Last updated: 5 November 2026

This policy explains how Islander Yachting Media S.L. (“The Islander”, “we”, “us”) collects and uses personal data when you visit theislander.online, subscribe to our newsletter, contact us, advertise with us, contribute an article, comment on an article or attend one of our events. It also explains which cookies we use and how you can manage them.

Want to change your cookie choice? You can do so at any time via Cookie settings, also available at the bottom of every page of our website.

1. Who we are

Data controller	Islander Yachting Media S.L.
Trading name	The Islander Magazine
Tax ID (NIF/CIF)	B72731938
Registered office	Polígono 19, Parcela 60 (Can Ros), 07620 Llucmajor, Illes Balears, Spain
Commercial Registry	Registro Mercantil de Mallorca, Tomo 2976, Folio 199, Sección 8, Hoja PM-95287, Inscripción 1
Privacy contact	admin@theislander.online
Telephone	+34 674 83 83 68

We have not appointed a Data Protection Officer, as this is not required for our activities. For any question about your personal data, please contact us at the e-mail address above.

This policy is governed by the General Data Protection Regulation (EU) 2016/679 (GDPR), the Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD) and Law 34/2002 on Information Society Services and Electronic Commerce (LSSI).

2. What data we process, why, and on what legal basis

We only collect the data we need for each purpose. Each purpose has one legal basis.

Purpose	Data	Legal basis
Newsletter. Sending our newsletter with magazine news, stories and event invitations	First name, e-mail address, date and proof of subscription	Your consent (art. 6.1.a GDPR). You confirm your subscription by e-mail (double opt-in) and can unsubscribe at any time via the link in every newsletter
Contact. Answering questions you send us by e-mail	Name, e-mail address, company, the content of your message	Our legitimate interest in answering your request (art. 6.1.f GDPR), or steps prior to a contract if you ask about advertising (art. 6.1.b GDPR)
Advertisers and clients. Preparing proposals, managing advertising contracts and invoicing	Name, company, position, contact details, billing details, contract and payment history	Performance of a contract (art. 6.1.b GDPR) and our legal obligations under tax and commercial law (art. 6.1.c GDPR)
Editorial contributions. Reviewing and publishing articles sent to editor@theislander.online	Name, contact details, company, the article and images you send, and the credit details you want published	Performance of the agreement to publish your contribution (art. 6.1.b GDPR)
Comments. Publishing and moderating reader comments on our articles and protecting them against spam	Name, e-mail address, website (optional), the comment, IP address, date and time	Our legitimate interest in offering readers a moderated place to react and keeping it free of spam (art. 6.1.f GDPR). Your e-mail address is never published. Comments are checked for spam on our own server and only appear after we approve them
Events. Registering attendees and handling ticket payments	Name, e-mail address, payment confirmation. Card details are processed by Stripe, not by us	Performance of a contract (art. 6.1.b GDPR) and legal obligations for invoicing (art. 6.1.c GDPR)
Event photos. Taking photos at our events and publishing them in the magazine and on our social media, to report on the event and the yachting community	Photos in which you may be recognisable	Our legitimate interest in reporting on our events (art. 6.1.f GDPR). We announce this at the entrance of each event. If you do not want to appear in photos, tell our photographer or e-mail admin@theislander.online and we will not publish photos of you
Website statistics and audience insights. With your consent, we use Google Analytics to understand how visitors use our website: which pages are visited, how long, from which country and on which type of device. If you are signed in to a Google account and have allowed ad personalisation in that account, Google may link your visit to your account (Google signals). This gives us aggregated reports on age groups, gender and interests of our readers. We only see these figures in aggregate, never per person, and we do not use them to show you personalised ads	Pseudonymous identifiers, pages viewed, visit duration, approximate location, device and browser data. For signed-in Google users: aggregated age group, gender and interests	Your consent via the cookie banner (art. 6.1.a GDPR and art. 22.2 LSSI). You can withdraw it at any time via Cookie settings. Without consent, no statistics are collected
Embedded content. Showing our distribution map (Google Maps) and the online magazine (Issuu)	IP address and technical data of your device, sent to Google or Issuu when the map or magazine is loaded	Your consent via the cookie category “Additional” (art. 6.1.a GDPR and art. 22.2 LSSI). Without consent, the map and magazine are not loaded
Website operation and security. Hosting the website, delivering fonts and protecting the site	IP address, browser data, date and time of the visit (server logs)	Our legitimate interest in a secure and working website (art. 6.1.f GDPR)

Mandatory data. In forms, the mandatory fields are marked. Without them we cannot send the newsletter or handle your request. Everything else is optional.

No automated decisions. We do not make decisions based solely on automated processing, and we do not build profiles that have legal or similarly significant effects on you.

No sale of data. We never sell or rent your personal data.

3. Who receives your data

We share data only with service providers that process it on our behalf, under a data processing agreement, or where the law requires it.

Provider	What they do for us	Location
CreArte Studio, with hosting by Internet Today	Website design, maintenance and hosting	EU (the Netherlands)
Mailjet (Sinch Mailjet SAS)	Newsletter sign-up forms and sending newsletters	EU
Google Ireland Ltd. / Google LLC	Website statistics (Google Analytics, including Google signals and advertising reporting features, after consent) and the embedded map (Google Maps, after consent)	EU / USA
Issuu (Bending Spoons S.p.A.)	Online viewer for the magazine (after consent)	EU (Italy)
Adobe Inc.	Delivering the fonts used on the website (Adobe Fonts)	USA
Stripe Payments Europe Ltd.	Processing ticket payments for events	EU / USA

We also use providers for e-mail, accounting and invoicing, who only process data on our behalf. We may also disclose data to public authorities when we are legally required to do so.

