Privacy policy

• Owner: Bryan Aaron Bond García
• Tax ID (NIF): 23310274G
• Address: Calle Dos de Mayo nº 60, 30001 Murcia, España
• Email: info@bondsjet.com
• Phone: +34 682 248 676

• Identification data: name, surname, ID document, date of birth.
• Contact data: postal address, email, phone.
• Booking data: date and time of service, vessel, passengers, nautical licence if applicable.
• Billing data for invoicing and payment processing.
• Browsing data: IP address, browser, pages visited, language and cookies (see Cookie policy).
• User account: email and hashed password when the user registers.

• Non-contractual enquiries: up to 12 months from the last interaction.
• Contractual data: during the relationship and afterwards for the legal periods (4 years for tax, 5 years for personal claims, 6 years for accounting books — Spanish Commercial Code).
• Marketing data: until the user withdraws consent.
• Browsing data: as stated in the Cookie policy.

We rely on the following processors, with whom we have signed art. 28 GDPR agreements:

• Cloudflare, Inc. — hosting and CDN (USA).
• Lovable Cloud (managed infrastructure powered by Supabase) — database, authentication and storage (EU).
• Google LLC — Google Maps and, where applicable, Google Analytics (USA).
• Meta Platforms Ireland Ltd. — WhatsApp button and, where applicable, Meta Pixel.
• Tax adviser, insurer and banking entities for invoicing and payments.
• Public authorities (Capitanía Marítima, Spanish Tax Agency, Social Security) when legally required.

Personal data is not sold or shared with third parties for commercial purposes.

Some of the above processors (Cloudflare, Google, Meta) may process data in the United States. These transfers rely on the EU-U.S. Data Privacy Framework adopted by the European Commission on 10 July 2023 and/or on Standard Contractual Clauses (Decision 2021/914) with additional safeguards.

Users may exercise the following rights at any time:

• Access to personal data.
• Rectification of inaccurate data.
• Erasure when data is no longer necessary.
• Objection to processing on grounds related to your particular situation.
• Restriction of processing in legally provided cases.
• Portability to another controller in a structured format.
• Withdrawal of consent at any time.
• Not to be subject to automated decisions with significant legal effects.

To exercise these rights, write to Calle Dos de Mayo nº 60, 30001 Murcia, España or to info@bondsjet.com with «Data protection» in the subject line and a copy of an identification document.

Users have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, or through www.aepd.es, especially if they consider that their rights have not been satisfied.

The Controller applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including HTTPS/TLS encryption, access control, robust authentication, activity logging and periodic backups.

The Website is not directed to children under 14. Personal data of children under that age will not be knowingly collected or processed without verifiable consent of their parents or legal guardians.

The Controller may amend this Privacy Policy to reflect legal, jurisprudential or service changes. Updates will be published on the Website with the date of the latest version.