CONAN

Privacy policy

Last updated · DRAFT — pending review

Draft — final wording to be reviewed by legal counsel before public launch. Sections, titles and order are placeholders; legal counsel may rewrite freely.

1. Data controller

The data controller for personal data collected through this site is Nereis Yachting NEPA, the current operating entity, with its registered office in Greece. Contact details for the data controller are available via the imprint page and the contact section of this site.

2. Data we collect

When you submit an inquiry, we collect your name, email, phone if provided, and the contents of your message. When you book, we additionally collect the information required to operate the booking (dates, guests, payment status). When you subscribe to the newsletter, we collect your email and locale preference.

3. How we use your data

Inquiry data is used to respond to your message and propose a charter. Booking data is used to perform the contract and meet maritime and tax obligations. Newsletter data is used to send periodic updates, no more than a few times a year. We do not sell, rent or trade your data.

4. Legal basis for processing

Inquiry and booking data are processed on the basis of performance of a contract (or steps prior to entering into one). Newsletter subscription is processed on the basis of your consent, which you may withdraw at any time via the unsubscribe link. Records required by maritime and tax law are processed on the basis of legal obligation.

5. Sharing with third parties

We use a small set of processors to operate the site and the business: Sanity (content management), Vercel (hosting), Resend (transactional email), and Stripe (payment processing). Each is bound by data processing agreements aligned with their published terms. Booking data may also be shared with maritime authorities and port operators as required by law.

6. International transfers

Where data is processed outside the European Economic Area (for example by certain US-based processors), we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards published by those processors.

7. Retention

Inquiry data is retained for up to two years from last contact unless you ask us to delete it sooner. Booking and accounting records are retained for the duration required by maritime and tax law (typically ten years). Newsletter data is retained for as long as you remain subscribed.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise these rights, write to the data controller via the contact details on this site. You also have the right to lodge a complaint with the data protection authority of your residence.

9. Cookies

This site uses only strictly necessary cookies required for it to function (language preference, basic session). No third-party analytics or advertising cookies are used at launch. Should this change, a cookie banner will be added and your choices honoured.

10. Contact

For privacy questions or to exercise your rights, contact the data controller via the email listed on the imprint page.