Privacy Policy — Yachting Europe

Who We Are

Yachting Europe Ltd ("Yachting Europe", "we", "us", "our") is a boutique yacht management, brokerage and crew services company registered and operating from 7 Han Asparuh St, Floor 2, Office 4, 1463 Sofia, Bulgaria.

We are the data controller for personal data collected through this website (yachtingeurope.eu) and through direct communications with our team.

For all privacy-related enquiries, please contact us at [email protected].

Data We Collect

We collect personal data in the following ways:

Enquiry forms: name, email address, phone number, and the content of your message when you submit a contact or service enquiry form on our website.
Consultation bookings: name, email address, and any information you provide when booking a call via our Calendly scheduling link.
Email correspondence: any personal data you voluntarily share when contacting us directly by email.
Usage data: anonymised analytics data about how you interact with our website, collected via Google Analytics (see Section 5).
Cookies: technical and analytics cookies placed on your device when you visit our website. See our Cookie Policy for full details.

We do not collect sensitive personal data (such as health, financial, or identity documents) through this website.

How We Use Your Data

We use the personal data we collect for the following purposes:

Responding to your enquiries and providing the services you have requested.
Scheduling and conducting consultations.
Sending service-related communications directly relevant to your enquiry.
Improving our website and understanding how visitors use it, through aggregated and anonymised analytics.
Complying with applicable legal obligations.

We do not use your personal data for automated decision-making or profiling.

Legal Basis for Processing

We process your personal data under the following legal bases as defined under the EU General Data Protection Regulation (GDPR) and Bulgarian Personal Data Protection Act (PDPA):

Legitimate interests — to respond to your enquiries and conduct our business operations in a manner you would reasonably expect.
Contractual necessity — where processing is required to fulfil a service agreement with you or take pre-contractual steps at your request.
Consent — for the placement of non-essential cookies and analytics tracking. You may withdraw consent at any time via your browser settings or our cookie preferences.
Legal obligation — where we are required to process data to comply with applicable law.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to collect anonymised data about how visitors use our website — such as pages visited, time on site, and general geographic region. This data is aggregated and does not identify you personally.

Google may transfer this data to servers in the United States. Google LLC participates in the EU–US Data Privacy Framework, providing an adequate level of data protection.

You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on, or by adjusting your cookie preferences on our Cookies page.

Data Sharing

We do not sell, rent, or trade your personal data. We may share data only in the following circumstances:

Service providers: trusted third-party tools that support our operations, including Calendly (scheduling), Google Workspace (email), and Google Analytics (website analytics). Each is bound by appropriate data processing agreements.
Legal requirements: if we are required to disclose data by law, court order, or competent regulatory authority.
Business transfers: in the event of a merger, acquisition, or sale of our company, your data may be transferred as part of that transaction, subject to the same privacy protections.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law:

Enquiry and contact form submissions are retained for up to 3 years from the date of submission.
Consultation records and related correspondence are retained for the duration of our relationship and for up to 5 years thereafter.
Google Analytics data is retained for 26 months in accordance with our Analytics configuration.

After the applicable retention period, data is securely deleted or anonymised.

Your Rights

Under GDPR and applicable Bulgarian data protection law, you have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you.
Right to rectification — to request correction of inaccurate or incomplete data.
Right to erasure — to request deletion of your data, subject to certain legal exceptions.
Right to restriction — to request that we limit processing of your data in certain circumstances.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to object — to object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data transmitted between your browser and our servers.

While we take reasonable precautions, no method of internet transmission or electronic storage is entirely secure. We encourage you to contact us promptly at [email protected] if you believe your personal data has been compromised.

Contact & Complaints

For any questions, requests, or concerns regarding this Privacy Policy or how we handle your personal data, please contact us:

Email: [email protected]
Address: 7 Han Asparuh St, Floor 2, Office 4, 1463 Sofia, Bulgaria

If you are unsatisfied with our response, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) at www.cpdp.bg, or with the supervisory authority in your country of residence within the European Union.

This policy was last updated in March 2026. We may update it periodically — any material changes will be reflected by updating the date at the top of this page.