually audit and improve our defences.


9. AUTOMATED DECISIONS

We do not make decisions based solely on automated processing that produce legal or similarly significant effects.


10. YOUR RIGHTS

You may, at any time:

  1. Access the data we hold about you.

  2. Rectify inaccurate or incomplete data.

  3. Erase data (“right to be forgotten”) when legally possible.

  4. Restrict processing in the cases set out in Art. 18 GDPR.

  5. Object to processing based on legitimate interest or to marketing.

  6. Port your data to another controller (machine-readable format).

  7. Set post-mortem instructions about your data.

Contact privacy@vipyachtibiza.com or write to our postal address, attaching proof of identity. We will reply within 30 days (60 days for complex cases).
You also have the right to lodge a complaint with the Spanish Data-Protection Agency (AEPD).


11. EXTERNAL LINKS

Our Website contains links to third-party sites. We are not responsible for their privacy practices. Please read their own privacy notices.


12. CHANGES TO THIS POLICY

We may update this text to reflect legal or operational changes. Minor updates will be indicated by the “last updated” date. Major changes will be notified via e-mail or prominent banner.


13. CONTACT

Questions?
E-mail: privacy@vipyachtibiza.com
Postal: ARGIOD S.L., Attn. Data Protection, C/ Torrelaguna 61 14 B, 28027 Madrid, Spain.


By using our Website or booking a charter you acknowledge that you have read and understood this Privacy Policy.