Privacy Policy
Last updated: 27 August 2026
Data controller
Lucas Lorilleux, trading as “Mallorca Concierge”, NIE Z0163383L, based in Palma de Mallorca, Illes Balears, Spain. Contact: contact@mallorca-concierge.com. No Data Protection Officer has been appointed.
What we collect
Identification and contact information: name, email, phone/WhatsApp, language, country. Request specifics: dates, party size, budget, preferences. Verification data such as identity documents or driving-licence details, where required. Correspondence content, and technical data as described in our Cookie Policy.
Legal basis for processing
Processing occurs under GDPR Article 6 for contract performance, legitimate interests, consent, or legal obligations, covering purposes such as answering enquiries, arranging services, client care, commercial communications, accounting, and cookie management.
Data sharing
Independent providers receive the data necessary to deliver requested services. Data processors include Hostinger International Ltd., WhatsApp/Meta, and our accounting service. We never sell your data and we do not use it for third-party advertising.
International transfers
EU hosting involves no external transfers. WhatsApp processing relies on the EU–US Data Privacy Framework and Standard Contractual Clauses with supplementary measures.
Retention periods
Enquiries: 12 months. Bookings: for the service duration, then archived. Invoices: 6 years. Anti-money-laundering records: 10 years. Marketing consent: until withdrawn. Cookies: 24 months.
Your rights
You may request access, correction, erasure, restriction, objection, portability, or withdraw consent, by contacting us. Complaints can be filed with the Spanish Data Protection Agency (AEPD).
Children
Our services are arranged for adults only; parental responsibility applies for any minor-related activities.
Security and changes
We apply reasonable technical and organisational measures to protect your data. This policy may be updated; material changes are notified to existing clients.