Privacy Policy

The party responsible for deciding how and why your personal data is used is Athens Yacht Charter, the brand under which this website operates in Athens, Greece. We do not publish a company registration number, VAT number or office address on this site, and we ask that you do not rely on any such detail unless we confirm it to you directly in writing. Any question about how your data is handled, or a request to exercise your rights, can be sent to [email protected].

We collect data depending on how you interact with us:

• enquiry form: name, email, phone number if you give it, the yacht you are interested in if any, your proposed charter dates, number of guests, your message, plus the web page you were on and the site that referred you to it;
• direct contact: anything you tell us by email, phone or WhatsApp when you reach out yourself;
• WhatsApp click: when you tap a WhatsApp button on the site, we record the page you were on, the referring site, the language of the page and the prefilled message text before WhatsApp opens;
• server logs: IP address, time of the request, the page requested and browser information, kept briefly for security;
• visit measurement: pages viewed, time on page, referring site, campaign parameters in the link, device type, browser, operating system, screen size, browser language and a country derived from your IP address; the IP address itself is not stored.

We rely on the following grounds under the GDPR for each purpose:

• taking steps you ask for before a contract, and then performing the charter contract: answering your enquiry, preparing a quote, confirming and running your booking;
• our legitimate interest: keeping the site and our systems secure through server logs, understanding which pages and channels bring visitors through our own visit-measurement script, and routing WhatsApp clicks to our booking system so we can respond quickly;
• a legal obligation: keeping booking and accounting records for the period Greek tax law requires, and, once a charter is confirmed, collecting guest names for the crew list that the captain must hold on board and may need to present to the port authority.

Personal data submitted through the enquiry form or sent to us directly is stored in our own booking system and passed to our team through an internal messaging tool so someone can reply promptly. For a confirmed charter, the captain and crew who will run your trip receive the guest list and relevant charter details needed to prepare the boat, brief the crew and satisfy port-authority requirements. The website itself is a static site served by a hosting provider; its logs are used only for security. The site loads web fonts from Google, which receives your IP address to serve them, and loads the phone-number field component from the jsDelivr content delivery network; neither sets cookies on our behalf. If you start a conversation on WhatsApp, that conversation runs on WhatsApp's platform and is handled by Meta under WhatsApp's own privacy terms, which we do not control. We do not sell personal data to anyone, and we do not use it to make automated decisions about you.

Google Fonts, the jsDelivr content delivery network and WhatsApp are operated by providers established outside Greece, and in some cases outside the European Economic Area. Where this happens, it is limited to the technical function described above, and such providers are themselves bound by the safeguards the GDPR requires for data leaving the EEA. We do not otherwise transfer your data abroad.

We delete enquiries that do not turn into a booking after 24 months. Records relating to a confirmed booking are kept for as long as Greek tax and accounting law requires. Server logs are kept for a short period for security and then removed. In your browser, a local-storage entry simply remembers that you closed the cookie notice; a session-storage entry remembers which yacht you clicked so the enquiry form can be prefilled, and it is deleted when you close the tab or send the form; a separate local-storage entry holds random, non-identifying visitor and session identifiers for visit measurement and expires 30 days after your last visit, or sooner if you clear it yourself. None of these browser entries contain your name, email or phone number, and the site does not set cookies of its own.

We limit who can see enquiry and booking data to the team members and crew who need it to respond to you or run your charter, and we keep server logs only long enough to detect and investigate security issues. We do not ask for more information than the enquiry form or a confirmed booking actually requires.

You can ask us to:

• give you access to the personal data we hold about you;
• correct it if it is inaccurate;
• delete it, where we are not required to keep it for tax or legal reasons;
• restrict or object to certain uses of it, in particular where we rely on our legitimate interest;
• receive a copy of the data you gave us in a portable format.

Send these requests to [email protected]. We reply within one month and may ask you to confirm your identity before acting on the request. If you believe we have not handled your data correctly, you may also complain to the Hellenic Data Protection Authority, the supervisory authority for Greece.

This website and its charter services are addressed to adults arranging a yacht charter, and we do not knowingly collect personal data from children. If we become aware that we hold data from a child without appropriate consent, we will delete it. We may update this policy as our practices or the law change; the current version is the one published on this page, and we encourage you to check it before sending us personal data.