Privacy policy
We explain what data we process, why, on what legal basis, who receives it, how long we keep it and how to exercise your rights, under the GDPR (EU 2016/679) and Spanish LOPDGDD 3/2018.
Data controller
KAEL (Kael Aut.) — registration details in progress (they will be published here as soon as available). Contact: info.kaelboats@gmail.com Privacy contact: info.kaelboats@gmail.com
What data we process
Availability requests: name, email, phone, boat, date, number of guests and comments. Reviews: name (or "Anonymous"), stars and comment. Interested and partner companies: business contact details, company legal and tax details, and the agreement acceptance record (date, time, IP, signatory and text fingerprint). Chat with the AI assistant: the messages you write. Security: IP address, temporarily, to prevent abuse (counters that delete themselves).
Why and on what legal basis
To handle your request and send it to the boat company offering the boat (pre-contractual steps at your request, art. 6.1.b GDPR). To assist you in the chat and log complaints (legitimate interest in providing support, art. 6.1.f). To publish your review (your consent when you submit it, art. 6.1.a; you can withdraw it). To manage the relationship with partner companies, their invoicing and tax obligations, including DAC7 (contract and legal obligation, art. 6.1.b and 6.1.c). Service security and fraud prevention (legitimate interest, art. 6.1.f). We take no automated decisions with legal effects on you: AI only helps draft and classify messages.
Who receives it
The boat company you send your request to, which handles, contracts and charges it (independent controller). Providers processing data on KAEL's behalf (processors): Emergent (hosting, file storage and email sending, the latter through Resend), OpenAI, Anthropic and Google (AI models for the chat and assistant), Google (reading KAEL's business inbox, company emails only) and Stripe (company commission payments). Some are in the USA: transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We do not sell or share data for advertising.
How long
Requests and bookings: while being handled and then for the legal limitation periods (up to 5 years). Chat conversations: automatically deleted after 12 months. Reviews: while published or until you ask for removal. Company invoices and accounting records: 6 years (Spanish Commercial Code, art. 30) and applicable tax periods. Anti-abuse counters with IP: 48 hours at most.
Minors
The request service is for people aged 18 or over. If you are a minor, ask a parent or guardian to send the request.
Your rights
You can request access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to info.kaelboats@gmail.com. If you are not satisfied, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority in your country.
