Last updated: 24 February 2026
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:
menzemedia.de GmbH
Am Wunderhügel 27
58644 Iserlohn
Germany
Email: datenschutz@mallorca.com
We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Processing is generally only carried out with the user's consent or in cases where prior consent cannot be obtained for practical reasons and processing is permitted by law.
Where we obtain consent for the processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis. For processing for the performance of a contract, Art. 6(1)(b) GDPR serves as the legal basis. Legitimate interests pursuant to Art. 6(1)(f) GDPR may also serve as a legal basis.
Your data will be deleted as soon as the purpose of storage no longer applies. Storage may continue if required by legal provisions.
Each time our website is accessed, our system automatically collects:
The legal basis is Art. 6(1)(f) GDPR. Storage serves to ensure the functionality and security of our IT systems.
The following data is collected during registration:
When creating listings, we process:
This data is publicly displayed on the platform.
The legal basis is Art. 6(1)(b) GDPR (performance of a contract).
We use the following types of cookies:
When you first visit our website, a cookie banner is displayed where you can grant consent for individual cookie categories. Your consent decision is logged server-side as required by Art. 7(1) GDPR. The following data is stored:
Logging is carried out on the basis of our legal obligation under Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR. You can adjust or revoke your cookie settings at any time via the "Cookie Settings" link in the website footer.
The legal basis for technically necessary cookies is Art. 6(1)(f) GDPR. For other cookies, your consent pursuant to Art. 6(1)(a) GDPR is required.
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Analytics uses cookies that enable analysis of your use of the website. The information generated by the cookie about your use is generally transmitted to and stored on a Google server in the USA.
We use the "IP anonymization" feature. This means your IP address is truncated by Google within EU member states before being transmitted to the USA.
You can prevent tracking by Google Analytics by deactivating analytics cookies in our cookie settings.
Alternatively, you can install the browser add-on to disable Google Analytics: https://tools.google.com/dlpage/gaoptout
The use of Google Analytics is based on your consent (Art. 6(1)(a) GDPR). For more information, see Google's Privacy Policy: https://policies.google.com/privacy
We work with Stay22 (Stay22 Inc., Canada) as an affiliate partner. When using accommodation recommendations, data may be transmitted to Stay22, including:
Stay22 sets its own cookies to attribute bookings. The legal basis is your consent (Art. 6(1)(a) GDPR). More information: https://www.stay22.com/privacy
We use Travelpayouts (Travelpayouts Ltd.) as an affiliate network for travel and flight recommendations. When using corresponding links, the following data may be transmitted:
Travelpayouts uses cookies to attribute bookings. The legal basis is your consent (Art. 6(1)(a) GDPR). More information: https://www.travelpayouts.com/privacy
Our website is hosted by Vercel Inc. (San Francisco, USA). Vercel processes data on our behalf pursuant to Art. 28 GDPR. Data transfer is based on EU Standard Contractual Clauses.
We use Supabase (Supabase Inc., San Francisco, USA) as our database and authentication service. Supabase processes data on our behalf pursuant to Art. 28 GDPR.
For sending emails (registration confirmation, password reset), we use Resend. Data processing is based on Art. 6(1)(b) GDPR.
For the processing of payments for paid services (directory plans, premium features), we use Stripe (Stripe Inc., San Francisco, USA). Stripe processes the following data: name, email address, payment details (credit card number, expiry date, CVC), billing address, and transaction data. Data processing is based on Art. 6(1)(b) GDPR (contract performance). Data transfer to the USA is based on EU Standard Contractual Clauses. Further information can be found in Stripe's privacy policy at https://stripe.com/privacy.
For the search functionality in the business directory and classifieds platform, we use Meilisearch Cloud (Meili SAS, Paris, France). Meilisearch processes entered search terms as well as publicly available directory data (company names, categories, locations). Data processing is based on Art. 6(1)(f) GDPR (legitimate interest in an efficient search function). Data is stored on servers within the EU (Frankfurt).
You have the following rights:
You can download a copy of all your personal data at any time in a structured, commonly used, and machine-readable format (JSON). This function can be found in your Dashboard under Settings → Export My Data. The export includes:
You can delete your user account at any time via Settings → Delete Account. After the deletion request, a 14-day grace period applies during which you can cancel the deletion. After this period, your data will be irreversibly deleted or anonymized:
The deletion request is logged for compliance purposes (IP hash, timestamp, reason).
To exercise your rights, you can use the self-service features in your Dashboard or contact us at datenschutz@mallorca.com. We will process your request within 30 days.
Pursuant to the Spanish Data Protection Act (Ley Orgánica 3/2018 - LOPD):
Last updated: February 2026
