Privacy Policy

This policy applies when you visit yachtingplanet.eu, submit a yacht or travel inquiry, subscribe to the newsletter, contact us by email, telephone or WhatsApp, receive a tailored proposal, or otherwise communicate with us about our services.

Where a specific proposal involves a separate vessel operator, charter company, skipper or other supplier acting as an independent controller, its identity and privacy information will be provided in the proposal or booking documents where required.

• Newsletter data: your email address, selected language, signup page, the consent wording shown to you, and the time consent was given or withdrawn.
• Inquiry data: your name, email address, telephone or WhatsApp number, preferred destination and dates, group size, selected journey or vessel type, and the contents of your message.
• Communications data: emails, messages and call details, proposal history, and preferences you choose to share with us.
• Booking and contract data if an inquiry becomes a booking: contracting-party details, services, price, payment and invoice information, and details needed to administer the trip.
• Technical data: IP address, browser and device type, request time, requested URL, system logs and security-event information that may be recorded by our hosting infrastructure.
• Analytics data when you consent: a random client identifier, approximate location, pages visited, interactions, traffic source, browser and device information. Inquiry names, email addresses, telephone numbers and free-text messages are not sent to Google Analytics.
• Information received from your representative, a fellow traveller or a service partner where necessary for a particular inquiry or contract. Only provide another person's data if you are entitled to do so.

We do not ask you to include health information, identity-document copies or other special-category data in a general inquiry message. If accessibility, dietary, safety or legal travel requirements make such information necessary, we will request it separately and explain the relevant legal basis.

We do not use a website inquiry to send newsletters or other direct marketing without a separate, freely given consent. Reading this policy or accepting service terms is not, by itself, consent to marketing.

• We keep an active newsletter subscriber record while consent remains valid. After withdrawal, the address leaves the active recipient list and consent and withdrawal evidence is retained for up to 2 years, then deleted or anonymised.
• Unconverted inquiries and related correspondence are normally retained for up to 24 months after the last meaningful contact, unless you request earlier deletion or the data is needed to handle a dispute.
• Contract, invoice and payment data is kept while the contract is performed and for the period required by accounting, tax and other applicable law; accounting records are generally retained for 10 years.
• Security and server logs are normally retained for up to 30 days. Records connected with a particular incident may be retained longer while the incident is investigated or legal claims are protected.
• Data processed on the basis of consent is kept until consent is withdrawn or the stated purpose ends, whichever occurs first.
• Google Analytics cookies last for up to 12 months after their latest update. Analytics event data is retained for the period configured in Google Analytics and no longer than needed for website analysis.

At the end of the relevant period, we delete or anonymise data unless the law requires a longer retention period.

• IT and cloud providers that support the website, database and media storage, including Vercel and Supabase infrastructure.
• The client's selected email-marketing provider when we manually transfer an active newsletter address for newsletter delivery.
• Google Ireland Limited for cookieless measurement signals and, with consent, cookie-based measurement of visits and interactions.
• Email, communications, accounting, legal and other professional providers, to the extent needed for their work.
• Vessel operators, charter companies, skippers and other travel-service partners where necessary to check price or availability, prepare a proposal, or deliver the contracted service.
• Payment institutions and banks if you make a payment under a separate booking.
• Public authorities, courts or law enforcement where disclosure is required by law or needed to protect legitimate legal claims.

We disclose only the data required for each recipient's function. Where a provider acts on our behalf, it is contractually required to protect the data and use it only on our instructions. We do not sell personal data.

Some technology or communications providers may access or process data outside the European Economic Area. Where this occurs, we rely on a European Commission adequacy decision, the EU Standard Contractual Clauses, or another safeguard under Chapter V GDPR and, where necessary, apply supplementary technical and organisational measures.

If you independently choose to contact us through WhatsApp or open a social-media link, that provider processes your data under its own terms and may transfer it outside the EEA. You may contact us for information about the safeguards applicable to transfers made by us.

We use access controls, encrypted transport, administrator authentication, backups, restricted provider access, and other technical and organisational measures proportionate to the risk. No method of internet transmission or storage can, however, guarantee absolute security.

• Be informed and obtain access to personal data we process about you.
• Have inaccurate data corrected and incomplete data completed.
• Request erasure or restriction where the GDPR conditions apply.
• Object to processing based on legitimate interests for reasons related to your particular situation.
• Receive data you provided in a structured, commonly used, machine-readable format where the right to portability applies.
• Withdraw consent at any time without affecting processing lawfully carried out before withdrawal.
• Lodge a complaint with the Lithuanian State Data Protection Inspectorate or the supervisory authority in your country of residence or work.

Send requests to info@yachtingplanet.eu. We may reasonably verify your identity so that data is not disclosed to another person. We respond without undue delay and normally within one month.

We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects for you.

Website inquiry forms are not intended for children to use independently. Information about a minor traveller should be supplied only by a parent, guardian or another lawfully acting adult, and only to the extent necessary to arrange the journey.

For privacy-related questions, you may contact us at info@yachtingplanet.eu. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate or with the supervisory authority of another EU / EEA country where you live or work.

