Privacy policy

1. Data controller

The controller of personal data collected through this website is:

• JET CANTABRIA 2024 S.L. (JET-24)
• Tax ID (NIF): B75249524
• Address: Polígono de Raos, Parcela 12, Subparcela G6, 39600 Maliaño (Cantabria), Spain
• Contact email: center@jet24brp.com

2. Data we process

Depending on how you interact with the site, we may process the following categories of data:

• Identification and contact data: name, email address, phone number and message sent via the contact form.
• Subscription data: email address provided in the newsletter form.
• Technical data: IP address, cookie identifiers, browser and device information where necessary for security, site operation or, with your consent, analytics or marketing.
• Anti-bot verification data: token generated by Cloudflare Turnstile when submitting forms.

3. Purposes and legal basis

We process your personal data for the purposes below, with the corresponding legal basis under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD):

• Managing and responding to enquiries sent via the contact form. Legal basis: consent and, where applicable, pre-contractual measures at the data subject's request (Art. 6(1)(a) and (b) GDPR).
• Handling information requests, quotes and commercial follow-up arising from your interest in our products or services. Legal basis: consent and pre-contractual measures (Art. 6(1)(a) and (b) GDPR).
• Sending commercial communications and the newsletter where you have expressly subscribed. Legal basis: consent (Art. 6(1)(a) GDPR), withdrawable at any time.
• Ensuring site security, preventing abuse and verifying legitimate submissions via Cloudflare Turnstile. Legal basis: legitimate interest in protecting the site and users (Art. 6(1)(f) GDPR).
• Analysing site usage and measuring advertising campaigns only if you have given consent via the cookie banner. Legal basis: consent (Art. 6(1)(a) GDPR).

4. Recipients and processors

Your data will not be disclosed to third parties except where legally required or necessary to provide the requested service. In particular, data may be shared with the following processors acting on our instructions with GDPR contractual safeguards:

• LPB Digital — development, maintenance and automation of the website.
• Google Sheets — structured storage of leads from contact and newsletter forms.
• Telegram — internal notifications of new leads to the team.
• Cloudflare, Inc. — website hosting on Cloudflare Pages, perimeter security, CDN and Turnstile service.
• Email providers linked to lead notification flows, as needed to send internal alerts or confirmations.
• Google LLC and Meta Platforms, Inc. — only if you accept analytics or marketing cookies, for Google Analytics 4 and Meta Pixel respectively.

5. International transfers

Some of the providers listed may process data outside the European Economic Area. In those cases, safeguards under the GDPR will apply, such as Standard Contractual Clauses approved by the European Commission or other recognised adequacy mechanisms.

6. Retention periods

We retain personal data for as long as necessary to fulfil the purpose for which it was collected and thereafter for periods required by applicable law or until you exercise your right to erasure, restriction or objection where applicable.

• Contact enquiries and quotes: for the duration of handling the request and, at most, 3 years from the last interaction, unless a different legal obligation applies.
• Newsletter subscriptions: until you request unsubscribe or withdraw consent.
• Analytics and marketing data: according to the periods stated in the cookie policy and your chosen settings.
• Technical and security logs: strictly as long as needed to ensure service integrity.

7. Your rights

You may exercise the following rights in relation to your personal data:

• Access: to know what data we process about you.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion when data is no longer needed or you withdraw consent.
• Restriction: to request temporary suspension of processing in legally provided cases.
• Portability: to receive your data in a structured, commonly used format where processing is based on consent or contract and carried out by automated means.
• Objection: to object to processing based on legitimate interest or to commercial communications.

8. How to exercise your rights

To exercise your rights, send a request to center@jet24brp.com stating the right you wish to exercise and verifying your identity where necessary. We will respond within one month, extendable by two further months in complex cases, in accordance with the GDPR.

If you subscribed to the newsletter, you may also unsubscribe by replying to any communication received or contacting the address above.

9. Complaint to the supervisory authority

If you believe processing of your data does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

10. Minors

This website is not directed at children under 14. We do not knowingly collect data from minors. If we become aware that a minor's data has been provided without proper authorisation, we will delete it.

11. Security

JET CANTABRIA 2024 S.L. applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or destruction. Measures include serving the site over HTTPS and anti-bot protection on forms.