XEC Exclusive Services handles all client data with the same discretion applied to every operational engagement. Personal data is never sold, traded, or shared beyond what is strictly necessary to deliver the requested service.
1.Who We Are
XEC Exclusive Services is a VIP lifestyle assistance and coordination company based in Ibiza, Balearic Islands, Spain. We provide private assistance, secure transport coordination, concierge services, villa support, yacht coordination and related lifestyle services for private clients, families, executives and artists.
For the purposes of EU data protection law (GDPR and Spanish Organic Law 3/2018), the data controller is XEC Exclusive Services, contactable at info@xecexclusiveservices.com or by telephone at +34 667 312 637.
2.Data We Collect
We may process the following categories of personal data, only when provided voluntarily by you:
- Identity data: first and last name, client or guest profile type
- Contact data: email address, telephone number, WhatsApp contact
- Operational data: arrival and departure dates and times, service requirements, locations (villa, hotel, marina), itinerary details, number of guests, number of suitcases or luggage
- Communication data: content of enquiries sent via the contact form, email or WhatsApp
- Technical data: IP address, browser type, device identifiers, pages visited — collected automatically via the website
You should avoid including unnecessary sensitive personal information (health conditions, financial data, identification numbers) unless it is strictly required for the service you have requested.
3.How We Use Your Data
We use your personal data only for the following purposes:
- Responding to confidential enquiries and service requests
- Preparing and delivering service proposals and coordination plans
- Coordinating requested assistance with trusted operational partners (drivers, villa managers, yacht contacts, licensed security partners)
- Maintaining client communication throughout the service period
- Improving the website and user experience (technical and analytics data only)
- Complying with applicable legal obligations
4.Legal Basis for Processing
We process your personal data on the following legal bases:
- Pre-contractual and contractual necessity: to respond to your service request and coordinate the assistance you have asked for
- Legitimate interest: to respond to general enquiries and maintain service quality
- Consent: where you have given specific consent, such as for non-essential cookies or marketing communications
- Legal obligation: where processing is required to comply with applicable law
5.Data Sharing
Your data is never sold, rented, or traded. We may share information only with:
- Operational partners: professional drivers, villa managers, concierge contacts, yacht liaisons and licensed security partners — only when strictly necessary to deliver your requested service, and only the information they need to do so
- Technology providers: website hosting, email delivery and form processing services, under appropriate data processing agreements
- Legal and regulatory authorities: when required by law or court order
All partners who receive personal data are bound by confidentiality obligations consistent with the discretion standards applied across all XEC operations.
6.Data Retention
We retain personal data only for as long as necessary to:
- Manage and complete the requested service or enquiry
- Comply with applicable legal and fiscal obligations
- Maintain commercial records where legally required
Enquiry data from users who did not proceed to a service engagement is typically deleted within 12 months. Data related to completed services is retained for the period required by applicable commercial and tax law (generally 5 to 7 years in Spain). Technical and analytics data is retained in anonymised or aggregated form.
7.Your Rights
Under the GDPR and Spanish data protection law, you have the following rights:
- Access: to request a copy of the data we hold about you
- Rectification: to request correction of inaccurate or incomplete data
- Erasure: to request deletion of your data, subject to legal retention requirements
- Restriction: to request that we limit how we use your data in certain circumstances
- Objection: to object to processing based on legitimate interest
- Portability: to receive your data in a structured, machine-readable format
- Withdraw consent: at any time, where processing is based on consent
To exercise any of these rights, contact us at info@xecexclusiveservices.com. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.
8.Cookies
This website uses cookies for technical operation and, where you have consented, for analytics purposes. No non-essential cookies are activated before your consent. You can accept, reject or withdraw consent at any time through the cookie banner or our Cookie Policy.
9.Security
We apply technical and organisational measures appropriate to the nature of the data and the risk involved. All client communications — whether by form, email or WhatsApp — are treated with the same operational discretion applied across all XEC services. No data transmission over the internet can be guaranteed to be completely secure; however, we take all reasonable precautions to protect your information.
10.Contact
For any questions regarding this Privacy Policy or how your data is handled, contact us:
- Email: info@xecexclusiveservices.com
- Phone / WhatsApp: +34 667 312 637
- Location: Ibiza, Balearic Islands, Spain