Privacy Policy

Athens Yachts Rental is the controller responsible for the personal data described in this policy. We have not published a separate company registration number, VAT number or street address for this brand, and we do not use placeholders for them.

For any question about this policy, an enquiry you sent, or a booking, write to [email protected].

• Enquiry form: name, email, phone (optional), chosen yacht (optional), charter start and end dates, number of guests, your message, and the page URL and referrer that led you to the form.
• Direct contact: anything you tell us by phone call, email or WhatsApp message.
• WhatsApp click records: when you tap a WhatsApp button, we record the page URL, referrer, language and the prefilled message text in our booking system, then WhatsApp opens.
• Server logs: IP address, date and time, the page requested and browser, kept briefly for security.
• Visit measurement: pages viewed, time on page, referring site, campaign parameters carried in the link, device type, browser, operating system, screen size, browser language and the country derived from your IP address. The IP address itself is not stored.
• Browser storage: a note that you closed the cookie notice, a temporary record of the yacht you clicked on so the enquiry form can be prefilled, and random visitor and session identifiers used only for visit measurement. None of these hold contact details.

• Replying to your enquiry and preparing a written quote: pre-contractual steps, Article 6(1)(b) GDPR.
• Managing a confirmed charter, including passing guest names, numbers and dates to the crew so the trip can be run and so the crew list required by port authorities in Greece can be completed: performance of the contract and compliance with the legal obligations attached to it, Article 6(1)(b) and (c) GDPR.
• Keeping booking records for tax and accounting purposes: legal obligation, Article 6(1)(c) GDPR.
• Server logs, WhatsApp click records and visit measurement, used to keep the site secure and to see which channel brought an enquiry: legitimate interest, Article 6(1)(f) GDPR.
• Sending you marketing emails, only if you ask us to: consent, Article 6(1)(a) GDPR, which you can withdraw at any time.

• Our own team, who access enquiries through an internal messaging tool so we can reply quickly.
• The captain or skipper who performs a confirmed charter, who receives the guest names, numbers and dates needed to run the trip and, where a crew list is required, to present it to the port authorities.
• Our hosting provider, which serves the static website and keeps the server logs described above.
• Google, which serves the web fonts used on the site and, in doing so, receives the visitor's IP address.
• jsDelivr, which serves the library used for the phone-number field in the enquiry form.
• WhatsApp, operated by Meta, for any conversation you start by tapping a WhatsApp button on the site; that conversation is governed by WhatsApp's own privacy policy.

We do not sell personal data to anyone, and we do not use it to make automated decisions about you.

Google and WhatsApp/Meta may process data outside the European Economic Area as part of providing their services; each relies on its own safeguards for that transfer. Our hosting, booking system and internal messaging tool are used solely to run the site and answer enquiries, and we have not been given, and do not invent, details about where each provider locates its servers beyond what is stated in this policy.

• Enquiries that do not lead to a booking: deleted after 24 months.
• Confirmed booking records: kept for as long as tax and accounting law requires.
• Server logs: kept for a short period for security, then deleted.
• The visit-measurement identifier stored in your browser: expires 30 days after your last visit, and you can clear it at any time through your browser settings.
• The cookie-notice entry stays until you clear it; the yacht-selection entry is deleted automatically when you close the tab or send the enquiry form.

Access to the booking system and internal messaging tool is limited to our team. Server logs are kept only for the short period needed for security purposes and are not used for any other purpose. The site itself is static and does not run visitor accounts, so there is no password database to protect.

You may ask us to:

• access the personal data we hold about you;
• correct inaccurate data;
• erase your data, subject to our legal duty to keep booking and accounting records;
• restrict or object to certain processing;
• receive a copy of your data in a portable format;
• withdraw any consent you gave us, such as for marketing emails.

To exercise any of these rights, write to [email protected]. We may ask you to confirm your identity before acting on the request, and we reply within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority, the national data protection authority of Greece, if you believe our processing does not comply with the EU General Data Protection Regulation or Greek data protection law.

Our charters and this website are addressed to adults who can enter into a booking. We do not knowingly collect personal data from children through the enquiry form or any other channel on the site.

We may update this Privacy Policy as our service, our website or the rules that apply to it change. The version published on this page is the one that applies, and we encourage you to check it before sending an enquiry or confirming a charter.