Legal

Privacy Policy

Last updated: August 2026

1. Who We Are

AURA Private Yachting operates private boat cruises in the Ionian Sea, Greece. Our registered trading address is Eleftheriou Venizelou 5, Preveza 481 00, Greece. For data-related enquiries, contact us at: info@auraprivateyachting.com.

2. Data We Collect

When you make a booking, we collect: your full name, email address, phone number, number of guests, cruise date, departure point, chosen destination, selected extras (e.g. champagne, catering), payment type, and any personal notes or occasion details you provide. If you use our VIP portal, we additionally store seating, dietary, and activity preferences. If you submit an enquiry via the contact form, we collect your name, email address, and message. If you subscribe to our newsletter or join a waiting list, we collect your name, email address, and optionally your phone number. We do not store payment card details — all payments are processed by Stripe and governed by Stripe's own privacy policy.

3. How We Use Your Data

We use your data to fulfil your booking, send booking confirmations, issue pre-cruise information, and contact you in case of schedule changes. If you have separately subscribed to our newsletter, we send occasional updates about new routes and offers. You may unsubscribe at any time via the link in any email.

4. Legal Basis

Processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR) when you make a booking. Where you have given consent — for example for our newsletter — processing is based on Art. 6(1)(a) GDPR. You may withdraw consent at any time without affecting any prior processing.

5. Condivisione dei Dati

Non vendiamo né affittiamo i suoi dati personali. Li condividiamo solo con i seguenti fornitori di servizi che ci aiutano a gestire il sito web: Stripe (elaborazione pagamenti), Resend (email transazionali), Google LLC (assistente AI — Gemini 2.5 Flash), Meta Platforms (Facebook Pixel — remarketing/analytics, solo con il suo consenso), Tawk.to (widget live chat), Sentry (monitoraggio degli errori — registra eventi di errore inclusi indirizzo IP e informazioni sul browser; endpoint UE: de.sentry.io), Vercel Blob (archiviazione crittografata dei backup del database; Vercel Inc., USA) e il nostro database sicuro all'interno dell'UE. Qualora i suoi dati vengano trasferiti al di fuori dell'Unione Europea/SEE (ad esempio, a Google LLC negli Stati Uniti per l'elaborazione dell'assistente AI, o a Vercel Inc. negli Stati Uniti per l'archiviazione dei backup), garantiamo che: esiste una decisione di adeguatezza della Commissione europea, oppure vengono applicate garanzie adeguate (ad es. Clausole Contrattuali Standard), oppure si applica una delle deroghe specifiche del GDPR.

6. Retention

Booking records are retained for seven years to comply with Greek tax law. Newsletter subscriber data is held until you unsubscribe. Contact form enquiries are retained for up to two years. Waiting list entries are deleted after twelve months or upon availability notification, whichever is sooner. VIP preference data is retained for the duration operationally necessary and deleted thereafter. We do not apply automatic time-based deletion of abandoned booking records; you may request erasure at any time under your right to erasure (Art. 17 GDPR).

7. Cookies

We use a first-party analytics cookie (Google Analytics 4) and, where you have given consent, a Facebook Pixel cookie for remarketing and audience analytics. No advertising or tracking cookies are placed without your explicit consent via our cookie banner. You can withdraw consent at any time by clearing cookies or adjusting browser settings. See our Cookie Policy for full details.

8. Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. To exercise any of these rights, email us at info@auraprivateyachting.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

9. Security

We implement industry-standard technical and organisational measures to protect your data, including HTTPS encryption, HttpOnly session cookies, and regular security reviews. No internet transmission is 100% secure; we cannot guarantee absolute security.

10. GPS Vessel Tracking

For passenger safety purposes, our vessel transmits GPS position data to our secure platform. A maximum of 500 position records are retained at any time; older records are automatically deleted on a rolling basis. This data is used exclusively for real-time vessel monitoring and is not shared with third parties.

11. Assistente AI

Il nostro sito web dispone di un assistente AI opzionale. I messaggi che inserisce vengono trasmessi tramite connessione crittografata a Google LLC (USA) ed elaborati dal modello Gemini 2.5 Flash. Non conserviamo la cronologia delle conversazioni nel nostro database. Il trattamento da parte di Google è disciplinato dalla propria informativa sulla privacy (policies.google.com/privacy). Eviti di condividere dati personali sensibili (numeri di carta, numeri di passaporto, ecc.) con l'assistente AI. Nota: Questo servizio opera sul piano gratuito di Google AI Studio; pertanto i suoi messaggi potrebbero essere utilizzati da Google per migliorare i propri modelli, in conformità con le relative condizioni d'uso (ai.google.dev/gemini-api/terms). Se preferisce non condividere i suoi messaggi a tale scopo, non utilizzi l'assistente AI.

12. Abandoned Bookings

If you begin a booking but do not complete payment, we may temporarily store the information you have entered (such as your name, email address, and preferred date) in order to send a single recovery email reminder. No automatic time-based deletion of this data occurs; you may request erasure at any time by contacting us at info@auraprivateyachting.com.

13. Contact Form

If you contact us via our contact form, we retain your name, email address, and message for up to two years in order to manage your enquiry and any follow-up correspondence.

14. Newsletter & Waiting List

If you subscribe to our newsletter, you will receive a 10% discount code and occasional updates about new routes and offers. You may unsubscribe at any time via the link in any email. If you join our waiting list for a specific date, we retain your contact details until that date passes or until we notify you of availability, whichever is sooner (and in any event no longer than twelve months). You may request removal from our waiting list at any time.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. The date at the top of this page shows when the policy was last revised.

16. Minori

I nostri servizi non sono destinati a minori di 16 anni. Non raccogliamo consapevolmente dati personali di persone di età inferiore ai 16 anni. Se ritiene che un minore ci abbia fornito dati personali senza il consenso dei genitori, la invitiamo a contattarci all'indirizzo info@auraprivateyachting.com e provvederemo a cancellare tali dati tempestivamente.

17. Social Media

AURA Private Yachting mantiene profili su Instagram, Facebook e TikTok. Seguire o interagire con noi su queste piattaforme è soggetto ai termini di servizio e all'informativa sulla privacy della piattaforma stessa, non a questa. Non siamo responsabili di come le piattaforme di terze parti gestiscono i tuoi dati.