Privacy Policy

IDENTIFICATION OF THE DATA CONTROLLER

Holder: LISTA SÉPTIMA BALEARES S.L. (hereinafter, LISTA SÉPTIMA) NIF: B56161615 Registered Office: Paseo de la Habana 18, 28036 Madrid Contact Email: [email protected]

INFORMATION AND CONSENT

By accepting this Privacy Policy, the user is informed and provides their free, informed, specific, and unequivocal consent for the personal data they provide through the web forms, or by sending physical/digital documentation, to be processed by LISTA SÉPTIMA.

CATEGORY OF DATA PROCESSED (HIGH-RISK DATA)

Given the nature of our maritime management service, we process the following categories of data:

Identification data: Name, surname, postal address, NIF/NIE/Passport.
Sensitive documentation: Digitalized copy of the DNI/NIE (high-risk processing due to its potential use in identity theft).
Contact data: Email and telephone.
Representation and signature data: Signed maritime management contract and administrative authorizations.
Vessel data: Technical documentation of boats owned by the user.

PURPOSE OF THE PROCESSING

We will process your data for the following purposes:

Maritime Service Management: Processing clearance requests and rental authorizations before the Maritime Captaincies and other bodies of the Public Administration.
Contractual Execution: Fulfillment of the management contract where the user authorizes us to act on their behalf.
Administrative Management: Invoicing, accounting, and compliance with tax obligations.
Request Handling: Resolution of queries raised through the contact channels.

LEGAL BASIS (LAWFULNESS OF PROCESSING)

The processing of your data is based on:

Execution of a contract: Art. 6.1.b of the GDPR. It is strictly necessary to comply with the contracted maritime management service.
Consent of the data subject: Art. 6.1.a of the GDPR. For the processing of the copy of the DNI and the signing of PDF documents necessary for the procedures.
Compliance with legal obligations: Art. 6.1.c of the GDPR. Upon requirements of the Maritime or Tax Administration.

RECIPIENTS AND DISCLOSURES OF DATA

Your data will be communicated exclusively to:

Maritime Captaincies and Public Bodies: By virtue of the authorization granted to obtain rental permits.
Banking Entities: For the management of collections and payments.
Data Processors: Service providers necessary for our activity, specifically:
Microsoft Ireland Operations Ltd: As a provider of productivity and cloud storage tools (Microsoft 365), whose servers are located within the European Economic Area.
IT service providers and accounting management, subject to confidentiality and regulatory compliance contracts.

Important: We do not sell or transfer your data to third-party companies for commercial purposes. No international transfers of data are carried out outside the European Economic Area.

REINFORCED SECURITY MEASURES

In compliance with Art. 32 of the GDPR and following the AEPD guidelines for high-risk data, LISTA SÉPTIMA applies:

Data encryption: Documentation (DNI, contracts) is stored on secure servers with encryption protocols.
Access control: Only personnel strictly necessary for the management of the file have access to sensitive documentation.
Traceability: Access logging to information to ensure there are no leaks.

RETENTION PERIOD

The data will be kept for the time necessary to fulfill the purpose for which it was collected and to determine the possible liabilities that could derive from said purpose.

File documentation: It will be maintained during the validity of the service and, subsequently, blocked for 5 years to cover civil or administrative liabilities.
Accounting/tax data: 6 years according to the Commercial Code.

RIGHTS OF THE DATA SUBJECT

You can exercise your rights of Access, Rectification, Erasure, Restriction, Objection, and Portability by sending an email to [email protected]. You must prove your identity by means of a copy of an official document (since we already have it for the service) indicating "Data Protection" in the subject line.

If you consider that your rights have been violated, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) through its electronic office.