Privacy policy

General information

This Privacy and Cookies Policy is applicable to all personal data that you, as a user, (understanding user as any natural person accessing the website) provide to EMPURIAYACHTS.L. in your use of, hereinafter the "website".

The purpose of this Privacy and Cookies Policy is to provide you with information about the use of the personal data we process, as well as to provide you with information about your rights under the General Data Protection Regulation and the Organic Law on Data Protection and Guarantee of Digital Rights.

Who is the data controller?

The entity responsible for the processing of personal data collected through this website is EMPURIAYACHTS.L., with VAT number B55133946 and registered office at CALLE EMPURIABRAVA, NUM. 1 CASTELLÓ D’EMPÚRIES, (GIRONA) 17487.

Why do we ask for your data?




To get in touch with the user

Handling enquiries made through the contact form, complaint form or other customer service channels.

Name and/or surname, Email address, Phone number.

Budget request form

In order to be able to attend a request for a personalised quotation according to the users needs.

Name and/or surname, Email address, Phone number.

Development, execution and fulfilment of the contractual agreement for the provision of services or purchase and sale that has been concluded through the website.

With the aim of: contacting the user in relation to the products or services booked; managing the payment methods used through the website; carrying out invoicing and the preparation of purchase tickets made through the website; managing shipments and returns, as well as attending the user in the performance of the contract.

Name and/or surname, Email address, Phone number, Billing address, Debit/credit card numbers.

What is our legal basis for data processing?

Our legal basis for the processing of personal data is as follows:

  • Consent: If you have given express consent at the time of entering personal data by ticking the relevant box.

  • The execution of a contract: If there is a contractual relationship between you and EMPURIAYACHTS.L., or the processing of personal data is necessary for the performance of the contractual relationship.

  • Compliance with a legal obligation: In those cases in which we, EMPURIAYACHTS.L., have a legal obligation that applies to us as the data controller.

  • Legitimate interest: In those cases where we have a legitimate interest or third parties have a legitimate interest related to the operation of the website or the provision of services to the user, provided that the interests and fundamental rights of users do not prevail over the legitimate interest.

How long will we keep your data?

The personal data that we collect through the website will be processed and retained for the time necessary to execute the purpose for which they have been collected.

More specifically, the data we collect for the development and execution of a contract with you will be kept for as long as the contractual relationship remains in force, while the personal data we collect in the exercise of a legitimate interest or with your consent will be kept only for the time necessary to fulfill the purpose for which they were collected.

After the period of time strictly necessary for the performance of the purposes described above, we will retain personal data for a further period of time, until the statute of limitations has expired for all actions that may arise from our liability arising from each of the processing operations.

In those cases where we have to make transfers to third parties with headquarters or servers outside the European Union, or the European Economic Area (Iceland, Norway or Liechtenstein), and the European Commission has not issued an Adequacy Statement on this country, or we do not have a Binding Corporate Rules, we will comply with the provisions for these cases by the European Commission to provide you with appropriate safeguards, by signing the standard contractual clauses or by collecting your informed consent.

If you would like more information about the transfer of personal data to countries outside the EU/EEA, you can contact us via the following email address:

When these companies have their headquarters or servers in the United States, you should be aware that the United States has not received an Adequacy Statement, so it is possible that the standards of protection of your personal data may not be the same as those provided for in the European regulations. In this regard, by continuing to use the services or the website, you consent to the processing of your personal data in the United States.

What are your rights?

You may exercise the following rights at any time and at no charge:

  • Access: to know what data we keep and what we do with it;

  • Rectification: to inform us of any inaccurate data;

  • Deletion: so that we delete your personal data, as far as possible;

  • Opposition: so that we stop processing your personal data for one of the purposes outlined above, provided that there is no legal obligation to prevent it;

  • Portability: for us to transfer, as far as possible, your personal data to a third party;

  • Limitation: for us to suspend your data when you contest its accuracy, or you want us to keep it to exercise any action;

  • Not to be subject to decisions based solely on automated processing of your data.

You may exercise these rights by sending an e-mail to the following address, indicating the right you wish to exercise, accompanied by a document proving your identity, or by using the following forms:

  • Exercising the right of access here.

  • Exercising the right of rectification here.

  • Exercising the right to suppression here.

  • Exercising the right of opposition here.

  • Exercising the right of portability here.

  • Exercising the right of limitation here.

  • Exercising the right not to be subject to automated decisions. here.

If we do not fully respect these rights as the data controller, we inform you that you can file a complaint with the supervisory authority on data protection to the Spanish Data Protection Agency, C/ Jorge Juan, 6, 28001- Madrid or at the email address

Confidentiality and security measures

EMPURIAYACHTS.L., as we are committed to respecting the confidentiality of users' personal data and to using them in accordance with the purposes for which they have been collected.

We have adopted all the technical and organizational security measures appropriate to the nature of the data being processed and required by data protection regulations.


Before we begin, what is a cookie? What types of cookies exist?

A cookie is a small text file that websites install on the devices of the users who visit them. Cookies are generally used to make websites work, or to do so more efficiently, and to collect information about it's use.

Cookies can be classified as follows:

  • Depending on the entity that manages them: proprietary and third-party cookies;

  • For the period that they remain activated: session and persistent cookies;

  • According to its purpose: technical, preference, analysis and marketing cookies.

What cookies do we use?

The following table explains the cookies we use and for what:







Analysis or measurement




Analysis or measurement




Analysis or measurement




Analysis or measurement




Strictly Necessary



You can change your cookie preferences at any time with the Set Cookies tool. You may need to refresh the page for the setting to take effect.

Deleting cookies

Most web browsers allow some control of most cookies through the browser settings. You can set cookies in the most common browsers by following their instructions:

To find information related to other browsers, you can visit the relevant browser's website.

Changes to the Privacy and Cookie Policy

This Privacy and Cookies Policy was last updated on 16/05/2023, EMPURIAYACHTS.L. reserves the right to update and modify some parts of it to adapt it to new legislation and jurisprudence, so we recommend you review it periodically.