privacy policy

Boatox Concierge Ltd, trading as Boatox Ibiza

Erofilis 3, Office 106, 8016 Paphos, Cyprus Company Registration Number: HE 489787 Email: info@boatoxibiza.com Website: boatoxibiza.com

1. Overview

This privacy policy explains how Boatox Concierge Ltd ("we", "us", "our") collects, uses, and protects your personal data when you visit boatoxibiza.com or use our services. We take the protection of your data seriously and process it in accordance with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

2. Controller

The data controller responsible for this website is: Boatox Concierge Ltd Erofilis 3, Office 106 8016 Paphos, Cyprus Company Registration Number: HE 489787 Email: info@boatoxibiza.com

3. Hosting

This website is built on OnePage.io and hosted by:

IONOS SE Elgendorfer Str. 57 56410 Montabaur, Germany Privacy policy: https://www.ionos.com/terms-gtc/terms-privacy

When you access our website, IONOS automatically collects server log files, which may include your IP address, browser type, operating system, referrer URL, and time of access. This data is processed on the basis of Art. 6(1)(f) GDPR — our legitimate interest in the stable and secure operation of our website. We have concluded a Data Processing Agreement (DPA) with IONOS in accordance with Art. 28 GDPR.

4. Data We Collect and Why

4.1 Contact Forms and Quiz

When you submit a request via our contact form or quiz flows on this website, we collect the following data depending on what you provide: your name, phone/WhatsApp number, email address, travel dates, group size, budget range, and any additional information you voluntarily share.

This data is used exclusively to respond to your inquiry and to suggest services that match your request. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (your consent, given via the consent checkbox at submission).

Data is retained until your request has been handled and no further communication is expected, or until you request deletion.

4.2 WhatsApp Communication

We communicate with customers and prospective customers via WhatsApp. We use both WhatsApp Business (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) and the WhatsApp Business API via ManyChat (ManyChat Inc., 535 Mission Street, San Francisco, CA 94105, USA).

When you contact us via WhatsApp, your message content, phone number, and any data you share are processed to handle your inquiry. Processing is based on Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.

Data transfers to the USA via ManyChat are based on Standard Contractual Clauses (SCCs). We have concluded a Data Processing Agreement with ManyChat.

WhatsApp Privacy Policy: https://www.whatsapp.com/legal/privacy-policy-eea ManyChat Privacy Policy: https://manychat.com/privacy

4.3 Email and Newsletter

If you sign up for our newsletter or download our a freebie from us, like the ibiza survival guide, we collect your email address and optionally your name. We use Kit (formerly ConvertKit) to manage our email list.

We use a double opt-in procedure: you will only receive emails after confirming your subscription via a confirmation link.

Processing is based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time by clicking the unsubscribe link in any email or by contacting us at legal@boatoxibiza.com.

Kit is operated by: Kit (ConvertKit LLC), 750 W Hampden Ave, Suite 110, Englewood, CO 80110, USA. Data transfers to the USA are based on Standard Contractual Clauses (SCCs). Kit Privacy Policy: https://kit.com/privacy 5. Analytics and Tracking

We use the following analytics and tracking tools on this website. Where required by law, these tools are only activated after you have given your consent via our cookie banner.

5.1 OnePage.io Analytics

OnePage.io provides built-in analytics to measure basic website performance such as page visits and traffic sources. This data is processed within the OnePage.io platform. Privacy policy: https://onepage.io/privacy

5.2 Google Analytics

We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyze how visitors use our website. The information generated is transmitted to Google servers, which may be located in the USA.

IP anonymization is enabled. Data transfers to the USA are based on the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent).

Google Privacy Policy: https://policies.google.com/privacy 5.3 Google Tag Manager

We use Google Tag Manager to manage tracking scripts on our website. Google Tag Manager itself does not collect personal data but triggers other tags that may do so. It is covered by the consent mechanisms of those individual tags.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Privacy Policy: https://policies.google.com/privacy 5.4 Meta Pixel and Conversions API (CAPI)

We use the Meta Pixel and Meta Conversions API (CAPI), provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. These tools allow us to measure the effectiveness of our advertising on Facebook and Instagram and to show relevant ads to users who have visited our website.

The Meta Pixel operates via your browser. The Conversions API transmits event data server-side, which means it does not rely on your browser and is not affected by ad blockers or browser restrictions.

