Privacy Policy and Cookie Policy

Last updated: 17.07.2026

1. Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), we inform you that the controller of your personal data is:

• Company name: JUMBO
• Tax ID (NIF/CIF): 518585247
• Registered address: 7350-100 Elvas (Portugal)
• Email: info@jumboats.com
• Phone: +351 934 483 926
• Website: jumboats.COM

2. Applicable Legislation

This policy has been drafted in accordance with:

• Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR).
• Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
• Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

3. Purposes, Legal Basis and Retention

3.1. Contact form

• Purpose: To respond to enquiries, information requests and communications sent by the user.
• Data processed: Name and surname, email address, phone number, message content.
• Legal basis: Consent of the data subject (Art. 6.1.a GDPR).
• Retention: Until the enquiry is resolved and thereafter for one (1) year, unless a longer period is required by law.

3.2. Provision of contracted services

• Purpose: To manage the contractual relationship, provide the requested services, invoicing and after-sales support.
• Data processed: Identification, contact, billing and payment data.
• Legal basis: Performance of a contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).
• Retention: For the duration of the contractual relationship and thereafter for the statutory limitation periods (six years under the Spanish Commercial Code; four years for tax obligations).

3.3. Newsletter and commercial communications

• Purpose: To send newsletters, news and commercial information about our products and services.
• Data processed: Name and email address.
• Legal basis: Consent of the data subject (Art. 6.1.a GDPR), or legitimate interest under Art. 21.2 LSSI-CE where the recipient is an existing customer and the communications relate to similar products or services.
• Retention: Until the user withdraws consent or unsubscribes.

3.4. Browsing and cookies

• Purpose: To ensure the technical operation of the website, analyse usage and, where applicable, display personalised advertising.
• Data processed: IP address, device and browser identifiers, browsing data.
• Legal basis: Consent (Art. 6.1.a GDPR), except for strictly necessary cookies, which rely on legitimate interest (Art. 6.1.f GDPR).
• Retention: As set out in the cookie table in Section 10.

4. Obligation to Provide Data

Fields marked as mandatory in our forms are necessary to fulfil the stated purpose. Failure to provide them may prevent us from processing your request. The user warrants that the data provided is truthful, accurate and up to date, and undertakes to notify us of any changes.

5. Recipients and Data Transfers

Your data will not be disclosed to third parties except where required by law or where necessary for the provision of the service. Data may be accessed by the following categories of processors, with whom the corresponding data processing agreements have been signed under Art. 28 GDPR:

• Hosting and technical infrastructure providers.
• Email and marketing platform providers.
• Web analytics providers.
• Public authorities and bodies where legally required.

6. International Transfers

Some of our providers may be located outside the European Economic Area. In such cases, transfers are carried out on the basis of an adequacy decision of the European Commission, Standard Contractual Clauses, or another mechanism provided for in Chapter V GDPR, together with the appropriate supplementary measures. You may request further information at info@jumboats.com.

7. Your Rights

You may exercise the following rights at any time free of charge:

• Access: to know whether we are processing your data and obtain a copy of it.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request deletion of your data where it is no longer necessary.
• Restriction of processing: to request that we retain data solely for the exercise or defence of claims.
• Objection: to object to processing based on legitimate interest, including profiling.
• Data portability: to receive your data in a structured, commonly used, machine-readable format.
• Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Not to be subject to automated decision-making producing legal effects or similarly significantly affecting you.

To exercise these rights, write to info@jumboats.com or to the postal address indicated in Section 1, stating the right you wish to exercise and attaching a copy of your national ID card or equivalent identification document. We will respond within one (1) month, extendable by two (2) further months where necessary.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, particularly if you consider that your request has not been satisfactorily addressed.

8. Security Measures

We apply the technical and organisational measures required by Art. 32 GDPR to ensure a level of security appropriate to the risk, including encryption of communications (SSL/TLS), access control, pseudonymisation where applicable, regular backups and periodic review of the effectiveness of these measures.

9. Minors

Our services are not directed at persons under fourteen (14) years of age. Where processing is based on consent, only users aged fourteen (14) or over may give it validly; below that age, the consent of a parent or legal guardian is required (Art. 7 LOPDGDD).

10. Cookie Policy

10.1. What are cookies?

Cookies are files downloaded to your device when you access certain websites. They allow the website to store and retrieve information about your browsing habits and, depending on the information they contain and how you use your device, may be used to recognise you.

10.2. Types of cookies used

10.3. Classification

• By ownership: own cookies (managed by jumbo) and third-party cookies (managed by external providers).
• By duration: session cookies (deleted when the browser closes) and persistent cookies (stored for a defined period).
• By purpose: strictly necessary, preference, analytics, and advertising or behavioural advertising cookies.

10.4. Consent

On your first visit, a banner will inform you of the cookies used and allow you to accept all, reject all, or configure them by category. Non-necessary cookies will not be installed until you give your consent. Rejecting cookies is as easy as accepting them, and continuing to browse does not constitute consent.

10.5. Managing and withdrawing consent

You may change or withdraw your preferences at any time via the cookie settings panel available at [LINK TO SETTINGS PANEL]. You may also block or delete cookies through your browser settings:

• Google Chrome: Settings › Privacy and security › Cookies and other site data
• Mozilla Firefox: Settings › Privacy & Security › Cookies and Site Data
• Safari: Preferences › Privacy
• Microsoft Edge: Settings › Cookies and site permissions

Please note that disabling strictly necessary cookies may affect the correct functioning of the website.

11. Social Media

If you interact with our profiles on social networks, the processing of your data will also be governed by the terms and privacy policies of the relevant platform, over which we have no control. Our processing is limited to responding to your messages and managing the content published on our profiles, on the basis of your consent.

12. Changes to this Policy

We may update this Privacy and Cookie Policy to reflect legislative, technical or operational changes. Any modification will be published on this page with a new update date. We recommend reviewing it periodically.

13. Contact

For any questions regarding this policy or the processing of your personal data, please contact us at info@jumboats.com.