When Google signals is active, Google processes the data as an independent controller for signed-in users who have enabled ad personalisation in their Google account. You can view and delete this data, or switch off ad personalisation, via My Activity and My Ad Center.

Transfers outside the EU. Some providers (Google, Adobe, Stripe) may process data in the United States. These transfers are based on the EU-US Data Privacy Framework, where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

4. How long we keep your data

Data	Retention period
Newsletter subscription	Until you unsubscribe. Proof of your consent is kept for 3 years after you unsubscribe
E-mail correspondence	1 year after the last contact, unless it becomes part of a contract
Client, advertiser and invoicing data	For the duration of the contract and then 6 years, as required by the Spanish Commercial Code (art. 30 Código de Comercio) and tax law
Editorial contributions	As long as the article is published. Correspondence about it: 1 year after the last contact
Comments	As long as the comment is published. You can ask us to remove your comment at any time. Comments marked as spam are deleted after 7 days
Event registrations	1 year after the event. Payment and invoicing data: 6 years
Event photos	Photos published in a printed issue remain in that issue. Online, we remove a photo of you at your request. Unpublished photos: 1 year after the event
Website statistics	2 months in Google Analytics (standard setting)
Server logs	3 years (set by our hosting provider)

5. How we protect your data

We take appropriate technical and organisational measures to protect your data, including secure (HTTPS) connections, personal logins with strong passwords and two-factor authentication where available, regular updates and backups of the website, and access limited to the people who need it. If a data breach occurs that is likely to put your rights at risk, we will notify the Spanish Data Protection Agency within 72 hours and inform you where required.

6. Your rights

You have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”);
• restrict the processing of your data;
• data portability: receive your data in a structured, commonly used format;
• object to processing based on our legitimate interest, for example to the publication of event photos in which you appear;
• withdraw your consent at any time, without affecting processing carried out before. For the newsletter, use the unsubscribe link. For cookies, use Cookie settings.

To exercise your rights, send an e-mail to admin@theislander.online or a letter to our registered office. We will reply within one month. This period may be extended by two months for complex or numerous requests, in which case we will let you know. We only ask for proof of identity if we have reasonable doubts about who is making the request.

7. Complaints

If you believe we are not handling your data correctly, please contact us first so we can resolve it. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es) or with the supervisory authority of the EU country where you live.

8. Minors

Our website and services are intended for professionals and adults in the yachting industry. We do not knowingly collect data from children under 14. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Links to other websites

Our website and magazine contain links to websites of advertisers and partners. We are not responsible for the privacy practices of those websites. Please read their own privacy policies.

10. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version.

Cookie Policy

What are cookies?

Cookies are small text files that a website stores on your device. Some are necessary for the website to work. Others, such as analytics cookies and embedded content, are only placed with your consent.

How we ask for your consent

When you first visit our website, a cookie banner lets you accept all, reject all or choose per category in settings. Rejecting is as easy as accepting. Simply continuing to browse does not count as consent. Your choice is stored for 180 days, after which we ask again.

You can change or withdraw your choice at any time via Cookie settings, at the bottom of every page.

Cookie categories

Category	Purpose	Consent needed?
Strictly necessary	Make the website work and remember your cookie choice	No
Analytics	Help us understand how the website is used and who our readers are (Google Analytics, including Google signals). These are only placed with your consent	Yes
Additional	Show embedded content from other providers: the distribution map (Google Maps) and the online magazine (Issuu). These only load with your consent	Yes

Cookies we use

Cookie	Provider	Purpose	Duration	Category
moove_gdpr_popup	theislander.online	Remembers your cookie preferences	180 days	Strictly necessary
pum-275850	theislander.online	Remembers that you closed the newsletter pop-up, so it does not keep appearing	about 1 month	Strictly necessary
comment_author_…, comment_author_email_…, comment_author_url_…	theislander.online	Remember your name, e-mail address and website for your next comment. Only placed if you tick the box under the comment form	about 1 year	Set at your request (checkbox)
_ga	Google	Distinguishes visitors for statistics and audience reports	2 years	Analytics
_ga_51BS9K2M8C	Google	Keeps track of the session	2 years	Analytics

Google signals: if you are signed in to Google, Google may use its own cookies on google.com and doubleclick.net to link your visit to your account. These cookies are set and managed by Google; see Google’s cookie policy.

Third-party content

Some pages contain content from other providers. When this content loads, your browser connects directly to these providers, who receive your IP address and may place their own cookies. Google Maps and Issuu only load if you accept the category “Additional”; Mailjet and Adobe Fonts load on every page:

• Google Maps on the pages About us and Order hard copy, to show where you can find the magazine. Google may place the cookies NID and SEARCH_SAMESITE (6 months) and __Secure-ENID (13 months). See Google’s privacy policy.
• Issuu on the page Online paper magazine, to read the magazine online. Issuu receives your IP address and technical data of your device. In our test, Issuu did not place any cookies. See Issuu’s privacy policy.
• Mailjet, on every page, to show our newsletter sign-up form. Mailjet receives your IP address and technical data of your device. In our test, Mailjet did not place any cookies.
• Adobe Fonts, on every page, to display the fonts of our website. Adobe receives your IP address but, according to Adobe, does not place cookies for this. See Adobe Fonts privacy.

Changing your cookie settings

You can change or withdraw your consent at any time, as easily as you gave it. Open Cookie settings to switch categories on or off. The link is also at the bottom of every page of our website.

Managing cookies in your browser

You can also block or delete cookies in your browser settings. Blocking all cookies may affect how the website works.

• Chrome
• Firefox
• Safari
• Edge