All-Inclusive Concierge Mallorca

Privacy Policy (GDPR)

Last updated: 7 October 2026

1. Controller

The data controller is All-Inclusive Concierge Mallorca, operator of ai-mallorca.com ("we", "us", "the Company"). Contact for all privacy matters: contact@ai-mallorca.com. This policy follows the EU General Data Protection Regulation (GDPR / RODO / DSGVO / RGPD) and Spanish Organic Law 3/2018 (LOPDGDD).

2. Data we collect

Identity and contact data (name, email, phone); property, vehicle or vessel details (address, size, type, access notes); request, booking, approval and payment status; messages to your manager; sign-in data from Google (name, email); technical data (IP address in hashed form, browser, pages visited).

Card details are handled exclusively by our payment provider and never reach our systems. We do not intentionally collect special categories of data; please do not send health or similar information unless a service requires it.

3. Why we use it and legal basis

To answer requests and perform services (contract, Art. 6(1)(b)); to bill and keep accounting records (legal obligation, Art. 6(1)(c)); to keep the platform secure, prevent fraud and improve services (legitimate interests, Art. 6(1)(f)); and for newsletters or marketing only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

We use AI tools to suggest services, translate and match providers. These suggestions are always reviewed by a human manager; no decision with legal effect is taken solely by automated means.

4. Who receives your data

Only what is needed: the vetted provider performing your service (limited to what the job requires), our hosting and database provider, our payment provider, our email provider and AI processing providers acting under data-processing agreements. We never sell personal data.

Some providers may process data outside the EEA; where they do, we rely on EU Standard Contractual Clauses or an adequacy decision.

5. How long we keep it

Account and booking data: for the client relationship and up to 6 years afterwards to meet Spanish tax and commercial-law obligations. Requests that did not lead to a booking: up to 24 months. Signed NDAs: for the duration of the agreement plus the limitation period. Technical logs: up to 12 months.

6. Your rights

You may request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests, by emailing contact@ai-mallorca.com. We reply within one month. You also have the right to complain to the Spanish data-protection authority (Agencia Española de Protección de Datos, aepd.es) or the authority in your country (e.g. UODO in Poland).

7. Security and discretion

Data is encrypted in transit, access is restricted by role, managers sign in with verified accounts, and each client can see only their own data. Staff and providers are bound by confidentiality. High-profile clients may additionally use pseudonyms in our systems on request.

8. Cookies and storage

We use only essential storage needed to run the site (for example your language choice and your sign-in session). We do not use advertising or tracking cookies. If this changes we will ask for your consent first.

Private enquiries

Tell us what you need.

A personal manager replies within the hour, in your language.