Privacy Policy

Last updated: October 2026

This Privacy Policy explains how JETLIFE MALLORCA, S.L. (“Jet Life Mallorca”, “we”) processes personal data when you visit jetlifemallorca.com, book a guided tour or rental, buy a gift voucher, contact us or take part in an activity. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD) and the Spanish Law 34/2002 on Information Society Services (LSSI).

JETLIFE MALLORCA, S.L.
NIF: B05728910
C/ Huguet des Far, 55 D
07180 Calvià, Illes Balears, Spain
Email: info@jetlifemallorca.com
Phone / WhatsApp: +34 618 51 12 57
Registro Mercantil de Mallorca, hoja PM-108622, inscripción 1ª

We have not appointed a Data Protection Officer, as this is not required for our activity. For any data protection question, please write to info@jetlifemallorca.com.

• Booking and performing your tour or rental, including the rental / participation contract and the online signature: name, email, phone, address, date of birth, nationality, ID card or passport number, booking details, details of additional riders, signatures, and the date, time and IP address of accepting our Terms. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, where Spanish nautical rules require the identification of drivers, a legal obligation (Art. 6(1)(c) GDPR).
• Check-in and safety (ID and licence check, safety briefing, security deposit, return check). Legal basis: the contract and our legitimate interest in safety and in protecting our jet skis (Art. 6(1)(b) and (f) GDPR).
• Payments: amount, method, status and payment reference. Card details are entered directly with our payment provider Stripe; we never see or store full card numbers. Legal basis: the contract and legal obligations.
• Invoices and accounting: name or company, tax ID (if given), address, booking and payment data. Legal basis: legal obligation (tax and commercial law).
• GPS and incident documentation: our jet skis may record position, speed and engine data during the activity; in case of an incident or damage we document it with photos, videos, reports and quotes. Legal basis: legitimate interest in safety, theft prevention, compliance with the authorised area and the defence of claims (Art. 6(1)(f) GDPR).
• Service messages (booking confirmation, payment links, reminders, changes, cancellation) by email and WhatsApp. Legal basis: the contract.
• Review request: one email after your activity asking for a Google review. Legal basis: legitimate interest; you can object at any time.
• Offers and news by email and/or WhatsApp: only with your consent, given with a separate checkbox (Art. 6(1)(a) GDPR). You can unsubscribe at any time with the link in each message.
• Photos and videos for marketing (website, Instagram, Facebook, other social media, promotional material): only with your consent, given with a separate, voluntary checkbox. You can withdraw it at any time.
• Sales partners: if you come to us through a partner's link or QR code (for example a hotel or charter company), we record this so that we can settle with the partner. The partner only sees your first name, the initial of your surname, the date, the activity and the amount. Legal basis: legitimate interest.
• Gift vouchers: buyer's name and email, recipient's name and personal message (optional), voucher code and balance. Legal basis: the contract.
• Group and private tour requests and other enquiries: name, email, phone and message. Legal basis: steps prior to a contract at your request.
• Website operation and security: IP address, date and time, pages requested and browser (server logs). Legal basis: legitimate interest in a secure, working website.
• Statistics and advertising: only if you accept cookies. See our Cookie Policy.

Data marked as required in the booking form is needed to conclude and perform the contract; without it we cannot accept the booking. Participants under 18 may only take part in accordance with our Terms & Conditions; their data is provided by their parent or legal guardian. We do not use automated decision-making that produces legal effects for you.

We only share personal data where necessary for the purposes above:

• Hostinger International Ltd. (EU): website hosting, database and email, as our processor.
• Stripe Payments Europe, Ltd. (Ireland): online payments.
• Google Ireland Ltd. (Analytics, Ads) and Meta Platforms Ireland Ltd. (Meta Pixel, WhatsApp): only if you accept cookies, or for messages you exchange with us on WhatsApp.
• Google Ireland Ltd. (Maps): the map on the homepage is loaded directly from Google to show where to find us (legitimate interest); Google receives your IP address.
• The sales partner who referred you: limited data as described above.
• Our technical service provider for the booking system, as our processor.
• Tax advisers, accountants, lawyers, insurers and the jet ski workshop, where needed for accounting, claims or repairs.
• Public authorities (for example Capitanía Marítima, Guardia Civil, tax authorities, courts) where we are legally obliged or in the event of an accident or incident.

Some providers (Google, Meta, Stripe) may process data in the United States. These transfers are based on the EU–US Data Privacy Framework, where the recipient is certified, or on the European Commission's Standard Contractual Clauses.

• Booking, contract, check-in, signature and ID data: for the duration of the contract and afterwards until possible claims are time-barred, in principle 5 years after the activity.
• Invoices and accounting records: 6 years (Spanish Commercial Code); tax-related data at least 4 years.
• GPS and incident data: as long as needed to handle an incident or claim.
• Marketing consent and photos / videos: until you withdraw your consent. Published material is removed from our own channels as far as reasonably possible; printed material already distributed cannot be recalled.
• Enquiries without a booking: up to 1 year.
• Server logs: a short period for security purposes.

You can request access to your data, rectification, erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest (including the review email). Where processing is based on consent, you can withdraw it at any time; this does not affect processing carried out before.

Send your request to info@jetlifemallorca.com with your name and, if available, your booking number. We may ask you to prove your identity. We reply within one month.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).

We protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS), individual staff accounts with roles and permissions, a log of changes to bookings and payments, payment processing exclusively by Stripe, and regular backups.

We may update this Privacy Policy when our services or the law change. The current version is always available on our website.