1. Introduction

Welcome to MajorcaDirect.com. This Privacy Policy explains how Discover & Experience Ltd ("we", "us", "our") collects, uses, and protects your personal data. We act as a local marketplace connecting travelers with property owners in Mallorca. We are committed to transparency and the security of your information in accordance with the General Data Protection Regulation (GDPR) and the Spanish LOPDGDD.

2. The Data Controller

The legal entity responsible for your personal data is:

• Legal Entity: Discover & Experience Ltd
• Registered Address: 267 Carrer Vicari Joaquim Fuster, 07007, Palma, Islas Baleares, España.
• Contact Email: [email protected]

3. Data We Collect

We collect information categorized into two main profiles:

A. For Travelers (Guests)

• Identity & Contact: Name, email, phone number, and billing address.
• Official Documentation: Passport or NIE details (Required by Spanish law for police registration).
• Booking Details: Travel dates, number of guests, and special requirements.
• Payment Information: Processed via secure, encrypted third-party gateways. We do not store full credit card numbers on our servers.

B. For Property Owners & Managers

• Business Identity: Full name or Company name, CIF/NIF, and bank details for payouts.
• Regulatory Data: Mandatory Tourism License Number (ETV/DGT).
• Property Details: Address, coordinates, and high-resolution imagery.

4. Legal Basis for Processing

We process data under the following legal grounds:

1. Performance of a Contract: To facilitate the booking between Guest and Owner.
2. Legal Obligation: To comply with the Ley de Turismo de las Islas Baleares and Order INT/1922/2003 (Reporting guest data to the Policia/Guardia Civil).
3. Legitimate Interest: To prevent fraud, monitor secure communications, and improve our local services.
4. Consent: For marketing communications, which can be revoked at any time.

5. Balearic Islands Specific Provisions

As a Mallorca-based entity, Discover & Experience Ltd strictly adheres to local regulations:

• Police Entry Forms (Parte de Entrada): We or the Property Owner are legally required to collect guest ID data for transmission to Spanish Security Forces.
• Tax Compliance: We may be required to share transaction data with the Agencia Tributaria regarding "Eco-tax" (Sustainable Tourism Tax) collections.

6. Data Sharing & Retention

We do not sell your data. We only share it with the counterparty to a booking, secure service providers (hosting/payments), and legal authorities when mandated.

Retention: Financial and tax records are kept for 5 years as per Spanish law. Police registration data is retained for the legally required period. Account data is kept until a deletion request is made.

7. Your Rights (GDPR)

Under GDPR, you have the right to Access, Rectify, Erase, Object, and Port your data. To exercise these rights, please contact us at the email address provided above. You may also lodge a complaint with the AEPD (Agencia Española de Protección de Datos).