Home / Privacy Policy
Legal

Privacy Policy

How we collect, use and protect your personal data, in line with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

Leer en español

1. Who is responsible for your data

  • Company name: Balloon Man Marbella, Spain, SL
  • Trade name: Balloon Man Spain
  • Tax ID (NIF): B75879221
  • Registered address: Eugenia de Montijo, 2 Esc 3, Casa 33, 29640 Fuengirola, Málaga, Spain
  • Email: laura@balloonmanspain.com
  • Website: www.balloonmanspain.com

In this policy, "we" and "us" mean Balloon Man Marbella, Spain, SL.

2. What data we collect

We only collect the data you choose to give us, plus some technical data that is created automatically when you visit the website. This includes:

  • When you use our contact form, email us or message us on WhatsApp: your name, email address, phone number, event date and location, and the details of your enquiry.
  • When you book our services: the details needed to organise your event, and billing details so we can invoice you.
  • Technical data such as your IP address, processed automatically by our website host and by the third-party services described in section 8.

3. Why we use your data, and our legal basis

  • To reply to your enquiry and prepare a quote. Legal basis: steps taken at your request before entering into a contract (Article 6.1(b) GDPR).
  • To organise and deliver your event and manage your booking. Legal basis: performance of our contract with you (Article 6.1(b) GDPR).
  • To issue invoices and meet our tax and accounting obligations. Legal basis: legal obligation (Article 6.1(c) GDPR).
  • To keep the website secure and working properly. Legal basis: our legitimate interest (Article 6.1(f) GDPR).

We will only send you marketing messages if you have agreed to receive them, and you can withdraw that consent at any time.

4. How long we keep your data

  • Enquiries that do not lead to a booking: only for as long as needed to deal with your enquiry and for a reasonable period afterwards in case you come back to us, then they are deleted.
  • Bookings and invoices: for the periods required by Spanish tax and commercial law, which are generally between 4 and 6 years.

5. Who we share your data with

We do not sell your data. We share it only where needed, with:

  • Service providers who act on our behalf: 17hats (contact form and enquiry management), Google (business email), Meta (WhatsApp, if you message us there) and Netlify (website hosting).
  • Venues, planners and suppliers involved in your event, where necessary to organise it.
  • Tax, legal and public authorities, where the law requires it.

Some of these providers are based outside the European Economic Area, for example in the United States. Where your data is transferred outside the EEA, we rely on the safeguards required by law, such as the EU-U.S. Data Privacy Framework or standard contractual clauses approved by the European Commission.

6. Your rights

You have the right to access your data, correct it, ask us to delete it, restrict or object to how we use it, and receive a copy of it in a portable format. Where we use your data based on your consent, you can withdraw that consent at any time.

To exercise any of these rights, email us at laura@balloonmanspain.com. We will reply within one month, and we may ask you to confirm your identity first. If you think we have not handled your data properly, you also have the right to complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Children

Our services are booked by adults. We do not knowingly collect personal data directly from children. Where a parent or guardian gives us a child's first name or age for a party, for example for personalised decoration, we use it only to deliver that event.

8. Cookies and third-party content

This website does not use analytics or advertising cookies, and we do not track you across other websites. Please be aware of the following:

  • Contact form. Our contact form is embedded from 17hats, which may use its own technical cookies so that the form works. Please see 17hats' privacy policy for details.
  • Hosting. Our host, Netlify, records technical information such as IP addresses in server logs, for security and to run the service.
  • Social media links. If you click a link to Instagram or Facebook, you leave our website and their own privacy policies apply.

If we add analytics or marketing cookies in future, we will update this policy and ask for your consent first.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.

Last updated: 6 October 2026