Legal
Privacy Policy
Last updated: 10 November 2026
This policy explains how we process personal data when you use wateroute.com and ask us for a quote. It follows Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Who is responsible
Controller: RENAT UZBEKOV, trading as WateRoute (NIF/NIE Y3409060H)
Address: Carrer de Portugalete, 13-15, local 5, bajos, 08014 Barcelona, Spain
E-mail: [email protected] · Phone and WhatsApp: +34 646 762 654
We have not appointed a Data Protection Officer, as the law does not require it.
2. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Answer your quote request and keep in touch about it | Name, e-mail, phone (optional), yacht, ports, dates, crew and comment you enter in the form | Art. 6(1)(b) GDPR: steps taken at your request before a contract |
| Contract with you and invoicing | Identification, contact and billing data; yacht and delivery details | Art. 6(1)(b) GDPR: performance of the contract; Art. 6(1)(c) GDPR: accounting and tax obligations |
| Web analytics: understand how the website is used and improve it | Online identifiers stored in the Google Analytics cookies (_ga, _ga_*), pages visited, device and browser data, approximate location derived from the IP address | Art. 6(1)(a) GDPR: your consent, which you can withdraw at any time through "Cookie settings" at the bottom of every page, without affecting earlier processing; Art. 22.2 LSSI-CE |
| Protect the website and the form against spam and abuse | IP address, technical data of the request, server logs, result of the Cloudflare Turnstile check | Art. 6(1)(f) GDPR: our legitimate interest in keeping the website and the form secure |
The data marked as required in the quote form are needed to answer you; without them we cannot prepare a quote.
3. Who receives your data
The following providers process data on our behalf (data processors):
- Cloudflare: website hosting, the function that receives the quote form, and the Turnstile spam check.
- Brevo: sending the e-mail with your quote request from the form to us.
- Google Ireland Limited and Google LLC: Google Analytics 4, web analytics. Only if you accept analytics cookies.
- Cloudflare Web Analytics: we use it for aggregated visit statistics. It does not use cookies or local storage (Cloudflare).
- Apple (iCloud+): our mailbox [email protected], where your request and our correspondence are stored.
We also communicate data to tax and public authorities when the law requires it. We do not sell your data.
4. Transfers outside the European Economic Area
- Cloudflare, Inc. (United States) is certified under the EU-U.S. Data Privacy Framework.
- Brevo (Brevo SAS, France) stores data on servers in the EU (France, Germany, Belgium). There is no transfer outside the EU.
- Google LLC (Google Analytics) is certified under the EU-U.S. Data Privacy Framework. Google relies on it for transfers of EEA personal data in its advertising and analytics services since 1 September 2023 (Google, Google Business Data Responsibility). Google also states that Google Analytics does not log or store IP addresses of users in the EU, Switzerland or the UK (Google Analytics Help).
- Apple: transfers outside the EEA are protected by the European Commission's Standard Contractual Clauses, or by an adequacy decision where Apple is certified under it.
You can ask us for more information at [email protected].
5. How long we keep your data
- Quote requests that do not lead to a contract: 12 months from our last contact, then we delete them.
- Web analytics data in Google Analytics: 14 months, then deleted automatically. The cookie choice stored in your browser: up to 24 months.
- Clients: data and invoices are kept for 6 years (Article 30 of the Spanish Commercial Code), and then deleted.
6. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. To use these rights, write to [email protected] with the subject "Data protection". We answer within one month. We may ask you to confirm your identity.
If you think we are not handling your data correctly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD): www.aepd.es.
7. Other information
- We do not take automated decisions and do not profile you.
- This website is not intended for persons under 18 years of age.
- Cookies and similar technologies are described in the Cookie Policy.
- We may update this policy. The current version is always published here, with its date.