Privacy Policy

This Privacy and Data Protection Policy is specifically adapted to the website and following the guidelines of current legislation.


1. Laws applied on this website

Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (hereinafter, LSSI).

Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter, LOPD).

Regulation (UE) 2019/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of this data and by which repeals Directive 95/46 / EC (General Data Protection Regulation of the European Union) (hereinafter, RGDP).


2. Data collected on this website

This website only collects strictly necessary data to carry out the service activity, adhering to the principle of data minimization (Art. 5 b of the GDPR).

User data entered through the forms enabled on the website or in the product booking process (contact information, such as name, email, phone number) are collected and will be processed in order to facilitate the provision of services provided through the website, which are only to fulfill purchase or information requests, as well as offering promotional offers or services that may be of interest to the user.

In addition, for tax purposes, customer data such as name, surname, and identification document (DNI/NIE/ID) will be collected from the provider through the corresponding invoice.

The website does not collect banking data entered through the Redsys payment platform.

At Málaga On Board, we take the protection of your personal data very seriously and have adopted technical and organizational security measures to guarantee their confidentiality, integrity, and availability. If you want to obtain more information about the personal data we collect, we invite you to read our complete Privacy Policy.


3. Mandatory or optional nature of the information provided by the user and truthfulness of the data

The fields indicated in the registration form or product reservation form to be completed by the user are strictly necessary to attend to their request, and the inclusion of data in all fields is voluntary.

The user guarantees that the personal data provided to the company is truthful and is responsible for communicating any modifications to it.


4. User consent

The user provides their data through the website by checking the box “I accept the Privacy Policy” and clicking on the submit button of the form or request/reserve button in the case of booking a product. Therefore, the user, in this way, declares to have read and accepted the Privacy Policy and therefore gives their unequivocal and express consent to the processing of their personal data in accordance with the purposes indicated in this privacy policy.

The user certifies that they have the necessary legal capacity to provide consent regarding the processing of their personal data, all in accordance with the provisions of this Privacy Policy.


5. Purpose of data collection and use

The collection and use of data is carried out solely for the purpose of managing the user’s request and for fiscal purposes. Additionally, we may use your personal data for marketing or advertising purposes, such as sending you information about our products and services or offering you special promotions. In any case, we commit to not using the data obtained for any purpose other than this.

The data you enter on the website will not be communicated to other companies other than those described above (providers), except for legal imperative or to fulfill the purpose for which they were provided. If you do not wish to receive marketing or advertising information, you can unsubscribe at any time by following the instructions included in our emails or by contacting us at


6. Data retention period

In compliance with data protection regulations, we establish specific retention periods for each type of data, depending on the purpose for which they are collected. The data will be kept until the objective for which they were collected is fulfilled (Art. 5e GDPR) or until the right to deletion or modification of the data is exercised. In any case, we guarantee that personal data will be kept for the strictly necessary period to comply with the legal, fiscal, and contractual obligations that correspond.


7. How do we protect your data?

Your data is transferred and stored safely as we have:

  • Encryption with SSL protocol.
  • Firewall at server level.
  • Security protocols to prevent unauthorized access.
  • Backups. cannot guarantee complete security in communications over the internet, but guarantees to take the appropriate measures to protect your data. In addition, you agree to maintain the confidentiality of the data and will not communicate or allow unauthorized third parties.


8. User rights regarding data protection

The current legislation recognizes the following rights when transferring your data:

  • Right to information: you have the right to be clearly informed before your data is collected about what data of yours is being processed, for what purpose it is processed, where they have obtained the data and if they will communicate it or have communicated it to someone.
  • Access rights: to know what your data is being processed, for what purpose it is processed, where they have obtained the data and if they are going to communicate it or have communicated it to someone.
  • Right of rectification: to modify your inaccurate or incomplete data.
  • Right of cancellation: to cancel your inadequate or excessive data.
  • Right of opposition: to prevent your data from being processed or no longer processed, although only in the cases established by law.
  • Right of limitation of treatment: to prevent your data from being processed or no longer being processed, although only in the cases established by law.
  • Right to data portability: to request that data processing be suspended in the cases established by law.
  • Right not to be subject to individualized decisions: in order that a decision is not made about you that produces legal effects or affects you based only on the treatment of your data.

To exercise your rights you must contact the company by email ( or by postal mail at the address indicated above, attaching a photocopy of the ID or document proving your identity.

You also have the right to lodge a complaint with the competent supervisory authority ( if it considers that the treatment does not comply with the current regulations.

The response period for addressing requests regarding your rights is set to a maximum of one month from the date of receiving the request. However, this period may be extended by an additional two months depending on the complexity and number of requests received, provided that the interested party is informed within the first month. The exercise of these rights will be free of charge, except in the case of manifestly unfounded or excessive requests, in which case a reasonable fee may be charged based on the administrative costs to respond to the request.


8. Responsibilities

Málaga On Board is not responsible for the information and contents stored in forums, social networks, or any other means that allow third parties to independently publish content on the website.

However, considering articles 11 and 16 of the LSSI-CE, Málaga On Board is committed to removing or, where appropriate, blocking those contents that could affect or contravene national or international legislation, third-party rights, or morals and public order.

The company reserves the right to update, modify or delete the information contained on its website, as well as its configuration or presentation, at any time without assuming any responsibility for it.

Málaga On Board acts as an intermediary between the customer and the provider, and is exempted from any responsibility regarding any incident that may occur during the activity. Therefore, the customer will make the appropriate claims to the service provider, who will be the only responsible party.


9. Intellectual and industrial property

Málaga On Board is the owner of all the rights to the software of the digital publication, Málaga On Board owns all rights to the software of the digital publication, as well as the industrial and intellectual property rights related to the contents included, except for the rights over public products and services that are not owned by this company.

No material published on this website may be reproduced, copied, or published without the written consent of Málaga On Board.

All information received on the website, such as comments, suggestions, or ideas, will be considered assigned to Málaga On Board free of charge. Information that cannot be treated in this way should not be sent.


10. Changes in the Privacy Policy reserves the right to modify this Privacy Policy, modifications that will be made in accordance with current Spanish legislation.


11. Google Analytics Policy

Google Analytics, a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheater Parkway, Mountain View (California), CA 94043, United States (“Google”). Google Analytics uses “cookies”, which are text files located on your computer, to help the website analyze how users use the website. The information generated by the cookie about your use of the website (including your IP address) will be directly transmitted and archived by Google on servers in the United States. Google will use this information on our behalf in order to keep track of your use of the website, compiling reports of website activity and providing other services related to website activity and Internet use. Google may transmit such information to third parties when required by law, or when said third parties process the information on behalf of Google. Google will not associate your IP address with any other data available to Google. You can refuse the processing of data or information by rejecting the use of cookies by selecting the appropriate configuration of your browser, however, you should know that if you do so you may not be able to use the full functionality of this website. . By using this website you consent to the processing of information about you by Google in the manner and for the purposes indicated above.