HydraBoats
Last updated: August 2026
HydraBoats (hereinafter, "the Controller") processes the personal data of users of the hydraboats.com website and customers who book our boat rental services and nautical experiences in Málaga, Costa del Sol.
You may contact our Data Protection Officer at legal@hydraboats.com for any matters related to the processing of your personal data.
We collect the following personal data when you use our services: (a) Identifying data: full name, email address, phone number, and identity document (national ID/DNI-NIE) number, the latter required to formalise the rental contract; (b) Booking data: dates, selected vessel, booked extras, sailing preferences, and special requests; (c) Browsing data: IP address, browser type, visited pages, session duration, and language preferences, collected via cookies and similar technologies; (d) Documentation: proof of boating license when required; (e) Payment data: processed directly by Stripe — we do not store your full bank card details.
We do not collect sensitive data or data from minors without verifiable parental or legal guardian consent.
We process your personal data for the following purposes and legal bases: (a) Booking management and service delivery: legal basis — contract performance; (b) Booking-related communications: confirmation, reminders, last-minute changes: legal basis — contract performance; (c) Commercial communications (if you have opted in): legal basis — consent; (d) Compliance with legal obligations (tax, accounting, GDPR): legal basis — legal obligation; (e) Website improvement and usage analysis: legal basis — legitimate interest.
You may withdraw your consent for commercial communications at any time by contacting us or using the unsubscribe link in any commercial email.
We retain your personal data for as long as necessary to fulfil the purposes described in this policy and to comply with applicable legal obligations. Booking data is retained for the period required by Spanish tax and commercial law (generally 5 years from the last transaction). Signed contracts are retained for that same period, as they are already-executed instruments rather than documents that can be deleted on request.
Browsing and cookie data are retained as described in our Cookie Policy. Contact and communication preference data are retained while you maintain an active account or until you request deletion.
We may share your personal data with: (a) The boat Owner, to manage service delivery; (b) Stripe, as our payment processor; (c) Hosting, email, and website analytics service providers; (d) Competent authorities when required by law.
All our service providers comply with data protection regulations and operate under appropriate safeguards. We do not share personal data with third parties for their own commercial purposes without your explicit consent.
Under the GDPR, you have the right to: (a) Access your personal data and know how it is processed; (b) Rectify inaccurate or incomplete data; (c) Request erasure of your data when it is no longer necessary; (d) Request restriction of processing in certain circumstances; (e) Port your data to another controller; (f) Object to processing based on legitimate interest, including profiling.
You may exercise these rights by contacting us at legal@hydraboats.com. We will respond within a maximum of 30 days. If you are not satisfied, you may file a complaint with the Spanish Data Protection Agency (AEPD).
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include SSL/TLS encryption for data transmission, restricted access secure storage, and periodic security reviews.
However, no internet transmission is completely secure. We cannot guarantee the absolute security of data transmitted through our website.
For any questions about this Privacy Policy or to exercise your rights, you may contact us:
Email: info.hydraboats@gmail.com
Phone: 629 643 523
WhatsApp: 629 643 523