Data may be transferred to the USA based on the EU-US Data Privacy Framework. Meta is certified under the DPF: https://www.dataprivacyframework.gov/participant/4452 Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent). Meta Privacy Policy: https://www.facebook.com/privacy/policy 5.5 TikTok Pixel

We use the TikTok Pixel, provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland. The TikTok Pixel allows us to measure conversions and optimize our advertising on TikTok.

Data may be transferred to the USA and other countries where TikTok operates. Transfers are based on Standard Contractual Clauses (SCCs).

Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent). TikTok Privacy Policy: https://www.tiktok.com/legal/privacy-policy-eea 5.6 Google Search Console

We use Google Search Console to monitor our website's performance in Google Search. This tool processes aggregated data about search queries and click behavior and does not collect personal data directly from website visitors.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

6. Social Media

6.1 Instagram

Our website may include Instagram content or links to our Instagram profile (@boatoxibiza), provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. If you interact with Instagram content embedded on our site, a connection to Instagram servers may be established and your IP address transmitted.

Legal basis: Art. 6(1)(a) GDPR (consent).

Instagram Privacy Policy: https://privacycenter.instagram.com/policy

6.2 TikTok

Our website may include links to our TikTok profile. Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland.

TikTok Privacy Policy: https://www.tiktok.com/legal/privacy-policy-eea

6.3 Facebook, Threads, WhatsApp

Links to our social media profiles on Facebook and Threads are provided via Meta Platforms Ireland Ltd. No personal data is collected by us through these links beyond what Meta processes independently.

7. Media and Communications During Our Services

During our services — including yacht charters, yacht shares, villa stays, and related experiences — photos and videos may be taken by Boatox staff, partners, or professional photographers. These may include images in which you are identifiable.

Such media may be used for marketing, promotional, and documentation purposes, including publication on our website, Instagram, TikTok, Facebook, WhatsApp, and other digital or print channels.

The legal basis for this processing is our legitimate interest in marketing our services (Art. 6(1)(f) GDPR).

By participating in our services, you acknowledge this policy. You have the right to object to the use of your image at any time by contacting us at legal@boatoxibiza.com. We will remove identifiable content where technically feasible and cease future use.

8. Cookies

Our website uses cookies and similar tracking technologies. You can manage your cookie preferences at any time via our cookie banner or your browser settings. Disabling certain cookies may affect the functionality of this website. A full overview of the cookies we use is available in our Cookie Policy.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data: Right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), right to object (Art. 21 GDPR), right to withdraw consent at any time (Art. 7(3) GDPR), and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

To exercise any of these rights, please contact us at info@boatoxibiza.com. You may also lodge a complaint with the Cyprus Commissioner for Personal Data Protection: https://www.dataprotection.gov.cy

10. Data Transfers Outside the EU

Some of the tools we use involve data transfers to countries outside the European Economic Area, in particular the USA. Where this occurs, transfers are based on adequacy decisions, the EU-US Data Privacy Framework, or Standard Contractual Clauses (SCCs), as specified for each tool in this policy.

11. Storage Duration

Personal data is stored only for as long as necessary for the purpose for which it was collected, or as required by applicable law. Inquiry data is generally deleted within 24 months after the last contact. Email subscribers' data is stored until unsubscription. Analytics data retention periods are governed by the respective tool settings.

12. SSL Encryption

This website uses SSL/TLS encryption. You can recognize this by the "https://" prefix and the padlock symbol in your browser's address bar.

13. Changes to This Policy

We reserve the right to update this privacy policy at any time to reflect changes in our practices or applicable law. The current version is always available at boatoxibiza.com/privacy-policy.

Last updated: April 2026

Boatox Ibiza your ibiza bestie.

legal

get in touch

this website uses cookies and remarketing pixels, including those operated by meta platforms, inc. and google llc, to show relevant advertising and improve your browsing experience. facebook and google are registered trademarks of their respective owners. boatox ibiza is not affiliated with, endorsed by, or officially connected to facebook, google, meta platforms, inc., or any of their subsidiaries. use of this website is at your own risk. all content on this site is the property of BOATOX CONCIERGE LTD and may not be reproduced without written permission. for questions regarding data processing or your rights under gdpr, please contact us at info@boatoxibiza.com.