Privacy Policy

1. Introduction

Aegean Yachting, a brand of Cosmos Luxury Yachts P.C. ("we", "us", or "our"), is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website aegean-yachting.com (the "Website") or interact with our services.

We process personal data in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Greek data protection legislation.

2. Data Controller

3. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, and country of residence — provided when you submit an inquiry form, subscribe to our newsletter, or contact us directly.
• Charter preferences: preferred destinations, dates, number of guests, yacht type, and budget range — provided through our search and inquiry forms.
• Technical data: IP address, browser type and version, operating system, device type, referring URL, pages visited, time and date of access — collected automatically through cookies and similar technologies.
• Communication data: the content of messages you send us via email, contact forms, or other communication channels.

4. How We Use Your Data

We process your personal data for the following purposes:

5. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies. When you first visit our Website, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies.

Essential cookies are necessary for the Website to function and cannot be disabled. These include cookies that remember your cookie consent preferences and maintain session state.

Analytics cookies help us understand how visitors interact with our Website by collecting and reporting information anonymously. These are only activated with your explicit consent.

You can change your cookie preferences at any time by clearing your browser cookies and revisiting the Website.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with:

• Yacht owners and operators: when you submit a charter inquiry, we share relevant details with the yacht owner or management company to provide you with a quote.
• Service providers: trusted third-party providers who assist us with website hosting, email delivery, and analytics — all bound by data processing agreements.
• Legal authorities: when required by law or to protect our legal rights.

7. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Inquiry data is retained for up to 3 years after your last interaction. Newsletter subscriber data is retained until you unsubscribe. Technical data collected via analytics is retained for up to 26 months.

9. Your Rights

Under the GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data ("right to be forgotten").
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent — withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@aegean-yachting.com. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (SSL/TLS), access controls, and regular security reviews.

11. Children's Privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

12. Supervisory Authority

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: