Privacy Policy
Last updated: October 2026
This Privacy Policy explains how MARNER Mallorca S.L. ("we", "us", "our") collects, uses and protects personal data when you visit this website or contact us. We are committed to protecting your privacy and handling your data transparently and lawfully, including in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.
1. Who we are
MARNER Mallorca S.L., Avenida América 7, 7º A, 07590 Cala Ratjada (Capdepera).
Represented by: Krzysztof Majchrzak
Registration: Sociedad unipersonal · NIF B24889107 · Registro Mercantil de Palma de Mallorca, Hoja PM-105546, Inscripción 1ª
Email: info@marnermallorca.com · Phone: +34 654 86 19 84
2. What data we collect
- Contact details you provide — such as your name, email address, phone number and the content of your message when you use our contact form or contact us directly.
- Technical data — such as IP address, browser type and usage information, collected automatically to operate and secure the website.
3. How and why we use your data
- To respond to your enquiry and provide the advisory information or services you request.
- To communicate with you regarding buying, selling or investment matters.
- To operate, secure and improve our website.
- To measure how this website is used (Google Analytics), only with your consent under Art. 6(1)(a) GDPR.
- To measure the effectiveness of our advertising (Google Ads, Meta) and to use remarketing and personalised advertising (Google Ads), only with your consent under Art. 6(1)(a) GDPR.
- To comply with legal and regulatory obligations.
Legal bases (GDPR): your consent, the performance of a contract or pre-contractual steps at your request, and our legitimate interest in responding to enquiries and running our business.
4. Sharing your data
We do not sell your personal data. We may share it with trusted service providers who process it on our behalf (e.g. email, hosting and form-processing providers), and with authorities where required by law. All processors are bound to appropriate confidentiality and data-protection obligations.
Our contact pages with an office show a map. It is not loaded when the page opens: it appears only after you press “Load map”. Only then does Google Maps (provider: Google) receive your IP address and possibly set cookies. Until then no request reaches Google. The legal basis is your consent under Art. 6(1)(a) GDPR; it covers that one page view and is not stored.
Our forms send what you enter to Web3Forms (api.web3forms.com). The service receives the submission and forwards it to us by email. It gets the fields you fill in, the page you sent from and, for technical reasons, your IP address, and it processes all of that on our behalf only. Processing may take place outside the EEA; the safeguards described in section 5 apply.
This website is hosted by Netlify. Every page request goes to Netlify, which for technical reasons receives your IP address and browser identifier (user agent). Netlify also runs our own function for Meta’s Conversions API. This function works only with your consent, accepts reports only from this website and forwards the data listed in section 8 to Meta. It does not write the content of these reports to its log. The legal basis for hosting is our legitimate interest in operating the website securely under Art. 6(1)(f) GDPR (section 3); forwarding to Meta is based on your consent (section 8). Processing may take place outside the EEA; the safeguards described in section 5 apply.
5. International transfers
We generally process your data within the European Economic Area. Some of our service providers also process data outside the EEA, for example Google and Meta in the United States (sections 4 and 8). For this we rely on the safeguards required by the GDPR, such as the European Commission’s standard contractual clauses.
6. Data retention
We keep personal data only as long as necessary for the purposes described above or as required by law, after which it is securely deleted.
7. Your rights
Subject to applicable law, you may have the right to access, correct, delete or restrict the processing of your data, to object to processing, to data portability, and to withdraw consent at any time. To exercise these rights, contact us at info@marnermallorca.com. If you are in the EU/EEA, you may also lodge a complaint with your local data-protection authority.
8. Cookies
Consent. We use Google Analytics, Google Ads and Meta’s services only with your consent. You decide in the notice that appears as long as you have not yet made a choice. Until you accept, this website loads nothing from Google or Meta, sets no cookies and sends no measurement data. The same applies if you decline; any cookies already set by these services are then deleted. The map on our contact pages is covered in section 4. If you click WhatsApp, phone or email before deciding and then accept on the same page, that click is reported afterwards. Likewise, an enquiry is still counted if you accept only on the page shown after sending it. The website stores your choice in your browser’s storage, not in a cookie. The legal basis is your consent under Art. 6(1)(a) GDPR.
Withdrawing consent. You can withdraw your consent at any time with effect for the future. For this, every page has a “Cookie settings” button at the bottom. It deletes your stored choice, the Google and Meta cookies on this website and their entries in your browser’s storage, and reloads the page. The notice then appears again, and nothing from Google or Meta loads until you accept again. Data sent before the withdrawal is not affected. You can also clear this site’s data in your browser or block cookies there. Your rights under section 7 apply here as well.
Google Analytics 4 (provider: Google Ireland Ltd., Dublin). We use it to measure how this website is used: which pages are opened and for how long, whether visitors scroll far down, which language version is chosen, whether a form is started and which contact options are used. Google receives the page address including any campaign and click identifiers attached to it, the previous page, the page title, the browser language, the screen size, details of browser, operating system and device, and a random identifier from the _ga cookie. For contact clicks and enquiries, details of the type of enquiry are added, for example the subject of the enquiry, the chosen adviser or a property’s reference number, and for the purchase-cost calculator also the property type and price, but never your name, email address or phone number. For technical reasons Google also receives your IP address. According to Google, Google Analytics 4 does not store IP addresses; for visits from the EU, Switzerland and the United Kingdom, the IP address is used only to determine an approximate location and is then discarded. On the Mallorca pages, during a transition period expected to end on 30 November 2026, we also send this data to a second Analytics property. It is linked to Google Ads: Google can build audiences for our advertising from these visits, and enquiries are also reported to Google Ads as conversions. Google also processes this data in the United States; for transfers outside the EEA, section 5 applies.
