Privacy Policy

Empire Yaching and its affiliated entities, brands, and domains (collectively, "Empire Yachting", "we", "our" or "us") are commited to protecting your privacy and handling your personal data responsibly. This Privacy Notice applies to all users of our websites, applications, sotiware platiorms, and physical premises (collectively, the "Services"). Please note that certain Services may be subject to additional privacy terms, which will be provided upon engagement.

By accessing or using our Services, whether from Spain, the European Union, the United Kingdom, the United States, Canada, or any other applicable jurisdiction, you agree to this Privacy Notice. This document outlines how we collect, use, store, transfer, and disclose your personal data ("Your Data"), in compliance with applicable data protection laws including, but not limited to:

The EU General Data Protection Regulation ("EU GDPR");
The Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights ("LOPDGDD");
The UK GDPR and the UK Data Protection Act 2018;
The California Consumer Privacy Act ("CCPA") and Virginia Consumer Data Protection Act ("VCDPA");
Canada’s Personal Information Protection and Electronic Documents Act ("PIPEDA").

1. Data Controller

Empire Yachting is the Data Controller (under GDPR and UK GDPR) and the Business (under LOPDGDD and similar laws) responsible for Your Data.

2. How We Collect Your Data

We may collect Your Data:

When you browse or interact with our website
When you express interest in our services or participate in events
When you become a client
When you provide services to us
When you contact us directly
When you interact with our social platforms
When we obtain information from third-party brokers or partners
When you visit our offices

3. Categories of Data We Collect

Identifying Data: Name, email, phone number, address
Financial Information: Billing and payment details
Technical Data: IP address, browser type, device ID, access logs
Usage Data: Page visits, activity history, clickstream data
Communication Records: Calls, emails, and chat logs (if applicable)
Location Data: If you enable location tracking on your device
Social Data: Public social media content if you connect platforms

Some data may be collected or processed by third-party providers on our behalf, such as CRM and payment processors.

4. Cookies and Tracking

We use cookies, web beacons, and similar technologies to personalize content, analyse traffic, and deliver advertisements. For full details, refer to our Cookie Notice.

5. How We Use Your Data

We use Your Data to:

Provide, maintain, and improve our Services
Process transactions and deliver confirmations
Respond to inquiries and support requests
Send administrative and promotional communications
Comply with legal obligations
Detect and prevent fraud and security threats
Customize user experiences and deliver targeted content
Facilitate marketing, events, surveys, and promotions

6. Legal Bases for Processing (LOPDGDD/ GDPR/UK GDPR)

We rely on the following legal grounds:

Consent
Contractual necessity
Legal obligations
Legitimate interests

7. Sharing Your Data

We may share Your Data:

With your consent
With service providers performing tasks on our behalf (under contractual safeguards)
With business partners to deliver co-branded or joint services
As required by law, or to protect our rights and interests
In connection with business transfers such as mergers or acquisitions We may also share de-identified or aggregated data that cannot reasonably be used to identify you.

8. International Transfers

Where required, we implement safeguards (e.g., Standard Contractual Clauses) for transferring Your Data outside the EU/UK.

9. Data Retention

We retain Your Data only for as long as necessary:

For transactions: typically 12–24 months
For service providers: up to 7 years post-engagement
For marketing suppression: indefinitely unless you request deletion
For legal and tax compliance: as required by applicable law

10. Your Rights

Depending on your jurisdiction, you may have rights to:

Access and request a copy of Your Data
Correct inaccurate information
Request deletion ("Right to be Forgoten")
Restrict or object to processing
Withdraw consent
Data portability
Lodge a complaint with a supervisory authority

Residents of California and Virginia may have additional rights under the CCPA/VCDPA, including the right to:

Know what data we collect
Opt out of sale or sharing
Non-discrimination for exercising privacy rights

11. Security

We implement appropriate technical and organizational measures to safeguard Your Data. However, no system is entirely secure.

12. Children’s Privacy

Our Services are not intended for users under the age of 13, and we do not knowingly collect data from children.

13. Updates to This Notice

We may revise this Privacy Notice periodically. If changes are material, we will notify you through our website or direct communication. We encourage you to review this Notice regularly.

14. Contact Information

If you have any questions or wish to exercise your rights, contact: Empire Yachting - Data Protection Officer
Joan Miró 327 Local 4, Port Calanova
07015, Palma de Mallorca, Spain or
contact@empire-yachting.com.

This Privacy Notice was last revised on: May 2025