Controller of personal data is Sail in Greek Waters, Konstantinos Gkekas, residing at 15, Heimaras street, Athens, 16673, having VAT No. 063867956 and Business Registry No. 124493901000, who determines the purposes and means of the processing of personal data.
Email: contact@sailingreekwaters.gr
Tel. No: (+30) 2109659880
« Sail in Greek Waters » respects your privacy. This Privacy Policy describes how we collect, use, process, and disclose your information in accordance with the General Data Protection Regulation ((EU) 2016/679). Please read this policy and the terms and conditions carefully. This privacy policy may change from time to time in accordance with legislation. We encourage you to review this page periodically for any changes to this privacy policy.
HOW WE COLLECT PERSONAL DATA
When browsing our website, we do not ask for any personal information. However, we may collect certain information through the use of cookies. Please refer to our cookies policy for more information.
We collect and process information about you that you have voluntarily provided when filling in the respective fields on our website, when making a request for information, sending us a letter, an email, or a message on social media or via the contact form, when requesting a quote, or contacting us by phone or in person, and when subscribing to our newsletter or following our social media accounts. You are responsible for the accuracy of the personal data you provide.
We may also receive personal data from third parties, such as travel agencies, booking services, booking engines, or other websites or platforms you use to make a reservation, which are considered as data processors under the General Data Protection Regulation (GDPR).
Furthermore, for targeted advertising, social media platforms, search engines, and affiliated websites have the ability to track users by collecting personal data and information about their interests, preferences, and consumer habits. This data is used to create user profiles and display personalized advertisements based on the principles of behavioral advertising. Additionally, affiliated websites may use cookies or collect user data by other means in order to display personalized advertisements. For the personal data of users collected by search engines, social media platforms, and affiliated websites, the respective companies are the Data Controllers.
PERSONAL DATA WE COLLECT
We collect and process your personal data, including but not limited to:
- Your name, gender, address, email address, telephone number, date and place of birth, and nationality.
- Number and copy of your passport and/or ID.
- Payment information, such as debit or credit card details, bank transfer details, or any other means of payment, as well as invoicing details, in order to complete the booking and payment of security deposit.
- Details of joint travelers, in accordance with applicable laws. You are responsible for ensuring that joint travelers are aware of this privacy policy and consent to sharing their personal data for the purpose of completing a booking and providing the requested services.
- Details of allergies, dietary requirements, preferences, and special requests (e.g., related to disabilities) that you provide to us.
- Reviews and opinions about our products and services.
SENSITIVE DATA
Unless specifically requested, we do not collect "sensitive information" (e.g., data related to racial or ethnic origin, political opinions, religion, health, criminal background, etc.).
We may use medical or other sensitive data provided by you to better serve and meet your needs. Such sensitive information will only be shared with third parties for the sole purpose of providing the services you request. Under no circumstances will we process any sensitive data for marketing purposes.
WHY WE USE PERSONAL DATA
We process your personal data for the following purposes:
- Fulfilling our main obligations arising from a concluded contract or at the stage of pre-contractual relationship, specifically for the provision of chartering, management, and brokerage services in the sale and chartering of vessels (legal basis of performance of a contract).
- Proper and secure billing and invoicing of the services provided (legal basis of performance of a contract).
- Communicating with you to inform you about your reservation, progress of work, and provision of information, as well as fulfilling obligations arising from the principle of good faith (legal basis of performance of a contract).
- Managing requests submitted by you for information, communication, quotation, service, and exercise of your legal rights (legal basis of consent).
- Ensuring the smooth operation of the website and network security (legal basis of legitimate interests).
- Communicating with you to inform you about our news and offers (legal basis of consent).
- Providing the necessary information to competent authorities and complying with legal requirements (legal basis of compliance with legal obligations).
- Fulfilling legal and fiscal obligations, including claiming our fees or in case of a dispute (legal basis of compliance with legal obligations).
RETENTION OF INFORMATION
We will retain your Personal Data for the period necessary to fulfill the purposes for which they are collected. Specifically, for personal data collected for the performance of a contract or fulfillment of fiscal obligations, they are retained for twenty years. This time period may be extended if required or permitted by law, or if retention is necessary to fulfill our fiscal or legal obligations, or in case of any judicial or extrajudicial litigation. You have the right to request the erasure or deletion of your personal data we hold at any time by sending an email or contacting us through any other means. However, we may retain personal data related to legal and legitimate grounds, especially those related to a previous contractual or pre-contractual relationship.
RECIPIENTS OF PERSONAL DATA
We do not sell, otherwise disclose, or share information we collect and hold about you, except as described in this Privacy Policy.
The necessary data for the booking is shared with our partners, with whom you made the booking, for the purpose of completing the booking, processing the payment, and providing you with the requested service. Specifically, the data may need to be shared with fleet managers, brokers, yacht owners, crews, and charter base managers.
We may share information with service providers, booking services, booking engines, tour operators, and our staff in order to provide you with requested services.
Additionally, your data, as well as the data of joint travelers, may be disclosed to the competent authorities, in compliance with obligations arising from current legislation, including the information contained in the charter documents and the crew list.
