Privacy Policy

1. Data Controller

The controller responsible for the processing of your personal data is Quest Heroes S.L. (NIF B57957466), with registered office at C/ Ginebro 417 A 1º, 07458 Playa de Muro, Illes Balears, Spain, and operational base at Carrer Dels Pins 19, 07400 Port d'Alcudia, Mallorca.

2. Purposes of Processing

We process your personal data for the following purposes:

• To provide and manage the boat rental services and boat excursions you book with us.
• To manage the customer relationship, bookings, check-in, deposits and payments.
• To issue invoices and comply with tax and accounting obligations.
• To send you commercial communications about services you have contracted or similar services, unless you object to receiving them.
• To answer enquiries sent through our contact forms, email or WhatsApp.

3. Data We Collect

Depending on the service, we may process the following categories of personal data:

• Identification data: name and surname, postal address, email address, phone number, ID or passport details (required for the rental contract).
• Payment data: payment card details, processed through secure payment providers.
• Location data: GPS coordinates and IP address, where enabled by you or required by the booking system.

4. Legal Basis

The processing of your data is based on: the performance of the rental contract and its pre-contractual steps; compliance with legal obligations (tax, accounting and maritime regulations); and our legitimate interest in sending communications about services similar to those you have contracted. Where required, we will ask for your consent.

5. Data Recipients

Your personal data is not shared with third parties except where legally required. Service providers acting as data processors (for example cloud storage, booking and messaging platforms) may access data strictly to provide their services and are contractually required to keep the information confidential and comply with data protection law.

6. International Transfers

Some of our providers may process data outside the European Economic Area. In such cases, transfers are carried out with adequate safeguards recognised by the European Commission, such as adequacy decisions or standard contractual clauses.

7. Data Retention

We keep your personal data for the duration of the contractual relationship. Once it ends, data is blocked and retained only for the periods required to meet legal obligations, after which it is securely deleted.

8. Your Rights

You may exercise the following rights at any time by writing to info@questheroes.es, enclosing a copy of your ID:

• Access - obtain confirmation of whether we process your data and a copy of it.
• Rectification - correct inaccurate or incomplete data.
• Erasure - request deletion of your data when no longer necessary.
• Restriction - limit the processing of your data in certain circumstances.
• Objection - object to processing, including commercial communications.
• Portability - receive your data in a structured, machine-readable format.

If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

9. Cookies

This website uses technical cookies necessary for its operation and, subject to your consent, analytics and marketing cookies. You can configure or reject cookies at any time through the cookie banner or your browser settings.

10. Security

Quest Heroes S.L. applies appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, loss or disclosure.

11. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. The current version, with its revision date, will always be published on this page.