Privacy Policy

1. Data Controller

2. Data We Collect

We may collect the following types of personal data:

• Identification data: name, surname, ID/passport
• Contact data: email, phone, postal address
• Browsing data: IP address, cookies, pages visited
• Booking data: preferences, dates, contracted services
• Payment data: processed securely by payment gateways

3. Purpose of Processing

Your personal data will be processed for the following purposes:

• Manage your information requests and bookings
• Provide contracted services
• Send commercial communications (with your consent)
• Improve our services and user experience
• Comply with legal obligations

4. Legal Basis for Processing

The legal basis for processing your data is:

• Contract execution: to manage bookings and provide services
• Consent: for sending commercial communications
• Legitimate interest: to improve our services
• Legal obligation: to comply with tax and commercial regulations

5. Data Recipients

Your data may be communicated to:

• Service providers (yacht owners, villas, etc.) to execute bookings
• Financial entities to process payments
• Public administrations when legally required
• Technology providers that provide us with services (hosting, email, etc.)

6. International Transfers

Some of our technology providers may be located outside the European Economic Area. In these cases, we ensure that adequate safeguards exist according to GDPR (standard contractual clauses, adequacy decisions, etc.).

7. Data Retention Period

We will retain your data for the time necessary for:

• Booking data: during the commercial relationship and 5 additional years
• Tax data: 4 years according to tax regulations
• Marketing data: until you withdraw your consent
• Browsing data: according to the cookie policy

8. Your Rights

You have the right to:

• Access: know what data we have about you
• Rectification: correct inaccurate data
• Erasure: request the deletion of your data
• Objection: object to the processing of your data
• Restriction: request the restriction of processing
• Portability: receive your data in a structured format
• Withdraw consent: at any time

9. Security

We have implemented technical and organizational measures to protect your data, including:

• SSL/TLS encryption in all communications
• Restricted access to personal data
• Regular backups
• Staff training in data protection

10. Contact

For any questions related to this privacy policy: