Privacy policy
DRAFT DOCUMENT — does not replace review by a legal adviser.
Drafted by an AI agent from a template aligned with the GDPR (Regulation (EU) 2016/679) and the Spanish LOPDGDD (Organic Law 3/2018). This is a courtesy translation: the Spanish version prevails in case of discrepancy.
1. Data controller
In compliance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we inform you who processes your data:
- Controller: Antonio Martínez Navarrete, self-employed professional (trading as “Voltair Ibiza”).
- Tax ID (NIF): 77756650K
- Location: Sant Antoni de Portmany, Illes Balears, Spain.
- Email (also for data protection matters): info@voltairibiza.com
- Website: https://voltairibiza.com
No Data Protection Officer has been appointed, as it is not mandatory for this activity.
2. What data we process and why
This website uses no analytics or tracking tools, embeds no third-party services (maps, videos) and uses no cookies. Personal data is collected only through the contact form, by email and through the server technical logs described in section 2.3.
2.1 Contact form
- Data processed: what you type into the form on the Contact page: name, email, phone number (optional) and message, as well as any information you choose to include in the message (for example, the location of the installation or a description of the need or fault). The form also contains a hidden field that is used only to detect automated submissions (spam) and that a person does not fill in. The form does not allow files to be attached.
- Purpose: to handle your enquiry, assess the need and, where applicable, prepare a quotation or provide the requested service.
- Legal basis: your consent, which you give by ticking the mandatory box accepting the privacy policy and the processing of your data to answer your enquiry (Article 6.1.a GDPR). If the enquiry leads to a quotation or to a service, taking steps at your request prior to entering into a contract and, where applicable, performance of the contract (Article 6.1.b GDPR).
- Retention: if you do not hire us, up to 1 year from the last communication. If you do, for the duration of the relationship and afterwards for the periods required by legal obligations (for example, tax and commercial law, Article 6.1.c GDPR) and the limitation periods for possible liabilities.
Providing your name, email and message, and ticking the acceptance box, is necessary to submit the form; the phone number is optional. Without that data we cannot handle your request.
2.2 Contact by email
- Data processed: what you voluntarily provide when you write to info@voltairibiza.com: your email address, name, phone number, address or location of the installation, description of the need or fault, and any other information or file (for example, photographs) that you choose to send.
- Purpose: to handle your enquiry or call-out, assess the need and prepare a quotation or provide the requested service, including emergencies.
- Legal basis: taking steps at your request prior to entering into a contract and, where applicable, performance of the services contract (Article 6.1.b GDPR). For communications that do not lead to a contract, the legitimate interest in replying to those who contact us (Article 6.1.f GDPR).
- Retention: the same as in section 2.1.
Providing this data is voluntary, but without it we cannot handle your request.
2.3 Server technical logs and abuse control
- Data processed: IP address, date and time of access, pages requested and browser type (user agent), which the hosting provider records automatically when serving the website. In addition, to prevent abuse of the form, the server keeps a per-IP-address counter (submission limit) in a temporary file for up to 1 hour.
- Purpose: security and proper operation of the service (detection of abuse, attacks, automated submissions and errors).
- Legal basis: legitimate interest in ensuring the security of the website and preventing abusive use of the form (Article 6.1.f GDPR).
- Retention: for the logs, the short period set by the hosting provider; for the per-IP counter, up to 1 hour.
2.4 Source of the data
Data comes from you, when you fill in the form or write to us, and from the technical logs mentioned above.
3. How the contact form is processed
The form is processed by a program (PHP script) that runs on the same server where the website is hosted. When you submit it, the message is sent by email, through the hosting provider’s mail server (SMTP protocol, sender web@voltairibiza.com), to info@voltairibiza.com.
The form data is not stored in any database on the website: it exists only as an email message in the owner’s mailbox, where it is kept as described in section 2.1. If you prefer not to use the form, you can write to us directly at info@voltairibiza.com, including to send photographs.
4. Recipients and processors
We do not disclose your data to third parties, except where legally required (for example, to public authorities, courts or law-enforcement bodies).
Some providers process data on behalf of the controller to keep the website running. A “processor” is a provider that processes personal data on our instructions and with which a contract governing that processing is in place:
| Provider | Service |
|---|---|
| Hosting provider in the European Union | Website hosting, email and server technical logs |
| Xpandex (https://xpandex.es) | Technical development and maintenance of the website |
5. International transfers
The website and the associated email are hosted in the European Union, and the website does not make international data transfers by itself.
6. Your rights
You may exercise the following rights at any time (Articles 15 to 22 GDPR):
- Access: know what data about you we process.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete your data when it is no longer needed, among other cases.
- Restriction: ask us to suspend processing in certain cases.
- Objection: object to processing based on legitimate interest.
- Portability: receive your data in a structured format where applicable.
- Withdrawal of consent, where processing is based on it (contact form), at any time and without retroactive effect.
To exercise them, write to info@voltairibiza.com, stating the right you wish to exercise and proving your identity. We will reply within one month, extendable in the cases provided by the GDPR.
If you believe the processing does not comply with the rules, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, https://www.aepd.es).
7. Automated decisions
No decisions based solely on automated processing are taken, and no profiles with legal effects on you are created.
8. Security
We apply technical and organisational measures appropriate to the risk (Article 32 GDPR), including the encrypted HTTPS connection of the website and the choice of providers offering sufficient guarantees. The data you provide is treated confidentially.
9. Minors
This website is not aimed at children under 14 and we do not knowingly collect their data. Under Article 7 of the LOPDGDD, processing the data of children under 14 requires the consent of their parents or guardians. If you believe a child under that age has given us data, please tell us so we can delete it.
10. Cookies
This website does not use cookies or similar technologies, and neither does the contact form. More information in the Cookie Policy. The owner’s identification details are in the Legal Notice.
11. Changes
We may update this policy to reflect legal or website changes. The current version is the one published on this page, with the update date shown below.
Last updated: 22 October 2026.
Spanish version: Política de privacidad. The Spanish version prevails in case of discrepancy.