MallorcaFly Privacy Policy

Last updated: 4 September 2026

1. Data controller

The controller responsible for processing personal data is:

  • Legal owner: Bartolomé Robles Bauza

  • Trade name: MallorcaFly

  • Spanish tax identification number (NIF/CIF): E-57844672

  • Address: POLIGONO 12, PARCELA 84. CAMPANET, BALEARIC ISLANDS, SPAIN

  • Email: mallorcafly@gmail.com

  • Website: https://mallorcafly.es

2. Personal data we process

MallorcaFly may process the following categories of data:

  • Identification and contact details, such as name, telephone number and email address.

  • Information needed to manage the activity, such as each passenger’s age and weight.

  • Booking details: activity, date, time, changes, cancellations and necessary notes.

  • Information about orders, payment method and payment status. MallorcaFly does not store complete bank-card details.

  • Messages sent through WhatsApp, email, forms, telephone or social media.

  • Preferences, such as the language used for customer service.

  • Basic technical browsing data, such as IP address, browser, device and security logs.

  • Consents and preferences relating to marketing communications.

We request only the information needed to answer an enquiry, manage a booking, provide the activity and comply with legal obligations.

If a booking includes minors, it must be made or authorised by a responsible adult. We will process only the minor’s information needed to organise the activity safely.

3. Purposes and legal bases

We process personal data for the following purposes:

Enquiries and bookings

To answer enquiries, check availability, create, change or cancel bookings, and communicate about the activity.

The legal basis is taking pre-contractual steps at the customer’s request and, once a booking exists, performing the contract.

Safe provision of the activity

To collect the passenger information needed, including age and weight, to organise and provide the activity properly.

The legal basis is performing the contract and taking the measures needed to provide the service safely.

Orders and payments

To manage orders placed through the website, check payment status, issue receipts and meet tax and accounting obligations.

The legal basis is performing the contract and complying with legal obligations.

Customer service through WhatsApp and the virtual assistant

To answer enquiries and manage bookings through a MallorcaFly virtual assistant connected to WhatsApp.

The assistant may use information supplied during the conversation and customer information previously stored to maintain context and avoid asking for the same details repeatedly.

Customers will be told when they are interacting with a virtual assistant and may ask at any time for a member of the team to review their enquiry.

The legal basis is taking pre-contractual steps, performing the contract and MallorcaFly’s legitimate interest in providing efficient customer service.

Security and service improvement

To prevent misuse, detect errors, keep systems secure and improve how the service works.

The legal basis is MallorcaFly’s legitimate interest in protecting its services and ensuring they operate properly.

Marketing communications

To send promotions, news or offers only where the individual has given consent or another valid legal basis applies.

Consent may be withdrawn at any time. We will not send promotional WhatsApp messages without the required authorisation.

4. How the virtual assistant works

MallorcaFly uses an artificial-intelligence system to answer questions and help manage bookings.

The assistant:

  • Does not make decisions that produce legal or similarly significant effects for the customer.

  • Does not automatically issue financial refunds.

  • Refers complex or ambiguous cases, and cases it cannot safely resolve, to the human team.

  • Checks the booking systems before confirming availability or creating, changing or cancelling a booking.

  • Should not request personal information that is not needed to provide the service.

The assistant’s answers may contain errors. Customers may ask a member of the team to check information that is especially important.

5. Recipients and service providers

Data may be processed by technology providers needed to provide the service, including:

  • Meta and WhatsApp, for communications.

  • Artificial-intelligence, automation and process-management providers, such as OpenAI and n8n.

  • Supabase, as a database and infrastructure provider.

  • Stripe and providers connected with WooCommerce, to manage orders and payments.

  • Website hosting, email, security and technical-support providers.

  • Public authorities, courts or other authorities where disclosure is legally required.

These providers will access only the data needed to deliver their services and must apply the relevant contractual and security safeguards.

Some providers may process data outside the European Economic Area. In those cases, legally required safeguards will be applied, such as adequacy decisions or standard contractual clauses approved by the European Commission.

MallorcaFly does not sell or rent personal data.

6. Data retention

Data will be kept for as long as necessary to fulfil the purpose for which it was collected:

  • The assistant’s operational memory is automatically deleted after 30 days.

  • Human-support requests and their context may be kept for up to 12 months after resolution.

  • Customer records will be kept while a business relationship exists and afterwards for the periods needed to address potential liabilities.

  • Bookings will be kept during the contractual relationship and for the applicable statutory periods.

  • Tax, accounting and invoicing records will be kept for the periods required by law.

  • Data used for marketing communications will be kept until consent is withdrawn or an unsubscribe request is made.

When data is no longer needed, it will be erased, anonymised or restricted for the periods during which legal liabilities may arise.

7. Your rights

You may request:

  • Access to your data.

  • Correction of inaccurate data.

  • Erasure of your data where applicable.

  • Restriction of processing.

  • Objection to processing.

  • Data portability, where applicable.

  • Withdrawal of consent, without affecting processing carried out beforehand.

To exercise these rights, write to mallorcafly@gmail.com and describe your request. MallorcaFly may request reasonable information to verify your identity.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD):

https://www.aepd.es

8. Security

MallorcaFly applies appropriate technical and organisational measures to protect data against loss, alteration, unauthorised access or improper disclosure.

Access to systems is limited to people and providers who need it to perform their duties. However, no system connected to the Internet can guarantee absolute security.

9. Cookies

The website uses cookies that are necessary for its operation and, where applicable, analytics or advertising cookies.

Non-essential cookies will be used only after consent has been obtained through the settings panel. You can find out more and change your preferences in the Cookie Policy.

10. WhatsApp communications

When a customer contacts MallorcaFly through WhatsApp, their telephone number, visible name and messages are processed to answer the enquiry or manage the booking.

WhatsApp may also process certain data under its own terms and privacy policy. Customers may stop using this channel and contact us by email instead.

If a customer asks not to receive further marketing communications through WhatsApp, MallorcaFly will comply with that request.

11. Changes to this policy

MallorcaFly may update this Privacy Policy to reflect legal or technological changes or changes to its services.

The current version will always be available on this page, together with its update date.

12. Contact

For any questions about privacy or the processing of personal data, contact MallorcaFly at:

mallorcafly@gmail.com