Privacy Policy

Data controller

Varador 2000, S.A. (Tax ID A08879058), with registered address at Dic de Llevant, s/n, 08350 Arenys de Mar, Barcelona, is the data controller for the personal data you provide through this website (varador2000.com) or our contact email, applying appropriate technical and organisational measures to guarantee its confidentiality, integrity, availability and resilience, in accordance with Article 32 of Regulation (EU) 2016/679 (GDPR).

What data we process and why

When you use our contact form to request information about our shipyard, marina or storage services, we process the following data:

  • Identification and contact details: first name, last name, email address and phone number.
  • Vessel details, provided voluntarily so we can assess and respond to your enquiry as precisely as possible: yacht name, length, build/hull number, vessel type, model and builder.
  • Any message you choose to add.
  • Technical anti-spam verification data (via Google reCAPTCHA), needed to distinguish a genuine submission from an automated one. See “Who we share your data with” below for more on this service.

This data is used to handle your request and respond to you through the channel you indicated. The main legal basis is the application of pre-contractual measures and/or the performance of a contract where applicable (Art. 6.1.b GDPR), or our legitimate interest in managing information requests (Art. 6.1.f GDPR), always weighed against your rights.

Only if you expressly authorise us to (by ticking the consent box on the form) will we also use your email address to send you information about our services and industry events that may be of interest to you (legal basis: consent, Art. 6.1.a GDPR). You may withdraw this consent at any time.

We do not request or process, through our forms, data relating to ideology, religion, beliefs, racial origin, health or sexual life. No automated individual decisions or profiling are carried out based on your data.

Browsing and web analytics

When you visit the website, some technical connection data (such as your IP address, browser or the pages requested) is inevitably processed; the hosting provider records it in order to serve the pages and keep the site secure.

Web analytics (only with your consent). If you enable the “Analytics” category in the cookie notice, we use Google Analytics 4 to measure use of the site in aggregate (for example, pages visited, where visits come from or device type) and understand which content works best. To do so, Google sets the cookies described in our Cookie Policy and receives the usage data. The legal basis is your consent (Art. 6.1.a GDPR), which you can withdraw at any time from the “Cookie preferences” link in the footer. If you do not give it, Google Analytics is not loaded. We do not use Google Analytics to show personalised advertising.

Who we share your data with

Your data is not disclosed to third parties, except where legally required. However, to provide the service, the following data processors have access to it, under the processing agreements required by Article 28 GDPR:

  • Netlify, Inc., as the provider hosting the website and the service that receives and processes the contact form.
  • Brevo (Sendinblue SAS), as the provider of the email delivery service used to send the message generated when the contact form is submitted; the form content passes through its systems for delivery.
  • Microsoft (Microsoft 365), as the provider of the corporate email (info@varador2000.com) where we receive those requests.
  • Google Ireland Limited, as the provider of the contact form’s anti-spam verification system (reCAPTCHA) and, only if you allow it from the cookie notice, of the embedded map (Google Maps) on the contact page, of embedded videos (YouTube) and of web analytics (Google Analytics).

International data transfers

Brevo (Sendinblue SAS) is a company based in France. Netlify, Google and Microsoft may process data outside the European Economic Area, including in the United States (for example, Netlify when hosting the website and running the form service; Google for reCAPTCHA and, where applicable, Google Maps, YouTube and Google Analytics). These transfers rely on the European Commission’s Standard Contractual Clauses and/or the provider’s adherence to the EU-U.S. Data Privacy Framework, as applicable at any given time. You can review each provider’s current safeguards in their own privacy policies.

Data security

We apply technical and organisational measures in line with Article 32 GDPR to protect your data against unauthorised access, loss or alteration, including: encrypted (HTTPS) connections across the entire website, restricted access to the systems that process your data, and data processing agreements with every provider named in this document.

How long we keep your data

Your data will be kept for as long as necessary to handle your request and, subsequently, for the legal limitation periods applicable to address any potential liabilities. For commercial communications you have consented to, your data will be kept until you withdraw your consent or request its deletion.

Google Analytics data (only if you have given your consent) is kept in Google Analytics for a maximum of 14 months. Technical server logs are kept for the period set by the hosting provider.

Your rights

You may request confirmation at any time as to whether we are processing your personal data, and exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and the right not to be subject to automated decisions, including profiling. To do so, please write to Dic de Llevant, s/n, 08350 Arenys de Mar, Barcelona, or to info@varador2000.com, proving your identity and indicating the right you wish to exercise.

If you believe your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, or with the competent supervisory authority.

Cookies and third-party content

Beyond the technical cookies necessary for the website to work, some features —the embedded map on the contact page, embedded videos (YouTube) and web analytics with Google Analytics— only activate if you expressly allow them. You can accept or reject these categories from the cookie notice and change your choice at any time via the “Cookie preferences” link in the footer. For the full detail of cookies and technologies used, see our Cookie Policy.

Updates to this policy

We reserve the right to update this Privacy Policy to adapt it to regulatory changes, case law, or changes to our processing activities or the providers mentioned above. The latest version published on this website shall apply in all cases.

Last updated: 5 October 2026.