Privacy Policy

Last updated: 02/06/2026

1. Identification of the controller

  • Data controller: Discover Pitiusas, S.L.
  • Tax ID (CIF): B16533044.
  • Adress: C/ Aragón, 71, 07800, Ibiza, Illes Balears, España.
  • Business adress: C/ de Carles V, 8, 07800, Ibiza, Illes Balears, España.
  • Data protection email: lopd@formenterafaster.com

No Data Protection Officer has been appointed, without prejudice to the fact that the user may contact the above email address for any matter relating to data protection.

2. Scope of this policy

This Privacy Policy applies to the processing of personal data carried out through the website https://www.formenterafaster.com/, the booking platform, the customer service channels and the electronic communications linked to the services of Discover Pitiusas, S.L.

Where the transport service is provided by a shipping company, the latter may act as an independent controller with respect to the processing necessary to carry out the transport, manage boarding, apply its conditions and comply with its legal obligations. Discover’s involvement as a reservation centre is limited to intermediation, the processing of the booking and the communications necessary for contracting and managing the booked service.

3. Purposes and legal bases for processing

Discover Pitiusas, S.L. will process personal data for the following purposes and on the legal bases indicated:

  1. Management of information requests, enquiries and customer service: performance of pre-contractual or contractual measures, legitimate interest in handling requests and, where applicable, compliance with legal obligations regarding consumers and users.
  2. Management of bookings, issuance of tickets or booking references and communication with the shipping company: performance of the contract or application of pre-contractual measures requested by the user.
  3. Management of payments, confirmations, refunds, charges and prevention of fraudulent transactions: contractual performance, compliance with legal obligations and legitimate interest in transaction security.
  4. Administrative, accounting, tax and commercial management: compliance with legal obligations.
  5. Sending of the company’s own commercial communications: the user’s consent or, where legally applicable, a prior contractual relationship regarding similar services, with the possibility of simple and free objection in each communication.
  6. Statistical analysis, improvement of the user experience and non-necessary personalisation of the service: consent where cookies, identifiers or non-technical technologies are used; legitimate interest where aggregated or anonymised data not requiring consent are used.
  7. Platform security, fraud prevention, preservation of evidence and defence against claims:legitimate interest and, where applicable, compliance with legal obligations.

4. Categoies of data processed

The following categories of data may be processed: identifying and contact data; ID document or passport data where necessary for the booking or boarding; passenger data, including minors where applicable; booking data; tokenised payment data or data managed by the payment gateway; billing data; communications held with the user; browsing, device, IP address, online identifier and cookie preference data; and data necessary for fraud prevention or incident management.

Discover Pitiusas, S.L. will not request special categories of data unless strictly necessary due to a legal obligation or a service circumstance requested by the user — for example, assistance for persons with reduced mobility — and always on the corresponding legal basis.

5. Origin and mandatory nature of the data

The data will come from the user themselves, from the person making the booking on behalf of other passengers, from the shipping company or supplier, from the payment gateway, from technology providers and from browsing on the platform.

Data marked as mandatory in the forms will be necessary to manage the request or booking. Failure to provide such data may prevent the processing of the booking, the issuance of the ticket or the provision of the requested service.

6. Recipients and disclosures of data

The data may be disclosed to the shipping companies or providers of the contracted service, payment gateways and entities, technology and hosting providers, customer service providers, legal, accounting or tax advisers, insurance entities where applicable, public administrations, tourism authorities, transport authorities, consumer bodies, courts and tribunals, and other third parties where there is a legal obligation, contractual basis or sufficient legitimate interest.

Shipping companies will process the data necessary for carrying out the transport in accordance with their own privacy policies, which must be made available to the customer before booking where applicable.

Providers that process personal data on behalf of Discover Pitiusas, S.L. (among others, hosting, technology tools, customer service or payment management) have the status of data processors and act under a contract that complies with Article 28 of the GDPR, and may not use the data for their own purposes.

7. International transfers

Some technology, analytics, advertising or communications providers may be located outside the European Economic Area or may process data from third countries. In such cases, Discover Pitiusas, S.L. will apply the safeguards provided for in data protection regulations, including adequacy decisions, standard contractual clauses, binding corporate rules or other valid safeguards. In the case of providers established in the United States, such as Google or Meta, the transfer may be covered by the adequacy decision under the EU-US Data Privacy Framework where the receiving entity is certified, or, failing that, by standard contractual clauses.

Before publishing this policy, the providers involving international transfers and the specific safeguards applied must be identified, particularly in relation to analytics, advertising, CRM, hosting and payment gateway tools.

8. Retention periods

The data will be retained for as long as necessary to manage the contractual relationship, the booking, any incidents and the liabilities arising from the service.

Data with accounting, tax or commercial relevance will be retained for the legally required periods. As a general rule, commercial and accounting documentation may be retained for six years, without prejudice to applicable tax, administrative or judicial periods.

Data processed on the basis of consent will be retained until withdrawal or until they are no longer necessary for the authorised purpose. Data linked to commercial communications will be retained until the user withdraws their consent or objects to receiving them.

Browsing and cookie data will be retained in accordance with the periods indicated in the Cookie Policy and in the configuration panel.

9. Users' rights

The user may exercise the rights of access, rectification, erasure, objection, restriction of processing, portability and, where applicable, the right not to be subject to automated individual decisions, by sending a request to lopd@formenterafaster.com or to the registered office indicated.

The request must sufficiently identify the data subject. Where there are reasonable doubts as to their identity, Discover Pitiusas, S.L. may request additional information necessary to confirm it.

The user may withdraw the consent given at any time, without this affecting the lawfulness of the processing carried out prior to withdrawal.

Discover Pitiusas, S.L. will respond to requests to exercise rights without undue delay and, in any event, within one month of receipt, extendable by a further two months where the complexity or number of requests so justifies, the user being informed in such cases of the extension and the reasons for it.

The user may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or with the competent supervisory authority.

10. Automated decisions and profiling

Discover Pitiusas, S.L. may analyse browsing, preferences or behaviour to improve the service and personalise the experience, always within the legal bases indicated and respecting the user’s cookie configuration and consents.

No decisions based solely on automated processing that produce legal effects on the user or similarly significantly affect them will be taken, unless prior specific information is provided and there is a sufficient legal basis.

11. Minors

Contracting through the platform must be carried out by persons of legal age or with sufficient legal capacity. Where a booking includes minors, their data may be processed to manage the booking, the ticket, boarding, documentation requirements, discounts or the shipping company’s conditions.

Where the processing of minors’ data is based on consent and the minor is under fourteen years of age, the consent of the person holding parental authority, guardianship or legal representation will be required. Discover Pitiusas, S.L. does not deliberately direct commercial communications or profiling processing to minors.

12. Security

Discover Pitiusas, S.L. applies appropriate technical and organisational measures to preserve the confidentiality, integrity, availability and resilience of personal data, including access controls, encryption in transit, payment security measures, monitoring and incident management procedures.

13. Amendments

Discover Pitiusas, S.L. may update this Privacy Policy to adapt it to legal, technical, organisational or processing changes. The version in force will be the one published on the website at any given time.