Privacy Policy

Last updated: 2 November 2026

This page explains what personal data we collect when you visit seapassionyachting.com or contact us, why we need it, and what your rights are. We follow the General Data Protection Regulation (GDPR, EU 2016/679) and Cyprus Law 125(I)/2018.

1. Who we are

The data controller is Windtech Ltd, trading as Sea Passion Yachting.

Legal name: Windtech Ltd (trading as Sea Passion Yachting)
Company registration number: HE 120553
Registered address: 20 Griva Digeni, 2679 Mammari, Nicosia, Cyprus
Email: info@seapassionyachting.com
WhatsApp and phone: +357 99 303000

We have not appointed a Data Protection Officer, because the law does not require one for a business of our size. For any privacy question, email info@seapassionyachting.com.

2. What we collect and why

Contact form. When you send us a message through the form, we receive your name, your email, your phone number (if you add it) and whatever you write, for example dates or the number of guests. We use this to reply and to prepare your quote or booking.
Legal basis: steps you ask us to take before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)).

Email, phone, WhatsApp and Viber. If you contact us directly, we see your number or address and what you send us. We use it only to communicate with you. The legal basis is the same as above.

Bookings and payment. For a booking we may need guest names, contact details and payment details. Payments are made by bank transfer to the company account shown on our Payments page, by card on our card terminal, or through a card payment link that we send you. Card payments are processed by the bank or payment provider; we do not see or store your full card number. Legal basis: performance of a contract (Art. 6(1)(b)) and our tax and accounting obligations (Art. 6(1)(c)).

Technical data. The web server automatically logs your IP address, your browser type and the page requested. We need these logs to run the site securely. Legal basis: legitimate interest (Art. 6(1)(f)).

Visitor statistics. We use Google Analytics to measure which pages people read, and only if you accept it in the cookie notice. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.

We do not sell your data, and we do not use it for automated decision-making. We do not send marketing emails unless you ask for them.

3. How long we keep it

Messages sent through the form, by email or on WhatsApp that do not lead to a booking: up to 12 months, then deleted.
Booking records and invoices: as long as Cyprus tax law requires, 7 years.
Server logs: as long as the hosting provider keeps them, usually a few weeks.
Google Analytics data: 14 months.

4. Who has access

Only our own team sees your data. We also work with these processors, who handle data on our behalf:

Cy Technology, our website host and host of our email on the seapassionyachting.com domain, in Cyprus
Google (Analytics, Maps, Fonts)
WhatsApp (Meta) and Viber, when you choose to contact us that way
Our accountant, and our bank or payment provider, when a booking needs them

We disclose data to public authorities only where the law requires it, for example passenger lists for the port authorities.

5. Transfers outside the EU

Google and Meta may process data in the USA. Both are certified under the EUâ€“US Data Privacy Framework and use the European Commission’s Standard Contractual Clauses. Viber may also process data outside the EU, under its own terms.

6. Cookies

Cookies are small files that your browser stores.

Necessary: they run the site, remember your language (WPML) and store your cookie choice. They do not need consent.
Statistics: Google Analytics (_ga, _gid). These are set only if you click “Accept”.
Third party: the Google Maps map on the contact page and the Google Fonts typefaces send your IP address to Google. Videos and links to YouTube, Facebook and Instagram follow those platforms’ own terms when you open them.

You can change your choice through the “Cookie settings” link at the bottom of each page, or delete cookies in your browser.

7. Your rights

You can ask us to:

show you the data we hold about you
correct anything that is wrong
delete your data, unless the law requires us to keep it
restrict how we use it
give it to you in a machine-readable file (portability)
stop any processing based on our legitimate interest (objection)

You can also withdraw your consent at any time. This does not affect anything done before you withdrew it.

Email info@seapassionyachting.com. We will reply within one month, and we may ask you to confirm your identity.

If you believe we have not handled your data properly, you have the right to complain to the Commissioner for Personal Data Protection, 1 Iasonos Street, 1082 Nicosia, Cyprus, www.dataprotection.gov.cy. We would appreciate the chance to fix the problem first, so please write to us.

8. Children

This website is not aimed at children under 14. Bookings are made by adults. We receive details of minor guests only from a parent or guardian, and only as far as they are needed for safety on the trip.

9. Security

The website uses HTTPS encryption. Access to messages and booking details is limited to the people who need them.

10. Changes

If this policy changes, we will update this page and the date at the top.

11. Contact

Sea Passion Yachting, info@seapassionyachting.com, WhatsApp +357 99 303000.