Privacy and Booking Information

Notice version: 2026-09-14. The data controller is Navitech Spain / Boat Charter Málaga. Contact the controller or exercise your rights at navitechspain@gmail.com.

Booking data and purpose

We process your name, email address, phone number, group size, requested date, duration and start time, optional notes, language, verification and reservation status, booking reference, cancellation status, and limited technical anti-abuse information. We also record acknowledgment of this notice and its version and acceptance of the cancellation policy. We do not request or store payment-card, bank-account, or other payment data on this website.

These data are used to check availability, receive and verify a request, communicate with you, add a confirmed reservation to the operator's calendar, provide and administer the charter, prevent abuse, and handle cancellation.

Legal basis

Booking processing is necessary to take steps at your request before entering a contract and, once confirmed, to perform the charter contract. Records may also be retained where necessary to comply with legal obligations or establish, exercise, or defend legal claims. Checking the required privacy box acknowledges that you received this notice; it is not consent to booking processing or marketing.

Retention

Unverified or expired requests are deleted after 7 days. Confirmed and cancelled booking records are retained for 365 days, unless a longer period is necessary for an applicable legal obligation or the establishment, exercise, or defence of a legal claim. Anti-abuse records are limited to what is necessary to protect the service.

Providers and recipients

Service providers process data only as needed for their function. Categories and services include the website/API hosting provider; Google Calendar, where each booking event includes the customer's name, phone, email, guest count, duration, price, language, comments, and reference so authorized people can manage the departure; Gmail or the configured SMTP provider for transactional email; and Cloudflare Turnstile for anti-abuse checks. Form data are not sold or made public.

Optional analytics and external content

Google Analytics is optional and loads on the main EN/ES pages only after you accept it in the analytics banner. You can later reopen “Analytics settings” in the footer and withdraw by selecting “Decline”; future Analytics collection is disabled and accessible Analytics cookies are removed. Booking analytics events contain no booking fields or other personal details.

The site embeds Google Maps and loads Google Fonts and Lucide icons from external providers. Connecting to these resources discloses technical request data such as your IP address and browser information to those providers. These providers may process data outside the European Economic Area. The level of protection may differ by country; no guarantee beyond the provider's applicable terms and legally required transfer mechanism is made here.

Your rights and complaints

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing by emailing the controller. You may also complain to the Spanish Data Protection Agency (AEPD) through www.aepd.es.

Cancellation policy

Automatic cancellation is available until 24 hours before departure using the reservation management link. Weather-related decisions are handled by the operator. Contact the operator if the automatic option is unavailable or for exceptional circumstances.