Google Ads (provider: Google Ireland Ltd., Dublin). Once you accept, the Google Ads tag runs on every page. It serves two purposes. First, we measure which advertisement led to an enquiry: a submitted enquiry and a click on WhatsApp are reported to Google Ads as conversions, the enquiry with a randomly generated identifier. Phone and email clicks, searches registered for new properties and breakdowns requested from the purchase-cost calculator are not reported as conversions. Contacts about job applications and partnerships are reported neither to Google Ads nor to Meta. Second, we use remarketing and personalised advertising: Google learns that your browser has visited our pages. This allows third-party vendors, including Google, to show you our ads on websites across the internet. For this purpose Google uses cookies; on this website these are _gcl_au and _gcl_aw (see below). Google receives the page address including any identifiers attached to it, the previous page, the page title, the identifier from the _gcl_au cookie, the click identifier if you arrive via a Google ad, details of browser, device and screen and, for technical reasons, your IP address. We do not transmit your contact details to Google: name, email address and phone number are sent to Google neither in clear text nor as a hash. You can withdraw your consent to this at any time with the “Cookie settings” button; after that, this website no longer reports visits to Google Analytics or Google Ads. Google also processes this data in the United States; for transfers outside the EEA, section 5 applies.
Meta Pixel and Conversions API (provider: Meta Platforms Ireland Ltd., Dublin). We use them to measure how our advertising on Meta performs. Once you accept, the pixel runs on every page. It reports each page view, a click on WhatsApp, phone or email, and a submitted enquiry as well as a search registered for new properties or a breakdown requested from the purchase-cost calculator. It transmits the page address including any identifiers attached to it, the previous page, screen size, time zone, the market and language of the page, the contact option or form used, for a property enquiry the property’s reference number, and identifiers from the _fbp and _fbc cookies. For technical reasons Meta also receives your IP address and browser identifier (user agent). We do not transmit prices or other values to Meta. The pixel does not transmit any contact details.
We additionally report contact clicks and enquiries as well as registered searches and calculator breakdowns through the Conversions API. Your browser sends the event to our own function at Netlify (section 4), which forwards it to Meta. Through this route Meta receives the name and time of the event, the same event identifier as for the pixel, the page address, the market and language of the page, the contact option or form used, for a property enquiry the property’s reference number, the identifiers from _fbp and _fbc, your full IP address and your browser identifier (user agent). For an enquiry, your email address and phone number are added, for registered searches and the calculator only your email address, in each case only as a SHA-256 hash created by your browser, never in clear text. If you sent an enquiry before accepting, these hashes are omitted. Page views do not use this route. Meta also processes this data in the United States; for transfers outside the EEA, section 5 applies.
Cookies. Once you accept, the services set the following cookies on this website. Before you accept and after you decline, the website sets no cookies. Google and Meta may set further cookies on their own domains.
- _ga (Google Analytics): distinguishes visitors. Lifetime 2 years, in Chrome at most 400 days.
- _ga_ followed by the ID of the Analytics property, for example _ga_KXTM65DWNS (Google Analytics): keeps the session state, one cookie per property. Lifetime as for _ga.
- _gcl_au (Google Ads): identifier used for advertising, measurement and security, set even if you have not clicked an ad. Lifetime 90 days.
- _gcl_aw (Google Ads): stores the identifier of an ad click, only if the address you open carries a Google click identifier (gclid). Lifetime 90 days.
- _fbp (Meta): identifier of your browser for the Meta Pixel. Lifetime 90 days.
- _fbc (Meta): stores a Meta click identifier, only if the address you open carries one (fbclid). Lifetime 90 days.
Entries in your browser’s storage. The following entries are also stored there. The “Cookie settings” button deletes the Google and Meta entries together with the cookies.
- marner_consent_v3 and marner_consent_v3_at (ours, localStorage): your choice (accept or decline) and when you made it. No expiry, until you reset it with “Cookie settings” or clear this site’s data.
- marner_lead_v1 (ours, sessionStorage): a note made when you send an enquiry, so that the page shown afterwards counts the enquiry exactly once. It contains a random identifier, the form, market, page, language, time and details of the enquiry and, if you had accepted before sending, your email address and phone number as a SHA-256 hash, never in clear text. The page shown after sending reads it and deletes it at once; after 10 minutes it is no longer used, and it ends with the session in that tab. It is not created after you decline.
- _gcl_ls (Google Ads, localStorage): counters for conversion measurement and, only if the address you open carries a gclid, the click identifier; the values are valid for at most 90 days.
- multiFbc (Meta, localStorage): Meta click identifier, only if the address you open carries an fbclid. No expiry.
- lastExternalReferrer and lastExternalReferrerTime (Meta, localStorage): the page you came from and the time. No expiry.
9. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.
10. Changes
We may update this Privacy Policy from time to time. The current version is always available on this page.
