Legal
Privacy Policy
Last updated: August 2026
AURA Private Yachting ("we", "our", "us") is committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Greek law.
1. Who We Are
AURA Private Yachting operates private boat cruises in the Ionian Sea, Greece. Our registered trading address is Eleftheriou Venizelou 5, Preveza 481 00, Greece. For data-related enquiries, contact us at: info@auraprivateyachting.com.
2. Data We Collect
When you make a booking, we collect: your full name, email address, phone number, number of guests, cruise date, departure point, chosen destination, selected extras (e.g. champagne, catering), payment type, and any personal notes or occasion details you provide. If you use our VIP portal, we additionally store seating, dietary, and activity preferences. If you submit an enquiry via the contact form, we collect your name, email address, and message. If you subscribe to our newsletter or join a waiting list, we collect your name, email address, and optionally your phone number. We do not store payment card details — all payments are processed by Stripe and governed by Stripe's own privacy policy.
3. How We Use Your Data
We use your data to fulfil your booking, send booking confirmations, issue pre-cruise information, and contact you in case of schedule changes. If you have separately subscribed to our newsletter, we send occasional updates about new routes and offers. You may unsubscribe at any time via the link in any email.
4. Legal Basis
Processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR) when you make a booking. Where you have given consent — for example for our newsletter — processing is based on Art. 6(1)(a) GDPR. You may withdraw consent at any time without affecting any prior processing.
5. Datenweitergabe
Wir verkaufen oder vermieten Ihre personenbezogenen Daten nicht. Wir geben sie nur an folgende Dienstleister weiter, die uns beim Betrieb der Website helfen: Stripe (Zahlungsabwicklung), Resend (transaktionale E-Mails), Google LLC (KI-Assistent — Gemini 2.5 Flash), Meta Platforms (Facebook Pixel — Remarketing/Analytics, nur mit Ihrer Einwilligung), Tawk.to (Live-Chat-Widget), Sentry (Fehlerüberwachung — erfasst Fehlerereignisse einschließlich IP-Adresse und Browser-Informationen; EU-Endpunkt: de.sentry.io), Vercel Blob (verschlüsselte Datenbank-Backup-Speicherung; Vercel Inc., USA) sowie unsere eigene sichere Datenbank innerhalb der EU. Sofern Ihre Daten in Länder außerhalb der Europäischen Union/des EWR übermittelt werden (z. B. an Google LLC in den USA für die KI-Assistenten-Verarbeitung oder an Vercel Inc. in den USA für die Backup-Speicherung), stellen wir sicher, dass: ein Angemessenheitsbeschluss der Europäischen Kommission vorliegt, oder geeignete Garantien angewendet werden (z. B. Standardvertragsklauseln), oder eine der spezifischen DSGVO-Ausnahmen gilt.
6. Retention
Booking records are retained for seven years to comply with Greek tax law. Newsletter subscriber data is held until you unsubscribe. Contact form enquiries are retained for up to two years. Waiting list entries are deleted after twelve months or upon availability notification, whichever is sooner. VIP preference data is retained for the duration operationally necessary and deleted thereafter. We do not apply automatic time-based deletion of abandoned booking records; you may request erasure at any time under your right to erasure (Art. 17 GDPR).
7. Cookies
We use a first-party analytics cookie (Google Analytics 4) and, where you have given consent, a Facebook Pixel cookie for remarketing and audience analytics. No advertising or tracking cookies are placed without your explicit consent via our cookie banner. You can withdraw consent at any time by clearing cookies or adjusting browser settings. See our Cookie Policy for full details.
8. Your Rights
Under GDPR, you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. To exercise any of these rights, email us at info@auraprivateyachting.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
9. Security
We implement industry-standard technical and organisational measures to protect your data, including HTTPS encryption, HttpOnly session cookies, and regular security reviews. No internet transmission is 100% secure; we cannot guarantee absolute security.
10. GPS Vessel Tracking
For passenger safety purposes, our vessel transmits GPS position data to our secure platform. A maximum of 500 position records are retained at any time; older records are automatically deleted on a rolling basis. This data is used exclusively for real-time vessel monitoring and is not shared with third parties.
11. KI-Assistent
Unsere Website bietet einen optionalen KI-Assistenten. Nachrichten, die Sie eingeben, werden über eine verschlüsselte Verbindung an Google LLC (USA) übermittelt und vom Modell Gemini 2.5 Flash verarbeitet. Wir speichern keinen Gesprächsverlauf in unserer eigenen Datenbank. Die Verarbeitung durch Google unterliegt der eigenen Datenschutzrichtlinie von Google (policies.google.com/privacy). Bitte teilen Sie keine sensiblen personenbezogenen Daten (Kartennummern, Passnummern usw.) mit dem KI-Assistenten. Hinweis: Dieser Dienst läuft im kostenlosen Tarif von Google AI Studio; Ihre Nachrichten können daher von Google zur Verbesserung seiner Modelle verwendet werden, gemäß den Nutzungsbedingungen (ai.google.dev/gemini-api/terms). Wenn Sie Ihre Nachrichten nicht zu diesem Zweck weitergeben möchten, verwenden Sie bitte den KI-Assistenten nicht.
12. Abandoned Bookings
If you begin a booking but do not complete payment, we may temporarily store the information you have entered (such as your name, email address, and preferred date) in order to send a single recovery email reminder. No automatic time-based deletion of this data occurs; you may request erasure at any time by contacting us at info@auraprivateyachting.com.
13. Contact Form
If you contact us via our contact form, we retain your name, email address, and message for up to two years in order to manage your enquiry and any follow-up correspondence.
14. Newsletter & Waiting List
If you subscribe to our newsletter, you will receive a 10% discount code and occasional updates about new routes and offers. You may unsubscribe at any time via the link in any email. If you join our waiting list for a specific date, we retain your contact details until that date passes or until we notify you of availability, whichever is sooner (and in any event no longer than twelve months). You may request removal from our waiting list at any time.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. The date at the top of this page shows when the policy was last revised.
16. Minderjährige
Unsere Dienste richten sich nicht an Kinder unter 16 Jahren. Wir erfassen wissentlich keine personenbezogenen Daten von Personen unter 16 Jahren. Wenn Sie glauben, dass ein Kind uns personenbezogene Daten ohne elterliche Einwilligung bereitgestellt hat, kontaktieren Sie uns bitte unter info@auraprivateyachting.com und wir werden diese Daten umgehend löschen.
17. Soziale Medien
AURA Private Yachting unterhält Profile auf Instagram, Facebook und TikTok. Das Folgen oder Interagieren mit uns auf diesen Plattformen unterliegt den eigenen Nutzungsbedingungen und Datenschutzrichtlinien der jeweiligen Plattform, nicht dieser hier. Wir sind nicht dafür verantwortlich, wie Drittanbieter-Plattformen Ihre Daten verarbeiten.