Privacy Policy
As of 25 May 2018, the General Data Protection Regulation (GDPR) requires that we, Alegria Yachting MCPY, provide you with additional information beyond what is set out in our Privacy Policy, and shall process your personal data in compliance with the GDPR (EU) 2016/679.
Our Privacy Policy was last updated on 23 May 2018 and aims to inform you on how we collect and process your personal data through your use of our website, when you purchase a product/ service from us or follow us on social media.
Purpose of personal data processing
We collect, store and process your contact information only in order to provide our services/ products, to fulfill our business and legal obligations, and to comply with the law. Your personal data is collected and processed on the basis of a) your consent, given to us to process your personal data for the purpose of contacting you, providing you with quotations, and communicating other information related to our business, b) operational & contractual requirements for the purpose of entering into or performing any contractual agreement with you and fulfilling the contractual obligations arising thereof, as well as c) legal requirements imposed by regulations in force, as for the purposes of notification and registration which we are obliged to perform in compliance with legislative conditions for conducting the activity of yacht chartering and concluding charter agreements.
Should you choose to place a request for information, place an inquiry for products or services, pay for products or services through our website or interact with our company for any other purpose then you may provide us personal data by filling-in the contact forms through our website to request availability, and corresponding with us by post, phone, email, in person or otherwise.
What Personal Data We Collect
You may use our website without providing any information about you. However, cooperating with our company as a customer, means we will need all the information necessary for contract performance and required by law. Usually, this information is:
a) Contact Data
When you contact our company we record your Name,Surname, E-mail address and any specifics of the communication so we may contact you in return with a response appropriate to the purpose of your contact.
b) Service Inquiry Data
When you place an inquiry for chartering our yacht either via e-mail or via phone, then in addition to your Contact Data listed above we may also collect further information, i.e. number of guests aboard, religious or philosophical beliefs, dietary details & constraints and information about your health and any medical conditions.
c) Booking / Charter Agreement Data and Crew List
When sailing with us we have to collect and confirm with you the full set of personal data required for legal and operational purposes (Minimum Requirements Mandated by Law) , such as your Name & Surname, Gender, Date of Birth, Nationality, Residence (Postal) Address and Passport number.
d) Website Browsing Data
We use Google Analytics, a service that collects statistical data about our users’ browsing actions and patterns (including where available their IP address, operating system and browser type) to Google Servers, then provides us with reports containing such statistical information that do not identify any individual but help us understand website performance and how we can improve it.
Our Practices to protect your data
We take all possible measures in order to protect data and communications transferred and/or stored:
– Controlled physical access to computers storing data
– Password protected computers and screen savers with short timeout
– Role based access to data within our company, only persons that need to access the necessary data have access
– DDOS attack protection
– Brute force attack protection, IP’s that resemble any kind of attack are blocked
– Password protection and encryption on all data storage infrastructure
– Scheduled virus/trojan scans on our PC systems
– Continuous monitoring of our PC systems
– Immediate security updates on our OS
– Backup and Disaster Recovery Plan
– SSL available on all connections to our services
Payments with Credit/ Debit Cards are processed securely through SSL encrypted environment provided by ALPHA Bank.
How long we maintain your data
Your personal data, previously collected (including any e-mails exchanged), can and will be retained for the period it is necessary to provide our services, as mandated by applicable legislation and regulations, including tax and accounting requirements as well as purposes of an investigation or dispute. or until you ask us to delete your data.
Your data may remain, but not be processed, on legal documents, ERP systems, invoices etc. For example, the time this Privacy Policy is written, the Greek law requires that we keep all tax documents and/or relevant digital data for 10 years.
How we use personal data
Other than for the specific purposes agreed with you, any information collected can be processed and used without your knowledge or consent for legitimate purposes only, when this is required or permitted by Law.
The uses of your information are Operational / Legal requirements, commonly refer to when we need to,
- respond to an inquiry or contact of other purpose that we have received from you
- prepare and perform a contract we are about to enter into with you
- comply with legal, statutory or regulatory obligations
- serve or protect our legitimate interests
- co-operate with tax, customs, port or other Authorities acting as processors or joint controllers
Who we share personal data with
We never share nor reveal your personal information to any third parties, unless this is either mandated by applicable Law or required for the fulfillment of -operation/ service, contractual obligations and legitimate interests. Even so, you at all times have the right to request from us that we delete your information to the extent of course that retaining such is not mandated by Law.
Your rights to your personal information
You have, under certain circumstances and subject to law, the right to request:
- to access, correct and erase your personal data
- to object and restrict processing of your personal data
- to transfer your personal data to another company
- to inquire to whom the personal data have been or will be disclosed
- to lodge a complaint
We will respond to the first request free of charge and within one month, maintaining our right to extend this time for another two months in special cases, providing reasons for the delay within the one month initial period. We shall provide one copy of the personal data. An administrative fee is charged for any further copies.
Website Disclaimer
The information contained on our website is for general information purposes only and subject to change without prior notice.
Inclusion of links to other websites like TripAdvisor is intended only to provide ease of access to information of interest. We have no control nor liability on neither the content nor the availability nor the privacy policy of those websites which users may visit, browse or use on their own responsibility. When leaving our website to another, we encourage you to read the privacy policy of the website you will be visiting.
When following us on social media, the collection, processing, storage and use of your information is the responsibility of the social media provider, subject to the Privacy Policy of the respective social media platform. We can view information that you share via the social media platforms and platform providers provide us with analytics tools which we use for informational and marketing analysis purposes.
Cookies’ Policy
We use Cookies on our website and we may use cookies for account access, analytics or some other functionality. You may use your browser’s tools to allow or deny our cookies, and you may decide to keep or delete these cookies.
Alegria Yachting MCPY reserves the right to amend this Privacy Policy without prior notice to reflect technological advancements, legal and regulatory changes and good business practices. If Alegria Yachting MCPY changes its privacy practices, a new Privacy Policy will reflect those changes and the effective date of the revised Privacy Policy will be set forth in this paragraph. This Privacy Policy was last updated on 23 May 2018 and is effective as of that date.