Privacy policy

At 8 Mares we process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Here we explain what data we collect, what we use it for and what rights you have.

1. What data we collect

• Contact form: first name, surname, email, phone number and the content of your message.
• Bookings: first name, surname, email, phone number, number of passengers and the rental details.
• Payment: the deposit payment is processed through Stripe; 8 Mares does not store your card details.
• Browsing: site usage data through cookies (see the cookie policy).

2. What we use it for and on what basis

• Managing your booking and the rental contract (performance of a contract).
• Answering your enquiries (consent and/or legitimate interest).
• Complying with legal obligations regarding tax and maritime safety.
• Measuring website usage and advertising through Google Analytics and Google Ads (consent).

3. Who we share your data with

We do not sell your data. It is only shared with the providers we need to deliver the service, acting as data processors: Stripe (payment processing), Google (analytics and advertising), and our web hosting and transactional email providers. Some of these providers may be located outside the European Economic Area, in which case the processing is covered by standard contractual clauses approved by the European Commission.

4. How long we keep it

Booking data is kept for the periods required by tax and commercial regulations. Contact data is kept while an active relationship exists or until you request its deletion.

5. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to hola@8mares.es, stating the right you wish to exercise. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Security

We apply appropriate technical and organisational measures to protect your data: encrypted communication (HTTPS), PCI-DSS certified payment processing through Stripe and restricted access to personal information.