We may also share information with consultants (such as lawyers or accountants), financial institutions, and service providers, such as marketing services, mailing services, website optimization and hosting services, payment control services, Cybercrime Prosecution Authority, Consumer Protection Service, and cyber fraud prevention services, in case of malicious usage.
Data processors and third parties will be carefully appointed and controlled by us and are contractually bound to respect your personal data. They shall not process your personal data in any other way or for any other purposes.
In case a refund is requested for your reservation, either by you or by the holder of the credit card used to make your reservation, we may need to disclose some of the reservation information to the payment service provider and the relevant financial institution for handling the money refund. We may also need to disclose information to the relevant financial institutions if it is required for reasons of fraud prevention and identification.
We may share your information with any competent law enforcement body, regulatory, government agency, court, or other third party where disclosure is necessary: (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your interests or those of any other person.
We may share your information, when necessary, in order to investigate, prevent, or take action regarding illegal or suspected illegal activities and in order to protect and defend the rights, property, or safety of our company or this website, our customers, or others.
We reserve the right to transfer information about you in the event that we sell or transfer all or a portion of our business or assets, in accordance with applicable law.
We may transfer your personal information outside of the EEA for the purposes described in this policy.
NEWSLETTER
We use newsletter to contact our news and offer. You can subscribe to our newsletter, by filing the relevant form or by contacting us. If you subscribe to the newsletter, we will send you e-mails about our news and offers. If you have ever made a reservation to us, we may send you our newsletter, regarding offers on similar services or similar marketing purposes.
The data subjects are all natural persons, existing and prospective customers who provide their email to the company and declare that they wish to receive newsletters and be informed about promotional activities.
The data are collected directly from the data subjects, through the completion of the online email submission form, the contact form, and the request for a quote form. Additionally, customer data may be collected from customers who have made a booking or contacted the company through other means, such as by phone or email, and have provided consent for the use of their email for the purpose of receiving newsletters.
When using the online email subscription form, only the email address, which is considered basic data, is collected. When using other methods of data collection, additional information such as name, country, postal code, and contact phone number may also be collected. No special categories of data or sensitive personal data are collected. The company providing the email marketing platform is the data processor. Your personal data is collected, archived and used for sending emails. Furthermore, we may monitor the behavior of recipients by tracking which emails are read, when, and if they follow the links in the emails.
Personal data is used for commercial promotion purposes, including sending informational and promotional messages to existing and potential customers. The legal basis for processing is the consent of the data subject. Additionally, data obtained lawfully in the course of providing services may be used for direct marketing of similar services, even when the recipient of the message has not given their prior consent. In this case, the option to object is clearly and easily provided, free of charge, during the collection of contact details, as well as in all messages, in case the users had not initially objected to the usage.
At the end of each email, there is an unsubscribe button through which you can remove yourself from the subscribers' list and no longer receive our emails. Please note that unsubscribing from the list of subscribers does not automatically result in the deletion of your personal data from our records. However, you have the right to revoke your consent and request the deletion of your personal data by sending an email to contact@sailingreekwaters.gr or contacting us in any other way. Please be aware that when the storage and processing of personal data are based on a legal basis other than consent, our company may not be able to delete the data.
SECURITY
We implement proper technical and organizational measures to safeguard protection of your personal data, according to the General Data Protection Regulation. We seek our service providers and staff to make every effort to ensure confidentiality of your personal data.
Only specially authorized employees, who are bound by confidentiality and privacy clauses, have access to personal data and ensure that documents containing customer personal data are not exposed. Physical protection measures are in place, and areas where documents containing customer personal data are stored are secured with a security key.
In addition, we take security measures for the digitally stored files, such as access to digital files being done with an eight-digit code that changes regularly. We keep safety backups, we use antivirus and firewall software for protection against malware, and the website uses the secure https protocol. Protection policies and security measures are regularly updated, following technological advancements, to ensure the maximum level of security.
However, no security or data transmission system is totally safe. For that reason, we encourage you to avoid sending us sensitive personal data, via the website, e-mail or social media.
In case of data breach, we will inform you, as well as the competent supervisory authority, with no delay.
DISCLAIMER
The website may include links to other websites, especially those of our clients and partners. Under no circumstances should it be considered that we endorse or accept the content or services of other websites that may be linked through links, and we explicitly disclaim any liability for any content, privacy protection policy, content quality, and services. In addition, we are not responsible for any unavailability of these websites, their privacy protection policy, the quality and completeness of their information and services
YOUR RIGHTS
You have the right of access to your personal data, right of rectification, restriction of processing, erasure, data portability, and the right to object.
To exercise those rights, you may make a request, in written, sent to Konstantinos Gkekas, 15, Heimaras street, Athens, 16673 or by electronic means, by sending an email to contact@sailingreekwaters.gr.
You also have the right to lodge a complaint in written, with the Hellenic Data Protection Authority (1-3, Kifisias str., 115 23, Athens) or by electronic means (www.dpa.gr ).