Privacy Policy

Last update: April 2026 · Under GDPR (EU 2016/679) and Spanish data protection law (LOPDGDD). The authoritative version is the Spanish original.

1. Data Controller

Controller: KI BALEARES SL
Tax ID: B75965244
Registered office: Plaza de España 11, 1º, 07002 Palma de Mallorca
Email:
Commercial Registry: Registro Mercantil de Palma de Mallorca, Sheet PM-102553

2. Purposes of processing

Responding to inquiries submitted via the website forms or email.
Managing the business relationship with clients and suppliers (invoicing, logistics, payments).
Evaluating candidates for sales agent partnerships.
Sending commercial communications only with prior explicit consent.
Complying with applicable legal obligations (tax, labor, commercial).

3. Legal basis

Consent (Art. 6(1)(a) GDPR) for contact forms and marketing communications.
Contract (Art. 6(1)(b) GDPR) for pre- or post-contractual processing.
Legitimate interest (Art. 6(1)(f) GDPR) for ordinary business operations.
Legal obligation (Art. 6(1)(c) GDPR) for statutory retention requirements.

4. Retention

Inquiries without contractual relationship: up to 12 months after last interaction.
Client and supplier data: for the duration of the relationship and thereafter for the statutory retention periods (minimum 6 years under Spanish Commercial Code, Art. 30).
Rejected applications: up to 12 months, unless extended with explicit consent.

5. Recipients

Competent public authorities (Tax Agency, Social Security, Commercial Registry) to comply with legal obligations.
Processors (hosting, email, accounting, advisory services) under Art. 28 GDPR contracts.
Financial institutions for payment processing.

No transfers of data outside the EEA are currently made.

6. Your rights

You have the right to:

Access your personal data.
Rectification of inaccurate data.
Erasure ("right to be forgotten").
Object to processing.
Restrict processing.
Data portability.
Withdraw consent at any time.
Lodge a complaint with the Spanish Data Protection Authority (www.aepd.es).

To exercise these rights, write to with a copy of your ID.

7. Security measures

Ki Baleares SL has implemented the technical and organizational measures required under Art. 32 GDPR to ensure a level of security appropriate to the risk.

8. Cookies

This website does not currently use tracking, analytics or advertising cookies. Only strictly necessary technical cookies are used, which are exempt from the consent requirement under Art. 22(2) LSSI-CE.

9. Changes

This policy may be updated to reflect legal or business developments. Material changes will be announced on the website with reasonable notice.