Privacy policy

1. Who is responsible for your data

The data controller is the owner of this website. For any data protection question, write to us at the email address below with the subject "Data protection".

Trade name

Mallorca Local Dudes

Owner / company

[Legal name of the owner or company — to be completed]

Tax ID (NIF/CIF)

[NIF / CIF — to be completed]

Registered address

[Registered address, postcode, Palma de Mallorca, Illes Balears, Spain — to be completed]

Registry details

[Registro Mercantil de Palma de Mallorca, volume, folio, sheet — to be completed, or delete if self-employed]

Email

[email protected]

Phone

[Phone number — to be completed]

Website

https://mallorcalocaldudes.com

2. What data we collect

We only collect the data we need:

• Contact form: your name, email address, phone number (optional), country of origin (optional), the service you are interested in and your message, plus the date and time you accepted this policy and the version you accepted.
• Clients: if you hire us, the identification, contact, family, housing, employment and financial data needed to carry out the paperwork and services you request (for example, passport data to apply for an NIE).
• Technical data: our hosting provider processes your IP address and basic request data in server logs to deliver the website and protect it against abuse.

3. Why we use your data and on what legal basis

• To reply to your enquiry and prepare a proposal — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To provide the relocation or property care services you hire — performance of a contract (Art. 6(1)(b) GDPR).
• To keep invoices, accounting records and any documentation required by law — compliance with legal obligations (Art. 6(1)(c) GDPR), including tax, commercial and, where applicable, anti-money-laundering law.
• To keep evidence that you were informed about this policy — compliance with our accountability obligation (Arts. 5(2) and 6(1)(c) GDPR).
• To keep the website secure and filter spam — our legitimate interest in protecting our systems (Art. 6(1)(f) GDPR).

4. Marketing

We do not send newsletters or commercial messages unless you have asked for them or given your separate, explicit consent. You can withdraw consent at any time with one click or by email.

5. Sensitive information

Please do not include health information or other special categories of data in the contact form. If a procedure requires such data (for example, a medical certificate for a residence permit), we will only process it with your explicit consent and only for that procedure.

6. How long we keep your data

• Enquiries that do not lead to a contract: deleted 12 months after our last contact with you.
• Clients: for as long as the business relationship lasts, and afterwards blocked and kept only for as long as the law requires (generally 6 years for accounting records under the Spanish Commercial Code, 4 years for tax purposes, and up to 10 years where anti-money-laundering law applies).
• Server logs: kept by our hosting provider for a short period for security purposes only.

7. Who we share your data with

We never sell your data. We only share it with service providers that process it on our behalf under a data processing agreement, or with third parties when this is necessary to provide the service you have asked for:

• Netlify, Inc. (USA) — website hosting, database, contact form handling and image delivery.
• Google (Google Ireland Ltd. / Google LLC) — email inbox where we receive and answer enquiries.
• WhatsApp (Meta Platforms Ireland Ltd.) — only if you choose to talk to us via WhatsApp.
• Public administrations, notaries, gestorías, lawyers, landlords, estate agents, schools and other providers — only when needed to carry out the procedure or service you have instructed us to handle.
• Courts and authorities — when we are legally required to do so.

8. International transfers

Some of our providers are based in, or may access data from, the United States. These transfers are covered by the European Commission adequacy decision for the EU–US Data Privacy Framework (10 July 2023) for certified companies and, where needed, by the European Commission Standard Contractual Clauses.

9. Your rights

You can exercise the following rights at any time, free of charge, by emailing us (we may ask you to prove your identity). We will reply within one month.

• Access your data and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your data when it is no longer needed or was processed unlawfully.
• Restrict or object to processing, including processing based on legitimate interest.
• Data portability: receive your data in a structured, machine-readable format.
• Withdraw your consent at any time, without affecting earlier processing.
• Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es) or the supervisory authority of your country of residence.

10. Is providing data mandatory?

The fields marked as required in the contact form are necessary to answer you. If you do not provide them, we will not be able to process your enquiry. Optional fields help us prepare a better answer.

11. Automated decisions and minors

We do not make decisions based solely on automated processing and we do not create profiles.

Our services are aimed at adults. Persons under 14 years of age may not send us their data; data about children (for example, for a school enrolment) must be provided by their parents or legal guardians.

12. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), access restricted to the people who need it, and providers that offer GDPR guarantees.

13. Changes to this policy

We may update this policy to reflect legal or operational changes. The date of the last update is shown at the top of this page, and we record which version you accepted when you contacted us.