Privacy policy

The controller within the meaning of the GDPR is Island Forum S.L.U., Carrer de la Garsa 6, 07610 Palma, Illes Balears, Spain, email playa@coworking-mallorca.com.

When you visit the website, our hosting provider processes technically necessary data such as your IP address, the time of the request, the page requested, the amount of data transferred and the browser type. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). This data is not combined with other sources.

For a booking we process your name, email address, preferred date, the product booked and optionally your phone number. The legal basis is performance of the contract (Art. 6(1)(b) GDPR). Payments are handled by Stripe; payment details are transmitted directly to Stripe and are not stored by us. Booking and invoice data is retained for the statutory retention periods.

If you create an account, we store your name, email address and your password only as a cryptographic hash. The account lets you manage your bookings, your reminder settings and your job board entries. The legal basis is Art. 6(1)(b) GDPR. You can have your account deleted at any time; we then delete all related data unless a statutory retention obligation applies.

We only send newsletters and reminders with your explicit consent (Art. 6(1)(a) GDPR). We use double opt-in: after signing up you receive an email with a confirmation link. We log the time and content of the consent in order to be able to demonstrate it. You can withdraw your consent at any time via the unsubscribe link in every email or by messaging us.

If you publish a job offer or a request for work, the content you enter — including the contact details you provide — is publicly visible. Please only publish data you deliberately want to make public. We review entries before they go live and reserve the right to remove entries that breach the terms or applicable law. Reports about entries are stored so that misuse can be traced.

If you contact us via WhatsApp, by phone or by email, we process your details in order to handle the enquiry (Art. 6(1)(b) or (f) GDPR). WhatsApp is operated by WhatsApp Ireland Limited, and data may also be processed outside the EU. If you would rather avoid that, you can reach us by email or phone just as well.

We use technically necessary cookies for sign-in, booking and language selection. Optional cookies are only set after you consent. Details are in the cookie notice.

• Hosting provider for operating the website
• Stripe Payments Europe, Ltd. for payment processing
• Email service provider for sending confirmations and newsletters

Data processing agreements under Art. 28 GDPR are in place with all providers. Transfers to third countries only take place on the basis of appropriate safeguards.

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
• Complaint to a supervisory authority, in Spain the Agencia Española de Protección de Datos

For any data protection matter, write to us at playa@coworking-mallorca.com.