Privacy Policy
How we handle your personal data at Bluezone Mallorca.
Last updated: 6 June 2026
This Privacy Policy explains how Bluezone Mallorca ("we", "us", "our") collects, uses, shares and protects your personal data when you visit bluezone-mallorca.com (the "Website"), book a session, or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.
1. Data Controller
The controller responsible for the processing of your personal data is:
Elite Sports Mallorca SLU (trading as "Bluezone Mallorca")
CIF / VAT ID: B70828272 (ESB70828272)
Ctra. Artà-Alcúdia, 103
07458 Can Picafort, Illes Balears, Spain
Email: info@elitesports-mallorca.com
Our wellness center is located at Passeig Illetas 4, 07181 Palma de Mallorca. For any data protection matter, you can reach us at info@bluezone-mallorca.com or by phone at +34 603 874 855.
2. What Data We Collect and Why
We only collect the data we need for the purposes described below. The legal basis for each processing activity is indicated.
2.1 Booking a session
When you use our online booking tool, we collect the information you enter: your first and last name, email address, phone number (optional), any notes you provide, and the treatment, date and time you select. This data is transmitted to our server and sent to us by email so we can process and confirm your booking.
Purpose: to handle and confirm your booking request. Legal basis: performance of a contract or pre-contractual measures at your request (Art. 6(1)(b) GDPR).
2.2 Contact form
If you send us a message via the contact form, we collect your name, email address, chosen subject and message. Our contact form is processed through the service provider Formspree (Formspree, Inc., USA), which forwards your message to us.
Purpose: to receive and respond to your enquiry. Legal basis: pre-contractual measures and our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR).
2.3 Server log files
When you visit the Website, our hosting provider automatically records technical data such as your IP address, browser type, operating system, date and time of access, and the pages requested. This is necessary for the secure and stable operation of the Website.
Purpose: security, stability and technical operation. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
2.4 Cookies, analytics and marketing tools
We use the following third-party tools that may set cookies or similar identifiers and process usage data:
| Tool | Provider | Purpose |
|---|---|---|
| Google Analytics | Google Ireland Ltd. / Google LLC | Statistical analysis of how visitors use the Website (aggregated reach measurement). |
| Meta Pixel | Meta Platforms Ireland Ltd. | Measuring the effectiveness of our advertising on Facebook/Instagram and recording actions such as page views and booking interest. |
| Google Maps | Google Ireland Ltd. / Google LLC | Displaying an interactive map of our location on the contact page. |
These tools may transfer data to servers operated by Google and Meta, including in the United States. Such transfers are safeguarded by the providers' standard contractual clauses and the EU–US Data Privacy Framework. Legal basis: your consent and/or our legitimate interest in reach measurement and marketing (Art. 6(1)(a) and (f) GDPR). You can object to or disable these tools at any time — see section 4.
2.5 WhatsApp and phone
If you contact us via WhatsApp or telephone, the data you provide is processed to handle your request. WhatsApp is operated by Meta Platforms Ireland Ltd. and is subject to its own privacy terms.
2.6 Concierge chat (AI assistant)
Our website offers a chat assistant ("Bluezone Concierge") that answers questions about our therapies. To evaluate and improve the service (e.g. which questions are asked, where conversations end), chat transcripts — the questions asked, the assistant's replies, the selected language and timestamps — are stored under a randomly generated, anonymous session identifier. No IP addresses, no device identifiers and no cookies are stored for the chat, and there is no recognition beyond the individual session. Chat input is processed by an AI language model (Anthropic Claude) to generate the replies. Please do not enter special categories of personal data (e.g. detailed health information) beyond your actual question. Chat transcripts are automatically deleted after 90 days. Contact details are only processed if you submit them yourself in the booking form (see section 2.2). Legal basis: our legitimate interest in answering your enquiry and improving our service (Art. 6(1)(f) GDPR).
3. Who We Share Your Data With
We do not sell your personal data. We share it only with service providers ("processors") who help us operate the Website and our business, and only to the extent necessary:
- Our hosting provider, which stores the Website and the data submitted through it on our behalf.
- Formspree, Inc. for processing contact-form messages.
- Google (Analytics, Maps) and Meta (Pixel, WhatsApp) for the purposes described above.
- Anthropic (Claude) for generating the Concierge chat replies, as described in section 2.6.
Where these providers process data outside the European Economic Area, appropriate safeguards (such as EU standard contractual clauses) are in place.
4. Cookies and Your Choices
You can control cookies and tracking in several ways:
- Browser settings: most browsers let you block or delete cookies.
- Google Analytics: install the Google Analytics opt-out browser add-on.
- Meta: manage your ad preferences in your Facebook ad settings.
5. How Long We Keep Your Data
We keep personal data only as long as necessary for the purposes for which it was collected, or as required by law. Booking and contact data is retained for as long as needed to provide our services and to comply with applicable Spanish tax and commercial retention obligations. Analytics data is retained for a limited period in line with the tools' settings. After these periods, data is deleted or anonymised.
6. Your Rights
Under the GDPR, you have the right to:
- request access to the personal data we hold about you;
- request rectification of inaccurate data;
- request erasure ("right to be forgotten") — see our data deletion page;
- request restriction of processing;
- exercise your right to data portability;
- object to processing based on legitimate interests;
- withdraw consent at any time, without affecting prior lawful processing.
To exercise any of these rights, contact us at info@bluezone-mallorca.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or your local supervisory authority.
7. Deleting Your Data
You can ask us to delete your personal data at any time. For step-by-step instructions, please see our Data Deletion page.
8. Data Security
The Website is served over an encrypted HTTPS connection, and we apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.
9. Children
Our services and this Website are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The current version, with its "last updated" date, always applies and is published on this page.
11. Contact
For any questions about this Privacy Policy or your personal data, contact us at info@bluezone-mallorca.com or by post at the address in section 1.