Halkidiki Sailing - Babasails Yachting
BOOK ONLINE

Privacy Policy

 

Privacy Policy

Last updated: April 2026 — Halkidiki Sailing | Babasails Yachting

This Privacy Policy explains how Halkidiki Sailing — Babasails Yachting (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit halkidikisailing.eu or contact us to book a sailing cruise. We comply with the EU General Data Protection Regulation (GDPR) and Greek data protection law.

1. Data Controller

The data controller responsible for your personal information is:

  • Business name: Babasails Yachting | Halkidiki Sailing
  • Captain: Simon Ziogou (Cpt. Simon)
  • Address: Kiouptsidou 11, Thessaloniki, Greece
  • Email: [email protected]
  • Phone: +30 6934 854 854

2. What Personal Data We Collect

2.1 When you make a booking

  • Full name and names of passengers
  • Email address and phone number
  • Number of guests and preferred cruise date
  • Payment information (processed securely via our booking provider — we do not store card details)
  • Any special requests or health considerations relevant to your safety on board

2.2 When you contact us

  • Name, email address, and the content of your message

2.3 When you visit our website

  • IP address, browser type, pages visited, and time spent on the site (via Google Analytics)
  • Cookie preferences and interactions

3. How We Use Your Data

  • To fulfill your booking: confirming reservations, sending departure information, and coordinating your cruise
  • To communicate with you: responding to enquiries before and after your trip
  • To ensure safety on board: relevant health or mobility information you choose to share
  • To improve our website: anonymized analytics data helps us understand how visitors use our site
  • To comply with legal obligations: such as Greek maritime or tax regulations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

  • Contract performance: processing your booking and delivering your cruise
  • Legitimate interest: improving our services and responding to enquiries
  • Legal obligation: compliance with applicable Greek and EU law
  • Consent: for analytics cookies (you can withdraw consent at any time)

5. Third-Party Services

We use the following trusted third-party services that may process your data:

  • Kleesto (app.kleesto.com) — online booking platform. Their privacy policy applies to data entered during booking.
  • Google Analytics (G-JXEKWB8HQB) — website analytics using anonymized data. You can opt out via Google’s opt-out tool.
  • Trustindex — display of customer reviews (Google Reviews).
  • Google Fonts — loaded locally from our server, no data sent to Google.

6. Cookies

Our website uses cookies to function properly and to analyze traffic. We use:

  • Essential cookies: required for the site to work correctly
  • Analytics cookies: Google Analytics — only activated with your consent

You can accept or decline non-essential cookies via the cookie banner when you first visit our site. You can also clear cookies at any time through your browser settings.

7. How Long We Retain Your Data

  • Booking records: retained for 5 years for accounting and legal compliance
  • Contact form enquiries: deleted after 12 months if no booking resulted
  • Analytics data: retained for 14 months (Google Analytics default), then automatically deleted

8. Your Rights Under GDPR

As an EU resident, you have the right to:

  • Access — request a copy of your personal data we hold
  • Rectification — ask us to correct inaccurate data
  • Erasure — request deletion of your data (“right to be forgotten”), subject to legal retention requirements
  • Restriction — ask us to limit how we use your data
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — at any time, for consent-based processing (e.g. analytics cookies)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) — www.dpa.gr.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses HTTPS encryption and security headers. Payment data is handled exclusively by our PCI-compliant booking provider.

10. International Transfers

Google Analytics may transfer data to servers outside the EU. Google participates in the EU-U.S. Data Privacy Framework and provides appropriate safeguards under GDPR Article 46.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy or how we handle your data:
📧 [email protected]
📞 +30 6934 854 854

Halkidiki Sailing — Babasails Yachting | © 2026. All rights reserved.