Costa Brava Powerboat Center takes the protection of your personal data seriously. This page explains what data we collect on this website, why, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the Spanish data protection act LOPDGDD 3/2018.
Data controller
- Company
- [to be completed : company name]
- Legal form
- [to be completed : legal form]
- Tax ID
- [to be completed : NIF / CIF]
- Manager
- [to be completed : legal representative]
- Address
- Poligon 8, 17486 Castelló d'Empúries (Girona), Espagne
- Phone
- +33 615 194 391
Data collected and purposes
We only collect the data we need. You can browse every page of this website without giving us any personal information.
| When? | Data | Why? |
|---|---|---|
| Contact form | Name, email address, message, originating page (e.g. the listing viewed), date, IP address | To answer your request (information, quote, boat viewing…) and follow up on our exchange; the IP address is only used to prevent abuse and automated submissions. |
| Browsing the website | IP address, browser, pages requested, date and time (server technical logs) | To run the website, keep it secure and diagnose incidents. |
| Language choice | Selected language (stored in the session) | To display the website in the language you chose. |
We use no audience measurement, targeted advertising or profiling tools, and we never sell or rent your data.
Legal bases
- Contact form: your consent, given by ticking the box provided (Article 6.1.a GDPR), and pre-contractual steps taken at your request (Article 6.1.b). You may withdraw your consent at any time.
- Technical logs and security: our legitimate interest in keeping the website working and secure (Article 6.1.f).
- Language choice: necessary for the service you request (Article 6.1.b).
Retention periods
- Contact requests: 3 years from our last exchange, then deleted. If your request leads to a sale or a service, the related documents are kept for the period required by accounting and tax obligations.
- Technical logs: 12 months maximum, depending on our hosting provider's configuration.
- Session (language, form security): deleted when you close your browser.
Recipients and third-party services
Your data is intended only for the Costa Brava Powerboat Center team. It may be processed on our behalf and according to our instructions by:
- Our hosting provider, which hosts the website and its email service: [to be completed : hosting provider name and address].
To display its pages correctly, the website relies on external services. Your browser then connects directly to their servers, which technically sends them your IP address:
- Google Fonts (Google Ireland Ltd.): typefaces;
- Cloudflare cdnjs, jsDelivr and unpkg: technical libraries (layout, icons, animations);
- Google Maps (Google Ireland Ltd.): access map shown on the Wintering and Contact pages; Google may set its own cookies there, under its privacy policy.
Links to our Facebook and Instagram pages are plain links: no data is sent to these networks unless you click them.
Transfers outside the European Union
Some of the third-party services listed above (Google, Cloudflare) may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework, to which these companies are certified, or by the European Commission's standard contractual clauses.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time.
To exercise these rights, email us at contact@costabravapowerboatcenter.com or write to the postal address above. We reply within one month; we may ask for proof of identity if we have reasonable doubts.
If you believe your rights have not been respected, you can lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), or with the authority of your country of residence (e.g. the ICO in the United Kingdom).
Security
The website is only available over HTTPS (encrypted connection). Messages received are only accessible to authorised members of our team, and the administration area is protected by a username and password.
Changes
We may update this policy, in particular when the website or the regulations change. The date of the latest update is shown at the top of this page.