1. Home
  2. Privacy Policy

Privacy Policy

Last updated: 31 July 2026

2.1. Data Controller

2.2. Scope

This website does not currently feature contact forms, registration or booking systems and does not directly collect personal data from clients via web fields. However, data may be processed when a person voluntarily contacts us by email, telephone, messaging or other channels, as well as technical data necessary for the operation, security and administration of the website.

2.3. Categories of Data

  • Identifying and contact data voluntarily provided, such as name, email address, telephone number or messaging username.
  • Content of enquiries, requests, communications and preferences communicated by the data subject.
  • Contractual, billing and payment data when a transaction is formalised.
  • Technical data, such as IP address, date and time of access, security logs, browser, device and technical events.
  • Data of professionals and models: identity, proof of legal age, contact details, photographs, videos, professional information, availability and documentation required to verify identity and authorisations.

2.4. Purposes

  • Respond to enquiries and communications received through channels voluntarily used by the data subject.
  • Manage availability enquiries, preliminary coordination, contracting and subsequent attention where applicable.
  • Verify identity, legal age, profile authenticity and image-use authorisations.
  • Manage the publication, updating or removal of profiles, photographs and videos.
  • Comply with legal, tax, accounting, security and fraud-prevention obligations.
  • Defend rights and legitimate interests and respond to complaints or requirements from authorities.
  • Maintain the security, availability, integrity and technical operation of the website.

2.5. Legal Bases

  • Implementation of pre-contractual measures requested by the data subject and performance of a contractual relationship.
  • Compliance with legal obligations applicable to PITUSA AND ROOM 6969, S.L.
  • Legitimate interest in protecting the website, preventing fraud, managing communications, defending claims and maintaining security.
  • Consent, where required for a specific purpose, particularly for certain publications, commercial communications or use of image.

2.6. Mandatory Nature of Data

When data is requested to process an enquiry or comply with a legal obligation, refusal to provide it may prevent the relevant management, verification or formalisation. Data of third parties must not be communicated without authorisation or sufficient legal basis.

2.7. Recipients

Data will not be sold. It may be disclosed to or accessed by providers of hosting, email, security, technical support, consulting, billing, communications or infrastructure services, where necessary and subject to the required contractual safeguards.

Data may also be disclosed to public authorities, law enforcement, courts, advisors or financial institutions where there is a legal obligation, valid request, or need to formulate, exercise or defend claims.

2.8. International Transfers

Certain technology providers or external platforms may process data outside the European Economic Area. In such cases, recognised mechanisms under applicable regulations will be used, such as adequacy decisions, standard contractual clauses or other valid safeguards.

2.9. Data Retention

  • Enquiries without contracting: for the time necessary to respond, and subsequently for reasonable periods to manage liabilities.
  • Contractual, tax and accounting data: for the periods required by applicable regulations.
  • Technical and security logs: for the period necessary to prevent incidents and defend liabilities.
  • Data and documentation of professionals: while the relationship is maintained and for the legally required subsequent periods.
  • Images and profiles: while authorisation or a valid relationship exists, without prejudice to blocked retention where necessary to defend rights.

2.10. Your Rights

Data subjects may request access, rectification, erasure, objection, restriction of processing and portability where applicable, as well as withdraw consent without retroactive effect.

Requests should be sent to info@ibizatopscorts.com, stating the right being exercised and providing sufficient information to verify identity. A complaint may also be filed with the Agencia Española de Protección de Datos (Spanish Data Protection Agency).

2.11. Security and Confidentiality

PITUSA AND ROOM 6969, S.L. will apply reasonable technical and organisational measures to protect data against loss, alteration, unauthorised access or disclosure. However, no system connected to the Internet can guarantee absolute security.

2.12. Minors

This website and its services are intended exclusively for persons over 18 years of age. Profiles of minors are not accepted, nor are enquiries involving them. If information relating to a minor is detected, measures will be taken to block or delete it and, where appropriate, report the matter to the authorities.

2.13. Images and Data of Professionals

Publication of photographs, videos and professional data is carried out on the basis of appropriate contracts, authorisations, licences or consents. The professional may request review or removal in accordance with the agreement and applicable law.

2.14. Cookies

The use of cookies will be governed by a separate Cookie Policy. Before final publication, a comprehensive inventory of cookies, scripts, analytics, maps, videos, social networks and third-party tools will be conducted.

2.15. Changes

This policy may be amended to reflect legal, technical or operational changes. The current version will be the one published on the website with its update date.