Last updated: 11 November 2026
Privacy policy
This policy covers personal data associated with this corporate website and enquiries sent to Enhance. It does not govern booking or traveller data in future services, which will require specific information and agreements.
Review version · registry details and provider terms remain to be completed
On this page
- Who is responsible
- What we collect and where it comes from
- Purposes and legal bases
- How long we keep data
- Access, service providers and international transfers
- Your rights
- Required data and automated decisions
- Scope and changes
01. Who is responsible
ENHANCE CONSULTING SL., tax ID B93871572, registered at Calle Mascarell, 3, bloque 4, 4.º C, 07610 Palma, Illes Balears, Spain, is the controller for the processing described here. Enhance Travel Tech is its trading brand. Contact us at hello@enhancetraveltech.com or at the address above.
02. What we collect and where it comes from
When you email us, we receive your email address, any name and professional details you include, your message and any attachments. Share only what is needed to explain your enquiry. Do not send guest data, identity documents, payment details or special category data through this general contact channel.
This website has no forms that submit data to a server. Contact buttons open your email application; clicking them does not automatically send a message. The website is hosted on Vercel, which may process technical connection data such as IP address, timestamp, requested URL, browser and errors to deliver and protect the website.
If you accept analytics, we load Umami from umami.anlakstudio.com. We send the page path, title, hostname, browser language, screen resolution and only the external referring origin. URL query parameters and fragments are excluded. Connecting to the analytics server also transmits your IP address and technical browser headers. We do not send names, email addresses, booking data or personal identifiers, or enable session recording or advertising.
03. Purposes and legal bases
We respond to service enquiries and, where you ask to enter into a contract personally, take pre-contractual steps under Article 6(1)(b) GDPR. For professional enquiries on behalf of an organisation and general correspondence, we rely on our legitimate interest in responding and maintaining a professional relationship under Article 6(1)(f), limited to that purpose and subject to your right to object.
Necessary security and availability data are processed in our legitimate interest in protecting the service. Applicable legal duties are fulfilled under Article 6(1)(c). Writing to us does not subscribe you to marketing. Any future marketing subscription will have its own information and authorisation mechanism where required.
Audience measurement with Umami is enabled only with your consent (Article 6(1)(a) GDPR). You can reject it or withdraw consent at any time in Cookie preferences. Withdrawal stops new submissions; it does not automatically delete previously submitted statistics. You can contact us to exercise your rights.
04. How long we keep data
The proposed retention rule for this channel is to retain enquiries while we handle them and for up to 12 months after the last interaction, unless a contractual relationship, a valid erasure request, legal obligations or claims require a different period. In those cases, only necessary information will be retained, with restricted access, for the applicable period.
Technical log and backup retention depends on the hosting and email configuration. These periods must be documented and approved before this version is published.
Your analytics choice is stored in your browser for up to 180 days. The retention period for statistics and logs on umami.anlakstudio.com remains to be confirmed with its administrator; no unverified retention period is attributed to this installation.
05. Access, service providers and international transfers
Access is limited to authorised personnel and providers of email, hosting and support, subject to appropriate contractual safeguards. The company has identified Microsoft 365 as its email environment; the contracted entity, service region, subprocessors and effective terms remain to be confirmed. We do not sell contact data. Data may be disclosed to authorities where legally required.
We do not assume all processing takes place within the European Economic Area. Before publication, any international transfers, destinations and safeguards must be verified and disclosed: an adequacy decision or standard contractual clauses and supplementary measures where applicable. You may request information about these safeguards at our contact address.
Analytics is processed by the Umami instance at umami.anlakstudio.com. Its operator, server location, retention periods and contractual terms remain to be completed with its administrator. Using Umami software does not establish those hosting details.
06. Your rights
You may request access, rectification, erasure, objection, restriction and, where applicable, portability by writing to hello@enhancetraveltech.com or our registered address. Tell us which right you wish to exercise and provide enough information to locate your enquiry. We will ask for additional identity information only where there are reasonable doubts. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
We normally respond within one month. If complexity or the number of requests justifies an extension, we will inform you within that period. You may also complain to the Spanish Data Protection Agency (www.aepd.es) or your competent supervisory authority.
07. Required data and automated decisions
You do not need to provide contact details to read this website. To reply to an email, we need a return address and enough context to understand the enquiry. This channel does not use solely automated decisions with legal or similarly significant effects, or advertising profiles.
08. Scope and changes
If we add a form, a booking platform, new analytics features or providers, we will review this policy before activating the relevant processing. The date at the top identifies this version. This is an implementation draft: the operational items identified here must be completed before final publication.
