1. Who is responsible for your data
The data controller is Thomas Barrie, a sole trader operating as GoGangway.com.
Address: Germans Cabot Franciscans 38, Bunyola, 07110, Mallorca, Spain
Email: info@gogangway.com
2. What Gangway is
Gangway is a boat discovery and comparison service. We help visitors explore curated listings, answer trip questions, create a shortlist and follow an affiliate link to an external booking platform or boat operator. Gangway does not create user accounts, take payments or enter into the boat-rental contract.
3. Information we process
Depending on how you use the site, we may process:
- Device-local trip data: destination, dates or duration, group size, boat preferences, budget, captain preference, watersports interests and boats you like, reject or mark as possible. This stays in your browser using IndexedDB or local storage and is not attached to an account.
- Clickout records: the selected boat and product identifiers, affiliate destination, page path, referring page, browser user-agent and time of the click. These records help us operate and measure the affiliate service.
- Anonymous usage data: Vercel Web Analytics records aggregated page-view information such as the page, referrer, country, browser and device category without using cookies or retaining an IP address in its analytics reports.
- Optional Google Analytics data: if you consent, Google Analytics receives information such as page views, interactions, approximate location derived from IP address, device/browser details and a pseudonymous browser identifier.
- Technical records: our hosting and security providers may process IP address, request data, timestamps and error information needed to serve and protect the website.
- Correspondence: your email address and anything you choose to include when you contact us.
We do not currently offer accounts, a newsletter, an on-site contact form or direct checkout. We do not knowingly collect payment-card details, identity documents or special-category personal data. If these features change, we will update this notice before using the new data.
4. Why we use information
| Purpose | Information | Legal basis |
|---|---|---|
| Provide the site, quiz and shortlist | Technical and device-local data | Legitimate interests in operating a useful, secure service; device storage strictly requested by you |
| Redirect to a listing and measure affiliate activity | Clickout record | Legitimate interests in operating and evaluating our affiliate business |
| Measure anonymous page traffic and improve the service | Aggregated Vercel Web Analytics data | Legitimate interests in understanding and improving the service, using cookieless and non-identifying measurement |
| Understand opted-in journeys and interactions | Google Analytics data | Your consent, which you can withdraw at any time |
| Answer questions and handle complaints or rights requests | Correspondence | Legitimate interests, pre-contractual steps where relevant, and legal obligations |
| Prevent abuse and establish or defend legal claims | Technical, clickout and correspondence data | Legitimate interests and legal obligations |
We do not use Gangway data for automated decisions that produce legal or similarly significant effects.
5. Who receives information
We use carefully selected providers where needed to operate the service:
- Vercel provides website hosting, delivery, security, operational logging and anonymous, cookieless Web Analytics.
- Supabase hosts the Gangway database, including clickout records.
- Google Analytics receives analytics data only after consent.
- Impact and the external booking platform/operator receive information when you choose to follow a tracked affiliate link. Their own privacy policies apply once you leave Gangway.
- Professional advisers or authorities may receive information where reasonably necessary to comply with law, protect rights or handle a dispute.
Boat images and other supplier media may be delivered from the supplier's content network, which necessarily receives normal web-request information such as your IP address and browser details.
6. International transfers
Some providers, including Google, Vercel, Supabase and affiliate technology providers, may process information outside Spain or the European Economic Area. Where GDPR requires it, transfers are covered by an adequacy decision, approved contractual safeguards or another lawful transfer mechanism. You can contact us for further information about the safeguards relevant to your data.
7. How long we keep information
- Clickout records are retained for up to 12 months, unless a longer period is needed for a dispute, fraud investigation or legal obligation.
- Vercel Web Analytics retains aggregated reporting data according to the reporting window available on our Vercel plan. It does not reconstruct an identifiable visitor history.
- Google Analytics user-level and event-level data is intended to be retained for 14 months. Google may retain aggregated reporting data separately under its service configuration.
- Your analytics choice is kept on your device for up to 24 months, unless you reset it earlier.
- Trip and shortlist data remains on your device until you clear it through Gangway or your browser storage controls.
- Correspondence is normally kept for up to 12 months after the matter is resolved, or longer where reasonably needed for legal obligations or claims.
- Operational logs are retained according to our hosting and security configuration and are removed or aggregated when no longer needed.
8. Your data-protection rights
Subject to the conditions in applicable law, you may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Email info@gogangway.com to exercise a right. We may need reasonable information to verify your identity. You may also complain to the Spanish Data Protection Agency (AEPD) or the authority in your country of residence.
Data stored only in your browser is under your control and may not be accessible to us. You can remove it using Gangway's controls or your browser settings.
9. Age restriction
Gangway is intended for adults aged 18 or over. We do not knowingly collect personal data from children.
10. Security and changes
We use proportionate technical and organisational safeguards, but no internet service can guarantee absolute security. We may update this policy when the service, providers or legal requirements change. Material changes will be highlighted on the site where appropriate.
For cookie-specific details, read the cookie policy.