Privacy Policy

The Aim of This Privacy Policy

This Privacy Policy applies to all digital environments owned by CAVOTAGOO YACHTING IKE or operated on its behalf, in relation to our business activities.

CAVOTAGOO YACHTING IKE is the Data Controller (except in specific cases mentioned in this Privacy Policy) and can be contacted at:

CAVOTAGOO Yachting complies with the applicable national and European data protection legal framework, especially the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019, and aims to inform you in a lawful, fair, and transparent manner about the personal data we collect, how we use it, and how this benefits your experience while visiting our website or engaging with our services.

This Privacy Policy may be updated periodically, especially when new processing activities are introduced. We encourage you to review this Policy each time you use our services.

Collection and Processing of Personal Data

1. Data Collected for Booking Purposes

Online booking through our website (https://cavotagooyachting.com):

If you choose to make a reservation through our website, we will collect the following data:

  • First and last name
  • Phone number
  • Email address
  • Credit card details (type, number, CVC, expiration date, cardholder’s name)
  • Arrival and departure dates

Optional data may include your postal code, city, country, special requests, purpose of stay, company, etc.

1.1. Purposes of Processing and Legal Basis

We process your booking data in order to:

  • Complete your booking and process payment for relevant services, fees, and charges. Legal basis: Contract performance (GDPR Art. 6(1)(b))
  • Collect and recover debts or in case of legal disputes. Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
  • Arrange airport/port transfers upon your request. Legal basis: Contract performance (GDPR Art. 6(1)(b))

2. Data Collected Through Our Website or Online Platforms

2.1. Agents’ Data

We process data provided via Travel Agent accounts to enable direct bookings and offer the best available internet rates to your clients.
Legal basis: Legitimate interest

3. Personal Data from Our Website

We may use cookies, pixels, and web beacons to collect information when you visit our website. Legal basis: Legitimate interest (GDPR Art. 6(1)(f)). See our Cookies Policy for more information.

Special Categories of Personal Data

We do not collect special categories of personal data (e.g., racial/ethnic origin, political opinions, religious beliefs, genetic or biometric data, health, or sexual orientation) through our website.

Protection of Minors

We do not intentionally collect personal data from minors without the consent of a parent or legal guardian. If we learn that a minor has submitted personal information without consent, we will delete the data as soon as possible. We encourage parents to contact us if they suspect unauthorized use by a minor.

Transfer of Personal Data

All personal data is treated as strictly confidential. We may share data with:

  • Third-party service providers, under strict data protection agreements
  • Public authorities, including courts, tax authorities, insurance institutions, or other legally authorized bodies

If transferred outside the EU/EEA, we ensure:

  • An adequacy decision by the European Commission exists, or
  • Appropriate safeguards are in place (e.g., Standard Contractual Clauses), or
  • One of the GDPR's specific derogations applies (e.g., explicit consent, contract necessity, legal claims)

Third-Party Websites

Our website may link to external websites. While we strive to link only to trustworthy sources, we are not responsible for the privacy or content policies of third-party sites.

Your Rights

Under the GDPR, you have the right to:

  1. Access your personal data
  2. Correct inaccurate or incomplete data
  3. Delete your data (unless prohibited by law)
  4. Restrict processing
  5. Data portability
  6. Object to processing
  7. Withdraw consent (where applicable)

We will respond in writing within one month of verifying your request. Where applicable, we will also inform any third-party recipients of your updated request.

Communication for Data Protection Matters

To address questions or exercise your rights under this Privacy Policy, please contact:

CAVOTAGOO YACHTING IKE
Contact Person: Nikos Liakos
Address: 7 Valsamonos str, Athens, Greece
Phone: +306986548136
Email: info@cavotagooyachting.com

If you believe your request has not been handled properly, you may contact the Hellenic Data Protection Authority: www.dpa.gr

Security Measures

We take appropriate organizational and technical measures to safeguard the confidentiality, integrity, and availability of your personal data, tailored to the risk and nature of processing activities.

Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy, unless a longer period is required by law. Once that period has ended, your data will be securely deleted.

Updates to the Privacy Policy

CAVOTAGOO YACHTING IKE may update this Privacy Policy in response to legal, operational, or service-related changes. Updated versions will be posted on our website with a clear revision date.

Last Reviewed: April 2025