Experiences
Cruise Guests
Events
The Boat
About
Contact
Book Now
en|es|de

Privacy Policy

Last updated: October 2026

1. Data Controller

The data controller for this website is Omare Yachting Ltd., the operator of SailPalma. Contact: info@sailpalma.com

2. Data We Collect

When you use this website, we may collect the following data:

  • Contact information provided when booking or enquiring (name, email, phone)
  • Booking details (date, number of guests, experience type)
  • Usage data collected automatically by our hosting provider (IP address, browser type, pages visited)
  • Only with your consent: usage and event data (e.g. pages visited, clicks on WhatsApp/email, booking steps), device and browser information, approximate location (country/region) and cookie identifiers (see section 7)

3. How We Use Your Data

We use your data solely to:

  • Process and confirm your booking
  • Respond to your enquiries
  • Send essential booking information and updates
  • Improve our website and services
  • Measure how our website is used and optimise our advertising (with your consent)

We do not sell or rent your personal data. We only share data with analytics and advertising services (section 7) if you have given your consent.

4. Legal Basis

We process your data to perform a contract (Article 6(1)(b) GDPR) when you make or request a booking. For answering general enquiries and operating the website securely we rely on our legitimate interest (Article 6(1)(f) GDPR). We only use analytics and marketing cookies with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

5. Data Retention

We retain booking data for a period of 7 years to comply with applicable tax and accounting regulations. Contact and enquiry data is deleted after 24 months if no booking has been made.

6. Your Rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention obligations)
  • Object to processing
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at info@sailpalma.com

7. Cookies, Analytics and Marketing

Necessary: We store your cookie choice in the cookie sp_cookie_consent (12 months). This cookie is technically required and does not need consent.

Superchat chat widget: For enquiries via chat and WhatsApp we embed the Superchat chat widget (SuperX GmbH, Prenzlauer Allee 242-247, 10405 Berlin, Germany). When the page loads, technical data (e.g. IP address, browser information) is transmitted to Superchat. If you message us through the widget, Superchat processes your messages and contact details on our behalf; if the conversation takes place on WhatsApp, WhatsApp Ireland Ltd. also processes this data. The legal basis is our legitimate interest in communicating quickly with prospective guests (Article 6(1)(f) GDPR) or steps prior to entering into a contract (Article 6(1)(b) GDPR).

Only if you click “Accept” in the cookie banner do we load the following services:

Google Analytics 4: (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) Audience measurement: which pages are visited, which campaigns bring visitors and which enquiries and bookings result. Cookies: _ga, _ga_<ID>, stored for up to 2 years. Google Analytics 4 does not store IP addresses.

Meta Pixel: (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) We measure whether visitors from our Facebook/Instagram ads make an enquiry or booking, and optimise our ads. Cookie: _fbp, stored for 3 months. Meta may link this data to your Meta account.

OpenAI Ads Measurement: (OpenAI) We measure whether visitors from ads on OpenAI make an enquiry.

Bokun booking system: (Bokun ehf., Iceland) Online bookings are handled through Bokun’s embedded booking widget. Bokun processes the data you enter when booking on our behalf to handle the booking (Article 6(1)(b) GDPR). The widget only sends booking steps (tour viewed, cart, purchase) to Google Analytics and Meta with your consent.

Transfers to the USA: Google, Meta and OpenAI may process data in the USA. Google and Meta are certified under the EU-US Data Privacy Framework. For transfers not covered by it, EU Standard Contractual Clauses apply.

Withdrawal: You can withdraw your consent at any time by deleting the cookies for this website in your browser settings. The cookie banner will then appear again on your next visit.

8. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. The current version will always be available at sailpalma.com/privacy.