Privacy Notice
Draft reviewed 14 November 2026
Private-preview draft. The legal operator, business address, final retention schedule and provider arrangements are awaiting confirmation. This notice must be completed before public launch.
Who handles your enquiry
Ibiza Sea School is the trading name used on this website. The full legal name and address of the operator responsible for personal data will be added before launch. For enquiries and privacy requests, contact info@ibizaseaschool.com or +34 661 257 472.
What you provide
The form asks for your name and email so the school can answer you. You can also provide a phone number, the training or service you are interested in, preferred dates, number of people, whether you have your own boat or PWC, and a message. These additional details are optional. Confirm email is checked locally in your browser and is not included in the submission. No payment or document upload is requested. Please do not send health information, identity documents or payment details through this form.
Why the information is used
Your information is used to respond to your request, discuss suitable training or services, and arrange the next steps you ask for. For enquiries about booking a service, the intended legal basis is taking steps at your request before entering a contract (GDPR Article 6(1)(b)). For other correspondence, the intended basis is the operator’s legitimate interest in answering and managing business enquiries (Article 6(1)(f)); the operator must document that assessment before launch. Submitting an enquiry does not subscribe you to marketing. Any future marketing permission will be requested separately where required.
Who receives it
The current form sends the details over HTTPS to FormSubmit, which processes and forwards the enquiry to the school inbox. Authorised school staff handling the enquiry may see it. The hosting provider may process technical connection and security logs; the mailbox provider processes the received email. The website code does not save enquiries in a website database or browser storage. This does not mean the providers or school inbox hold no records.
FormSubmit’s documentation says it retains submissions in an archive for 30 days. Its privacy policy describes its processing. The provider’s processing contract, subprocessors, storage countries and any international transfer safeguards have not yet been verified. Those arrangements, plus the final hosting and mailbox providers, must be confirmed before public launch.
How long information is kept
FormSubmit documents a 30-day archive. The school inbox receives a separate copy. A specific deletion schedule for unsuccessful enquiries, email backups and any resulting customer records must be approved and implemented before launch. The intended approach is to keep enquiries only as long as needed for replies, requested follow-up and any applicable legal obligations; booking, accounting and training records require their own retention rules.
Your rights
Subject to the GDPR’s conditions, you can request access, correction, deletion, restriction and portability, and object to processing based on legitimate interests. If a particular use relies on consent, you can withdraw that consent without affecting earlier lawful processing. Contact info@ibizaseaschool.com. We may need proportionate information to verify your identity. Applicable requests are normally answered within one month; any permitted extension must be explained.
You can complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
Security, optional details and other websites
The form is delivered over HTTPS and includes a hidden anti-spam field. Access to the school inbox and providers must be limited to authorised people and protected appropriately. Name and email are needed to reply; additional details are voluntary. The enquiry workflow does not make automated eligibility or booking decisions.
WhatsApp and external links open services with their own privacy practices. The weather station opens a separate website. Any future embedded tools or analytics require a further review.