Privacy Policy

1. Who Is Responsible for Your Personal Data?

PREMIUM YACHTS SPAIN, S.L. operates the All Yacht Service brand and is the controller responsible for the personal data described in this notice.

This includes personal data submitted through Contact forms, email, WhatsApp, attachments, enquiry communications, quotation requests and calculator-to-Contact transfers.

Data controller and legal operator

PREMIUM YACHTS SPAIN, S.L.

Legal form

Sociedad de Responsabilidad Limitada (S.L.)

Trading name

All Yacht Service

Contact address

Edificio Timonel, Local 73, Puerto Deportivo Luis Campomanes / Marina Greenwich, 03599 Altea, Alicante, Spain

Email

info@allyachtservice.com

Phone

+34 695 718 540

Website

https://www.allyachtservice.com

2. What Personal Data We Collect

The online enquiry form requires your name, email address, message and an acknowledgement that you have read this Privacy Policy. You may also provide a phone or WhatsApp number, requested service, vessel type, vessel length, vessel location, preferred date and uploaded files.

We may also receive information you include voluntarily in messages, yacht-listing URLs, survey or yacht-delivery calculator summaries, estimate references, technical security information generated during submission, subsequent email correspondence, and business records created if you instruct a service.

Do not upload identification documents, financial information, medical information or other unnecessary sensitive personal data unless specifically requested through an agreed secure process.

3. Calculator Data

Survey and delivery calculator results are initially saved in your browser’s sessionStorage. The website validates a stored result for up to 24 hours, while the storage itself is limited to the browser session. These records contain route, vessel, option and estimate information, but no Contact-form name, email, phone or message.

Calculator data is brought into the Contact form only when you request a quotation. Refreshing a calculator or policy page does not submit an enquiry. sessionStorage is not a cookie, and you may remove a transferred summary before sending the form. Anyone with access to your browser session or device may be able to see locally stored information.

4. How We Use Personal Data

• Responding to enquiries and preparing quotations.
• Taking steps you request before a service agreement.
• Arranging surveys, inspections and yacht-delivery work.
• Communicating about and delivering an instructed service or report.
• Reviewing uploaded documents, yacht links and images.
• Maintaining relevant business and correspondence records.
• Preventing spam, abuse and security incidents.
• Establishing or defending legal claims and meeting legal obligations.

All Yacht Service does not currently use Contact-form information for email marketing.

5. Legal Bases

Depending on the circumstances, processing may be necessary to take steps you request before entering a contract, to perform an agreed contract, or to comply with a legal obligation. Processing may also rely on legitimate interests in answering business enquiries, operating and securing the website, maintaining proportionate records, preventing abuse and protecting legal rights, balanced against your interests and rights.

Consent is used only where a genuinely optional activity requires it. The required acknowledgement beside the Contact form records that this notice was presented; it does not make consent the legal basis for every enquiry.

6. Required and Optional Information

Name, email, message and the privacy-notice acknowledgement are required for an online enquiry. Optional fields help prepare a more relevant response. You may instead contact us by phone, WhatsApp or email. Without essential information, we may be unable to assess a request or prepare a quotation.

7. Attachments

The form accepts up to three PDF, JPEG, PNG or WebP files. Each file may be no larger than 2 MB, and all files together may be no larger than 3 MB. File type, extension, size and signature are checked by the server, and accepted files may be delivered with the enquiry email.

You must have authority to share submitted material. Uploading does not transfer ownership. Remove unnecessary personal information before uploading and use an agreed secure process if sensitive material is specifically required.

8. Service Providers and Recipients

Information may be handled by:

• Cloudflare for website delivery, security and Turnstile.
• Google Workspace for email delivery and mailbox storage.
• Technical providers necessary to operate or secure the website.
• Professional advisers where necessary.
• Survey, repair or specialist professionals where you instruct or authorise this.
• Public authorities where disclosure is legally required.

All Yacht Service and Premium Yachts Spain are separate commercial brands and service areas operated by PREMIUM YACHTS SPAIN, S.L.. Access to enquiry and service information is limited according to its purpose and the relevant professional role.

9. Cloudflare Turnstile

Turnstile protects the Contact form from automated abuse. Browser-based checks produce a verification token which the server validates with Cloudflare before accepting the enquiry. Cloudflare may process technical browser, device, network and interaction signals for this purpose. All Yacht Service does not use Turnstile for advertising.

The Contact page uses Cloudflare’s implicit widget rendering with the action contact and a light theme. The repository does not set an invisible or non-interactive mode and does not configure pre-clearance; the widget type and account-level pre-clearance setting must be confirmed in the Cloudflare dashboard before production. Storage behaviour can vary with that configuration, so this policy does not claim Turnstile is cookie-free in every possible setup.

Read Cloudflare’sTurnstile Privacy Addendum (external link).

10. Google Workspace

Form submissions are delivered toinfo@allyachtservice.com. Email content and attachments may be stored in the Google Workspace mailbox and accessed by authorised mailbox users. Google processes this data under the applicable service and data-processing terms. No particular Google data region or transfer mechanism is asserted here because the account and contract settings require confirmation.

See Google’s currentCloud Data Processing Addendum (external link).

11. International Data Transfers

Some service providers may process or support personal data from locations outside the European Economic Area. Where required, transfers are handled using applicable contractual or legal safeguards made available by the relevant provider.

12. Data Retention

• General enquiries that do not become assignments are retained for up to12 months after the last substantive contact.
• Unsuccessful quotations are retained for up to 12 months after the quotation expires or the last substantive contact, whichever is later.
• Client and service records are retained for the duration of the professional relationship and afterwards for the periods necessary to comply with applicable accounting, tax, contractual, professional and legal-claims obligations. Access is restricted once the active engagement has ended.
• Security and anti-abuse records are normally retained for up to 12 months, unless longer retention is necessary to investigate an active incident, establish or defend legal claims, or comply with a legal obligation.

Attachments follow the retention of the enquiry, mailbox correspondence or instructed-service record to which they relate. Records may be kept longer where a legal, tax, accounting, limitation-period or legal-claims duty requires it. Retention is based on whether an enquiry becomes an assignment, the record’s purpose, report-reliance considerations, security needs and mandatory record-keeping duties.

13. Security

Appropriate technical and organisational measures are used to reduce unauthorised access, alteration, loss or disclosure. Verified controls include HTTPS, server-side input and file validation, Turnstile, file restrictions, restricted mailbox access and credentials stored in deployment environment settings. No method of transmission or storage can guarantee absolute security.

14. Your Rights

Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection and data portability. You may withdraw consent where consent is the legal basis, without affecting earlier lawful processing. Contactinfo@allyachtservice.com. Reasonable identity verification may be requested before acting on a request.

You may also complain to theSpanish Data Protection Agency (AEPD) (external link).

15. Automated Decision-Making

All Yacht Service does not use Contact-form information for automated decision-making or profiling that produces legal or similarly significant effects. Calculator outputs are automated estimates, but do not decide whether a service is accepted and do not constitute a quotation or contract.

16. Third-Party Links

External websites, including the Premium Yachts Spain brokerage website and social networks, control their own content and privacy practices. Review their notices before submitting information through those sites.

17. Changes to This Policy

This notice may be updated when website functions, providers or legal requirements change. The review date at the top will be updated when a material revision is made.