Privacy Policy

This privacy policy explains how StartMallorca collects, uses, and protects your personal information in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Last updated: June 17, 2025

Data Controller

FeelX GmbH
Lichtstraße 25a, 50825 Cologne, Germany
Email: hola@startmallorca.com
+49 (0) 151 270 78 548
Felix Schürholz
Data Protection Officer: hola@startmallorca.com

1. Information We Collect

We collect different types of information depending on how you interact with our services:

Personal Information

  • Name and email address (when you subscribe or contact us)
  • Nationality and residency status (in planning wizard)
  • Communication preferences
Legal basis (GDPR): Article 6(1)(a) GDPR - Consent for newsletter; Article 6(1)(f) GDPR - Legitimate interest for service provision

Usage Data

  • IP address (anonymized for analytics)
  • Browser type and version
  • Pages visited and time spent
  • Referring website
  • Device information
Legal basis (GDPR): Article 6(1)(f) GDPR - Legitimate interest for website analytics and security

Communication Records

  • Support inquiries and responses
  • Feedback and survey responses
  • Newsletter interaction data
Legal basis (GDPR): Article 6(1)(f) GDPR - Legitimate interest for customer support and service improvement

2. How We Use Your Information

We process your personal data for the following purposes, each with a specific legal basis:

Provide and improve our services

Deliver content, maintain website functionality, and enhance user experience

Legal basis (GDPR): Article 6(1)(f) GDPR - Legitimate interest

Send newsletters and updates

Share relevant information about Mallorca and our services (you can withdraw consent anytime)

Legal basis (GDPR): Article 6(1)(a) GDPR - Consent

Customer support

Respond to inquiries and provide assistance with your questions

Legal basis (GDPR): Article 6(1)(f) GDPR - Legitimate interest

Website analytics

Analyze usage patterns to improve our platform (with anonymized data)

Legal basis (GDPR): Article 6(1)(a) GDPR - Consent

Security and fraud prevention

Protect our platform and users from security threats and abuse

Legal basis (GDPR): Article 6(1)(f) GDPR - Legitimate interest

3. Information Sharing and Data Transfers

We limit data sharing to essential service providers and legal requirements:

Service Providers

We share data with trusted third parties who help us operate our platform:

ServicePurposeLocationSafeguards
Google AnalyticsWebsite analyticsUSAEU-US Data Privacy Framework, Data Processing Agreement
Email Service ProviderNewsletter deliveryEUGDPR-compliant data processing agreement
Hosting ProviderWebsite hostingEUGDPR-compliant data processing agreement

Legal Requirements

  • When required by law or court order
  • To protect our rights and safety
  • To investigate suspected fraud or security incidents
Legal basis (GDPR): Article 6(1)(c) GDPR - Legal obligation; Article 6(1)(f) GDPR - Legitimate interest

With Your Consent

We may share information in other circumstances with your explicit consent.

4. Data Storage, Security, and Retention

Data Storage

Your data is primarily stored within the European Union. Where data is transferred outside the EU, we ensure adequate protection through approved mechanisms.

Security Measures

  • Industry-standard encryption (TLS/SSL)
  • Access controls and authentication
  • Regular security audits and monitoring
  • Secure data centers with physical protection
  • Staff training on data protection

Data Retention Periods

Data TypeData retention:
Newsletter subscriptionsUntil you unsubscribe or 3 years of inactivity
Support communications3 years from last contact
Website analytics data26 months (Google Analytics default)
Planning wizard responsesImmediately deleted after session (not stored)

5. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access (Article 15)

Request a copy of your personal data we hold

Right to Rectification (Article 16)

Correct inaccurate or incomplete personal data

Right to Erasure (Article 17)

Request deletion of your personal data ('right to be forgotten')

Right to Restrict Processing (Article 18)

Limit how we use your personal data

Right to Data Portability (Article 20)

Receive your data in a structured, machine-readable format

Right to Object (Article 21)

Object to processing based on legitimate interests

Right to Withdraw Consent (Article 7)

Withdraw consent for processing at any time

Exercising Your Rights

To exercise any of these rights, contact us at hola@startmallorca.com. We will respond within 30 days.

We may ask for identification to verify your identity before processing requests.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. For detailed information, see our Cookie Policy.

Cookie Policy

7. Newsletter and Communications

Newsletter subscriptions are based on your explicit consent (Article 6(1)(a) GDPR).

  • You can unsubscribe anytime using the link in emails
  • We track email opens and clicks to improve content (with consent)
  • Unsubscribe requests are processed immediately
  • We do not share your email address with third parties for marketing

8. Protection of Minors

Our services are not directed at children under 16. We do not knowingly collect personal data from children under 16 without parental consent.

9. Automated Decision-Making

We do not use automated decision-making or profiling that would significantly affect you under Article 22 GDPR.

10. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website or email notifications.

11. Contact Information

For privacy-related questions or to exercise your rights:

Email: hola@startmallorca.com
Address: FeelX GmbH, Lichtstraße 25a, 50825 Cologne, Germany
Data Protection Officer: hola@startmallorca.com
We respond to all privacy inquiries within 30 days

12. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
https://www.ldi.nrw.de
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany

You may also contact the supervisory authority in your EU country of residence.