Privacy Policy

Effective Date: July 6, 2026

1. Introduction

Schaller Associates S.L. respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal information we collect, how we use it, the legal basis for processing it, and your rights when you visit our website or contact us.

This Privacy Policy is intended to comply with the European Union General Data Protection Regulation (GDPR) and applicable Spanish data protection legislation.

2. Data Controller

The controller responsible for processing your personal data is:

Schaller Associates S.L.
C/Bisbe Verger 26
07650 Santanyí
Mallorca, SpainTel. +34 684 857 909
Email: info@samallorca.com

Schaller Associates S.L. is not legally required to appoint a Data Protection Officer under Article 37 GDPR. Any questions regarding data protection may be directed to the contact details above.

3. Personal Data We Collect

Depending on how you interact with our website, we may collect:

  • Name

  • Email address

  • Telephone number (if provided)

  • Information you submit through our contact form

  • IP address

  • Browser type and version

  • Operating system

  • Device information

  • Website usage data

  • Cookie information

Providing personal data through our contact form is voluntary. However, certain information may be necessary for us to respond to your enquiry.

Please do not submit sensitive personal information (such as health information, financial account details or government identification numbers) through our contact form unless we specifically request it.

4. Contact Form

If you contact us through our website, we process the personal information you voluntarily provide, including your name, email address and message.

We use this information solely to:

  • respond to your enquiry;

  • communicate with you regarding your request; and

  • provide information about our services where requested.

We do not use your contact information for marketing purposes unless you have provided your explicit consent.

Where applicable under the GDPR, the legal basis for processing your personal data is:

  • Article 6(1)(b) GDPR – processing necessary to take steps at your request before entering into a contract; and/or

  • Article 6(1)(f) GDPR – our legitimate interest in responding to business enquiries and providing customer support.

5. Website Hosting

Our website is hosted by Squarespace, Inc., a company based in the United States.

As part of providing its hosting services, Squarespace may process technical information including:

  • IP addresses;

  • browser information;

  • device information;

  • server logs; and

  • other technical data required for the operation and security of the website.

For further information, please consult Squarespace's Privacy Policy.

6. Website Analytics

We use the integrated Squarespace Analytics service to better understand how visitors use our website and to improve its performance and content.

Squarespace Analytics may collect information such as:

  • number of visitors;

  • pages viewed;

  • referral sources;

  • browser and device information;

  • approximate geographic region; and

  • general website usage statistics.

The information is aggregated wherever possible and is not used by us to identify individual visitors.

7. Cookies

Our website uses cookies and similar technologies. A cookie is a small text file stored on your device that helps a website function or collect information about how it is used.

We use the following categories of cookies:

Strictly necessary cookies
These cookies are essential for the operation and security of the website, including remembering your cookie preferences. They cannot be disabled through our cookie banner.

Analytics cookies
Squarespace Analytics may use cookies to measure website traffic and understand general visitor behaviour. These cookies are only placed after you have provided your consent where required by law.

We do not currently use advertising, marketing or third-party retargeting cookies.

Non-essential cookies are only placed after you provide your consent through our cookie banner.

You may change or withdraw your cookie consent at any time through our cookie settings (where available) or through your browser settings.

8. Legal Basis for Processing

Where the GDPR applies, we process personal data on one or more of the following legal bases:

  • your consent;

  • performance of a contract or pre-contractual measures;

  • compliance with legal obligations; or

  • our legitimate interests in operating, maintaining and improving our website and services, provided these interests are not overridden by your rights and freedoms.

9. Recipients of Personal Data

We are a small, two-person office and do not routinely share personal data with third parties beyond what is necessary to operate our website and meet our legal obligations.

We may share personal data with:

  • Squarespace, our website hosting provider;

  • our email service provider;

  • IT support providers, where necessary for technical maintenance; and

  • professional advisers (such as legal or accounting advisers), where required.

These providers process personal data only on our behalf and in accordance with applicable data protection laws.

We do not sell your personal data to third parties.

10. International Data Transfers

Some of our service providers, including Squarespace, are based outside the European Economic Area (EEA) or may transfer personal data outside the EEA.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or other legally recognised transfer mechanisms where required.

11. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected.

In general:

  • contact form enquiries are retained for up to 12 months after our last communication unless a contract or ongoing business relationship is established;

  • client records and related documentation are retained for the periods required by applicable accounting, tax and commercial legislation; and

  • website analytics data is retained only for the period necessary to generate aggregated website statistics.

When personal data is no longer required, it is securely deleted or anonymised unless a longer retention period is required by law or necessary to establish, exercise or defend legal claims.

12. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration or destruction, appropriate to the size and nature of our business.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

13. Your Rights

Subject to applicable law, you have the right to:

  • access your personal data;

  • request correction of inaccurate personal data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to processing;

  • withdraw consent at any time where processing is based on consent;

  • request data portability where applicable; and

  • lodge a complaint with the competent supervisory authority.

To exercise any of these rights, please contact us using the details below.

We will respond to your request within one month as required under the GDPR.

If you believe your personal data has been processed unlawfully, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or with the supervisory authority in your country of residence.

14. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling.

15. Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites.We encourage you to review their respective privacy policies.

16. Children's Privacy

Our website is not intended for children under the age of 16, and we do not knowingly collect personal data from children.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or business developments.Any updates will be published on this page together with the revised effective date.

18. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Schaller Associates S.L.
C/Bisbe Verger 26
07650 Santanyí
Mallorca, Spain
Tel. +34 684 857 909
Email: info@samallorca.com

zurück