LEGAL
Privacy policy
Last updated: August 2026
This Privacy Policy explains how we process the personal data collected through the website, our contact forms and the communications held with our team.
Data controller: who we are
Company name: GOLDEN FLIGHTS BROKER S.L.
VAT number: ES B57826703
Address: c/ Miquel Lladó 7, bloque D, 2-1, 07013 Palma de Mallorca (España)
Telephone: +34 635 30 20 58
Email: info@goldenflights.com
Purpose: what we use your data for
All data provided by our clients or website visitors is included in the record of personal data processing activities created and maintained under the responsibility of the company. It is essential in order to provide the services requested, prepare flight proposals and answer the questions raised by our visitors.
Our policy is not to build profiles of the users of our services.
Legal basis: why we need your data
Contractual relationship: applies when you contract one of our services.
Legitimate interest: to handle enquiries and complaints and to manage the collection of amounts due.
Your consent: if you are a user of our website, by ticking the box in the contact form you authorise us to send you the communications necessary to respond to your enquiry or information request.
Recipients: who we share your data with
We do not disclose your personal data to anyone, except to public or private entities to which we are legally required to provide it, and to service providers acting as data processors (web hosting, analytics tools and email) under a contract in accordance with Article 28 GDPR.
In order to carry out a flight operation, your data may be communicated to airlines, air operators and airport suppliers strictly necessary for the provision of the service.
If, beyond the cases described, we need to disclose your personal information to other entities, we will first request your permission through clear options allowing you to decide.
International transfers
As a general rule we do not transfer your personal data outside the European Economic Area. Where the use of certain analytics tools involves an international transfer, it takes place under the safeguards set out in Chapter V GDPR and only if you have consented to the corresponding cookies.
Retention: how long we keep your data
We only keep your personal data for as long as necessary to achieve the purposes for which it was collected. In determining the appropriate retention period we examine the risks involved in the processing as well as our contractual, legal and regulatory obligations.
The company will keep personal data, duly blocked, after the end of the relationship for the limitation period of any actions that may arise from it.
Security: how we protect your data
We make every reasonable effort to maintain the confidentiality of the personal information processed in our systems. We maintain strict security standards to protect personal data against accidental loss and unauthorised access, processing or disclosure, taking into account the state of the art and the nature and risks of the data.
We require third parties providing us with support services to comply with the same standards and to allow us to audit them.
Your rights
Right of access to your personal data and to the processing operations carried out with it.
Right to rectification of any inaccurate personal data.
Right to erasure of your personal data, where possible.
Right to restriction of processing where the accuracy, lawfulness or necessity of the processing is in doubt.
Right to object to the processing of your personal data where the legal basis is our legitimate interest.
Right to data portability where the legal basis is a contractual relationship or your consent.
Right to withdraw your consent at any time.
You may exercise your rights free of charge at any time by contacting us at info@goldenflights.com or in writing at c/ Miquel Lladó 7, bloque D, 2-1, 07013 Palma de Mallorca (España), attaching a copy of your identity document.
Complaints
If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency through the following channels:
Website: https://www.aepd.es
Post: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid
Telephone: 901 100 099 and 912 663 517
Lodging a complaint with the Spanish Data Protection Agency is free of charge and does not require legal representation.
Updates to this policy
The company reserves the right to amend this policy to adapt it to legislative or case-law developments that may affect compliance with it.