Who is responsible for your data
The data controller is Freeume, S.L., trading as Mallorca G.O.A.T.
- Tax number (NIF): 16608762
- Registered office: C/ Málaga 12 Bj A, Palmanova, 07181, Illes Balears, Spain
- Email: info@mallorcagoat.com
- Telephone: +34 613 069 559
What we collect, and why
When you enquire
Your name, email, phone number and whatever you tell us about the trip you have in mind. We use it to answer you and to plan what you have asked for. Legal basis: your request, and our legitimate interest in replying to it.
When you create an account
Your name, email address and a password, which is stored only as an irreversible hash. We never see it. Legal basis: the contract between us.
When you book
Billing details, the experiences you have booked, the dates and times, the number of guests, and the amount paid. Legal basis: the contract, and our legal obligation to keep accounting records.
Card details never reach this website. Payments are processed by WooPayments (Stripe). We receive confirmation that a payment succeeded and the last digits of the card, nothing more.
Documents in your client area
Your advisor may prepare documents for you — vouchers, guides, your itinerary — and you may send us documents yourself, including identity documents if an operator requires one.
These are stored outside the public part of the website, in a directory that the web server refuses to serve. They can only be opened while you are signed in to your own account, through links that expire. Each request is checked against who owns the document, so changing a number in the address bar does not reach anyone else’s file.
Legal basis: the contract, and your consent for identity documents.
How long we keep it
Your trips and documents are kept for as long as your account exists, so that you can look back at a trip from a previous year. Accounting records are kept for the period Spanish tax law requires. You can ask us to delete everything at any time, and we will.
Who else sees it
- The operator of each experience, who needs your name, the date and the number of guests to run it.
- WooPayments / Stripe, to take the payment.
- Our hosting provider, which stores the site and its database.
- Analytics and advertising services, only if you accept them in the cookie banner. See the Cookie Policy.
We do not sell your data, and we do not share it with anyone who does not need it to deliver what you have asked for.
Transfers outside the European Economic Area
Some of the services above are operated by companies based outside the EEA. Where that happens the transfer is covered by the European Commission’s standard contractual clauses or an adequacy decision.
Your rights
You can ask us to show you what we hold, correct it, delete it, limit what we do with it, hand it over in a portable format, or object to a particular use. Write to info@mallorcagoat.com and we will reply within one month.
If you are not satisfied with our answer you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
Security
The site runs over HTTPS. Client documents are held outside the public directory and served only after an ownership check. Access to the administration area is limited to our own team.
Changes
If we change this policy we will update this page. Where the change is significant we will tell account holders by email.