Sailing Alisios Last updated: March 2026

1. WHO WE ARE

This website is operated by Sailing Alisios, a sailing charter and experience company based in the Canary Islands, Spain.

Data controller contact: Sailing Alisios [Registered address, Spain] info@sailingalisios.com, +34 630 24 82 11

If you have any questions about how we handle your personal data, or wish to exercise any of your rights under applicable law, the above contact details are the right place to start.

2. WHAT THIS POLICY COVERS

This Privacy Policy explains how Sailing Alisios collects, uses, stores, and protects the personal data of visitors to our website (sailingalisios.com) and anyone who submits an enquiry or books a trip with us.

We are committed to handling your personal data responsibly and in compliance with:

• The EU General Data Protection Regulation (GDPR)

• Spain's Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD 3/2018)

• The ePrivacy Directive (EU Cookie Law)

3. WHAT DATA WE COLLECT AND WHY

We only collect data that is necessary for running our business and providing you with a good experience. Here is what we collect and why:

Enquiry and booking data. When you submit an enquiry form on our website, we collect your name, email address or WhatsApp number, and any information you choose to include in your message. We use this to respond to your enquiry and, if you proceed, to arrange your trip booking.

Booking and participant data. If you book a trip with us, we collect additional information needed to confirm and manage your booking — including payment information (processed securely via our payment provider), dietary requirements if provided, and emergency contact details. We process this data on the basis of contractual necessity.

Website usage data Our website automatically collects certain technical data when you visit, including your IP address, browser type, device type, pages visited, and time spent on the site. This is collected via cookies and analytics tools (see Section 6) and is used to understand how our website is used and to improve it.

Email communications If you opt in to receive updates or communications from us, we collect your email address for that purpose. You can unsubscribe at any time via the link in any email we send.

4. LEGAL BASIS FOR PROCESSING YOUR DATA

Under GDPR, we are required to have a lawful basis for processing personal data. Depending on the context, we rely on the following:

• Contractual necessity — processing required to fulfil your booking or respond to a pre-contractual enquiry

• Legitimate interests — improving our website and communicating with prospective customers in ways they would reasonably expect

• Consent — where you have explicitly opted in, such as to receive email updates

• Legal obligation — where we are required to retain certain records under Spanish or EU law

5. HOW WE STORE AND PROTECT YOUR DATA

Your data is stored securely on password-protected systems. Our website uses SSL (Secure Socket Layer) encryption, indicated by the padlock symbol in your browser address bar.

We retain enquiry data for up to 24 months from the date of your last contact with us. Booking records are retained for up to 7 years in compliance with Spanish tax and accounting obligations. After these periods, data is securely deleted.

We do not sell your personal data to any third party. Ever.

6. COOKIES

Our website uses cookies — small text files stored on your device — to make the site work properly and to understand how it is used.

The types of cookies we use:

Essential cookies — required for the website to function. These cannot be disabled.

Analytics cookies — we use Google Analytics to understand how visitors use our website. This data is anonymised and aggregated. It helps us improve the site. You can opt out of Google Analytics tracking via Google's opt-out tool.

Functional cookies — used to remember your preferences across visits.

When you first visit our website, you will be presented with a cookie consent banner. You can accept all cookies, manage your preferences, or decline non-essential cookies at that point. You can also update your cookie preferences at any time via the cookie settings link in our website footer.

7. THIRD-PARTY SERVICES

We use a small number of trusted third-party services to operate our website and business. These may process your data on our behalf:

Google Analytics — website analytics. Data is processed in accordance with Google's Privacy Policy. We have enabled IP anonymisation.

Squarespace — our website platform. Squarespace may process technical data as part of hosting and delivering our website. See Squarespace's Privacy Policy for details.

Email platform — if you subscribe to communications from us, your email address is stored with Mailerlite. You can unsubscribe at any time.

We do not use display advertising networks or sell data to advertisers.

8. YOUR RIGHTS UNDER GDPR

As a resident of the EU or EEA, you have the following rights regarding your personal data:

Right of access — you can request a copy of the personal data we hold about you.

Right to rectification — you can ask us to correct inaccurate or incomplete data.

Right to erasure — you can ask us to delete your personal data, subject to any legal obligations we have to retain it.

Right to restriction — you can ask us to limit how we use your data in certain circumstances.

Right to data portability — you can request your data in a structured, machine-readable format.

Right to object — you can object to our processing of your data where we rely on legitimate interests as our legal basis.

Right to withdraw consent — where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email address]. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with Spain's data protection authority:

Agencia Española de Protección de Datos (AEPD)www.aepd.es C/ Jorge Juan, 6, 28001 Madrid, Spain

9. INTERNATIONAL DATA TRANSFERS

Some of our third-party service providers may process data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place — including Standard Contractual Clauses approved by the European Commission — to protect your data in line with GDPR requirements.

10. CHILDREN'S PRIVACY

Our trips are designed for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. LINKS TO OTHER WEBSITES

Our website may contain links to third-party websites — for example, our Instagram profile. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies independently.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will always show when it was last updated. Continued use of our website after any changes constitutes acceptance of the updated policy.

13. CONTACT US

For any questions about this Privacy Policy or how we handle your data:

Sailing Alisios [Address], info@sailingalisios.com, +34 630 24 82 11