We may update this policy when our services, processing activities or legal requirements change. The latest version and effective date will always be published on this page.

For eligible OG online reservations, Stripe and your selected payment provider receive the payment details needed to process the transaction and its amount. We retain the contact details, selected trip, accepted quote/terms version, payment references and verified hold/payment status to process and administer the reservation. Full card numbers and CVC are not stored by Yachting Planet. Unsubmitted checkout drafts are not bookings and do not trigger reservation emails.

Google Analytics uses Advanced Consent Mode. Before your choice and after Reject, Google receives limited cookieless signals about public-page visits, interactions and consent state, together with technical network information. These can support aggregate measurement and modelling where Google eligibility requirements are met; they do not provide us with an individual browsing history for visitors who decline. No enquiry text, email address, telephone number or customer account identifier is included in our event payloads. Cookieless does not mean that no information is sent to Google.

Accept enables optional Google Analytics and Meta advertising cookies; Reject keeps both off. You can change or withdraw consent through Cookie settings in the footer. Previous analytics-only consent does not enable Meta: we ask again. Consent is not required to search or send an enquiry.

With advertising consent, Meta Pixel shares eligible public-page visits and successful enquiry/contact events with Meta Platforms Ireland Limited for advertising measurement and remarketing. Meta receives browser/device information, IP address, the page URL and its cookie identifiers, and may associate these with your Meta account. Our event payloads do not include enquiry names, email addresses, telephone numbers or message text. Automatic advanced matching and automatic event detection are disabled; server-side Conversions API is not used.

Meta may set first-party _fbp and _fbc cookies, normally lasting up to 90 days. The yp_marketing_consent local-storage entry remembers your advertising choice for 180 days. Withdrawing advertising consent revokes Pixel tracking, removes these website-accessible cookies and reloads the page if needed. Withdrawal does not automatically erase data already received by Meta. Google advertising storage and Google Signals remain disabled independently of Meta consent.

The legal basis for cookie-based analytics and Meta tracking is your consent, which you may withdraw at any time. Google and Meta may process data outside the EEA under their applicable transfer safeguards. Their privacy notices explain recipients, retention and how to exercise rights regarding data they hold; contact info@yachtingplanet.eu about our use of these tools.

Messages you send to Jessica are processed by OpenAI to answer sailing questions using YP information. Do not include sensitive information. Contact details supplied for an enquiry are used to handle that request.

Refreshing or reopening Jessica starts a new chat: old messages, yacht results, searches and drafts are not restored. Guests' contact details stay only in the current chat. Guest sailing preferences are saved in this browser for up to 24 hours after their last update, with no guest settings screen. For signed-in customers, sailing preferences learned from conversation are saved separately in profile settings until edited or cleared. These features support continuity, not model training. Submitted requests and their required business records are separate from chat and are not deleted by refreshing.

Signed-in customers can edit or clear sailing preferences in profile settings. You can contact info@yachtingplanet.eu to exercise the rights described in this notice.

Signed-in customers' typed contact details are remembered privately in their account until changed or deleted in profile settings. You review contact details before sending a request.

Voice calls use an AI-generated voice. OpenAI processes audio live; YP does not save audio recordings. A text transcript is added to the conversation after the call and follows the retention periods above. Muting stops microphone input but keeps the call connected. Pause, End voice, or leaving the assistant closes the connection. Resuming requires a new call. Private session identifiers and usage records support call limits and recovery; closed-session records are removed after seven days.

We count successful Bareboat page, search, yacht-detail and quote requests already received by our servers, including requests made with analytics cookies rejected or browser tracking blocked. These server statistics store aggregate counts and limited dimensions such as destination country, selected month, trip duration, guest count and campaign labels. They do not create analytics cookies, session identifiers, visitor profiles or fingerprints, and do not retain raw IP addresses, contact details, full URLs, free-text searches or advertising click identifiers. Staff, known automation, prefetches, pagination and background refresh requests are excluded where identifiable. These are request counts, not unique visitors or individual customer journeys; caching and unidentified automation can affect coverage.

Optional browser analytics requires your consent and helps measure individual session activity and associate a campaign with a submitted request. It uses a random tab session identifier and the signed __Host-yp-bareboat-attribution cookie. Rejecting or withdrawing analytics consent stops this optional tracking and clears its identifiers; footer cookie settings remain available. Necessary enquiry and confirmed-booking records are stored separately to deliver and administer your charter request. When an enquiry request already includes campaign labels, we may save those labels with that business record without a tracking cookie. Otherwise campaign attribution is optional and can be unavailable even when server request counts remain available.

The attribution cookie expires 30 days after a campaign link is recorded; a new campaign link replaces it. Tab identifiers last until the tab closes or consent is withdrawn. Optional browser-level activity is retained for up to 7 days and server and browser daily aggregates for up to 400 days. Request attribution follows the enquiry's business-record retention. Contact the privacy address in this notice about your rights. Filtering reduces automated traffic but does not establish that every request comes from a person.