Privacy policy
What personal data we process, why, how long we keep it and how you can exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Last updated: 15 October 2026
Data controller
LE FONT RIANT, S.L. (trading as Le Flot Riant), Tax ID (NIF) B26819334, C/ 28 de Febrero, 0, ático, edificio Los Verdiales, 29680 Estepona (Málaga), Spain. Email: hello@leflotriant.com. Phone: +34 623 72 37 88.
What data we process
- Website forms (fishing booking, and contact and quote): name, phone, WhatsApp, email, the experience you are interested in, the date, the number of people or anglers and your message.
- Bookings on the website: the data requested by the Bokun booking window (name, contact details and number of people) and, if you pay online, your payment details, which Bokun processes through its payment gateway.
- If you call or write to us by phone, WhatsApp or email: your number or address and whatever you tell us.
- Passenger data required by the Harbour Master’s Office (Capitanía Marítima) and the Guardia Civil for the passenger list of each trip.
- Browsing data: the IP address and the technical browser data received by the server and by the anti-spam service of the forms and, only if you accept analytics cookies, visitor statistics from Google Analytics.
We do not ask for special categories of personal data, such as health data.
What we use it for and on what legal basis
- Answering your enquiries and preparing quotes, because you ask us to (pre-contractual measures, Art. 6.1.b GDPR).
- Managing your booking and your trip (confirming it, letting you know about changes due to the weather and organising boarding), to perform the contract (Art. 6.1.b GDPR).
- Complying with our legal obligations, such as the passenger list, invoicing and accounting (Art. 6.1.c GDPR).
- Protecting the website and the forms against spam and abuse, on the basis of our legitimate interest (Art. 6.1.f GDPR).
- Measuring visits with Google Analytics to improve the website, only with your consent (Art. 6.1.a GDPR), which you can withdraw at any time in “Cookie settings”.
We do not use your data to send you advertising or to make automated decisions about you.
How long we keep it
- Enquiries and quotes that do not lead to a booking: for as long as needed to reply to you and for no more than one year.
- Bookings: for as long as our relationship lasts and, afterwards, for the periods required by law (for example, six years for accounting records).
- Google Analytics statistics: for the period stated in the cookie policy.
Who else processes your data
We do not sell or transfer your data. We only disclose it to the authorities when required by law (for example, to the Harbour Master’s Office, the Guardia Civil or the Spanish Tax Agency). In addition, the following providers process it on our behalf, under a contract that obliges them to protect it:
- Hostinger: website and email hosting.
- Bókun (Iceland): online booking system.
- Cloudflare (United States): Turnstile, the anti-spam service for the forms.
- Google (United States): Google Analytics, only with your consent.
Other services process some data on their own account: to display the reviews, your browser requests images and files from Trustindex, Google and Tripadvisor; if you write to us on WhatsApp, WhatsApp’s privacy policy applies; and if you book on GetYourGuide or Viator, that platform processes your data and passes on to us the details needed for the trip.
International transfers
Google and Cloudflare may process data in the United States. Both companies are certified under the EU-US Data Privacy Framework, which the European Commission recognises as an adequate safeguard. Bókun is based in Iceland, within the European Economic Area.
Your rights
You can ask us at any time to access, rectify or erase your data, object to or restrict its processing, request its portability and withdraw your consent, without affecting anything done before. Write to us at hello@leflotriant.com; if necessary, we will ask you to prove your identity. We will reply within one month at the latest.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
Children
If you are under 14, please do not send us your data: ask your parent or guardian to make the booking. The details of any children in the group are given to us by the adult making the booking, and only when they are needed.
Security and changes
The website uses an encrypted connection (HTTPS) and we apply technical and organisational measures to protect your data. If we change this policy, we will publish the new version here with its date.