Privacy notice

1. Controller and contact

Nautic Schwartz S.L. (CIF B-57353450), trading online as Boats for Sale Mallorca, Carretera des Port d’Andratx 63, 07150 Andratx, Illes Balears, Spain. Email: sales@tot-nautic.com. Telephone: +34 971 235 460.

For privacy questions or to exercise a data-protection right, email sales@tot-nautic.com with “Privacy” in the subject line.

2. Information we collect

Depending on how you contact us, we may collect the following:

• Identity and contact details such as name, email address, telephone number and preferred contact method.
• Enquiry details, the vessel of interest, viewing preferences, messages and correspondence.
• Seller information about a vessel, including make, model, year, condition, location, price expectations, VAT status and mooring information.
• Consent records and marketing preferences.
• Technical and provenance data such as page URL, referrer, campaign parameters, submission time, browser security signals and essential session-storage state.
• Records needed to progress a potential transaction, including identification, ownership, registration, tax, finance and payment information when requested at a later contractual stage.

3. Purposes and legal bases

We use personal information only where a lawful basis applies.

• To answer enquiries, arrange viewings and take steps requested before a possible contract: performance of pre-contractual measures.
• To provide brokerage or coordination services and administer a transaction: performance of a contract.
• To prevent spam, secure the website, maintain records, improve enquiry handling and protect legal claims: legitimate interests, balanced against your rights.
• To meet tax, accounting, anti-fraud, court or regulatory obligations: legal obligation.
• To send occasional relevant boat updates only where you have actively opted in: consent, which may be withdrawn at any time.

4. Required information and sources

Fields marked as required are needed to respond safely and meaningfully. If they are not provided, we may be unable to handle the request. We generally receive information from you, but may also receive vessel and transaction information from an owner, authorised representative, manufacturer, partner, public registry or professional adviser.

5. Who receives information

Information is accessed only on a need-to-know basis. It may be shared with website hosting, email, CRM, IT-security and professional service providers acting under appropriate obligations; with an owner, buyer or authorised brokerage partner where needed for the enquiry; and with surveyors, lawyers, tax advisers, finance or insurance contacts, marinas or logistics providers when you ask us to coordinate an introduction.

We do not sell personal information. We may disclose it where required by law, court order or a competent authority, or to establish, exercise or defend legal claims.

6. International transfers

Some communications or technology providers may process data outside the European Economic Area. Where that occurs, we use an available lawful transfer mechanism, such as an adequacy decision, approved standard contractual clauses and supplementary safeguards where appropriate. WhatsApp and any linked third-party platform process information under their own privacy terms.

7. Retention

General enquiries that do not progress are normally retained for up to 24 months so we can follow up and understand prior correspondence. Marketing preferences are retained until consent is withdrawn or the contact becomes inactive. Transaction, tax, accounting, compliance and dispute records may be retained for the statutory limitation or record-keeping period, commonly up to six years or longer where Spanish law requires it.

Spam, security and suppression records may be kept for as long as reasonably needed to protect the service or honour an opt-out. Data is deleted or anonymised when no longer required.

8. Your rights

Subject to the GDPR and Spanish data-protection law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. You may also object to direct marketing at any time.

We may request information to verify identity before acting. If you are dissatisfied, you can complain to the Agencia Española de Protección de Datos (AEPD) at aepd.es or to the supervisory authority where you live or work.

9. Security, children and automated decisions

We use reasonable technical and organisational measures designed to protect personal information. No internet service can guarantee absolute security, so please do not send sensitive documents through an unsecured channel unless requested and an appropriate method has been agreed.

The service is intended for adults and is not directed to children. We do not use enquiry data for solely automated decisions that produce legal or similarly significant effects.

10. Updates

We may update this notice when our services, providers or legal obligations change. Material changes will be reflected on this page and identified by the updated date.