Terms and Conditions
Privacy Policy & GDPR Terms
Odysea Charters (“we,” “us,” “our,” or “the Company”) is committed to protecting and respecting your privacy. This Privacy Policy & GDPR Terms (“Policy”) explains how we collect, use, share, and protect your personal information when you use our services, including visiting our website [www.odyseacharters.com] (the “Site”) and booking charter services with us. It also outlines your rights under the EU General Data Protection Regulation (GDPR).
By using our Site or services, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree with any aspect of this Policy, please do not use our Site or services.
1. Information We Collect
1.1 Personal Data You Provide:
We may collect personal data that you voluntarily provide to us when you make a booking, sign up for newsletters, request information, or otherwise interact with us. This may include:
Name, address, telephone number, and email address
Payment information (e.g., credit/debit card details for processing via Stripe)
Communication records (e.g., emails, messages)
Preferences and interests related to your charter experience
1.2 Automatically Collected Data:
When you visit our Site, we may automatically collect certain information, such as:
IP address, browser type, device information, and operating system
Pages viewed, links clicked, and other browsing behavior
Referral sources (e.g., the website from which you navigated to our Site)
1.3 Cookies and Similar Technologies:
We use cookies and similar tracking technologies to enhance user experience, remember user preferences, and analyze Site usage. You can manage your cookie preferences through your browser settings. For more details, please see our Cookie Policy [link if applicable].
2. How We Use Your Information
We use your personal data to:
Process and manage your bookings and payments
Provide and improve our charter services
Communicate with you about your bookings, inquiries, or customer service requests
Send you promotional materials, newsletters, and offers if you have opted in to receive them (you can opt out at any time)
Personalize your experience based on your interests and preferences
Comply with legal obligations, respond to lawful requests, and protect the rights and safety of Odysea Charters, our customers, and third parties
3. Legal Bases for Processing (GDPR)
Under GDPR, we rely on the following legal bases to process your personal data:
Performance of a Contract: Processing is necessary for the fulfillment of your booking and related services.
Legal Obligation: Processing is necessary for compliance with applicable laws, regulations, or court orders.
Legitimate Interests: Processing is based on our legitimate interests in providing our services, improving user experience, and promoting our business, except where such interests are overridden by your rights and interests.
Consent: Where required by law, we will obtain your consent for certain marketing communications or the use of cookies. You have the right to withdraw consent at any time.
4. Data Sharing and Disclosure
We may share your personal data with:
Service Providers: Third-party vendors (e.g., payment processors like Stripe, IT support, and marketing agencies) who process data on our behalf and under our instructions.
Business Partners: Charter operators, marinas, and other local partners involved in providing your requested services.
Legal and Regulatory Bodies: Government authorities, law enforcement, or courts as required by law or to protect our rights.
Corporate Transactions: In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred as part of that transaction.
We ensure that all third parties receiving your personal data implement appropriate safeguards and comply with applicable data protection laws.
5. International Data Transfers
Your personal data may be transferred to and stored in countries outside the European Economic Area (EEA) that may have different data protection laws. We will ensure that appropriate safeguards, such as Standard Contractual Clauses, are in place to protect your personal data when it is transferred internationally.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements. After that period, we will securely delete or anonymize your personal data, except when we need to retain it for legal, accounting, or dispute resolution purposes.
7. Your Rights Under GDPR
You have the following rights regarding your personal data, subject to certain limitations:
Right of Access: You can request confirmation whether we process your personal data and obtain a copy of that data.
Right to Rectification: You can request that we correct any inaccuracies in your personal data.
Right to Erasure (“Right to be Forgotten”): You can request deletion of your personal data under certain circumstances.
Right to Restriction of Processing: You can request that we limit how we process your personal data in certain cases.
Right to Data Portability: You can request a copy of your personal data in a commonly used, machine-readable format and transfer it to another controller.
Right to Object: You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where we rely on your consent to process personal data, you have the right to withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at [contact email]. We may need to verify your identity before fulfilling your request. If you believe we have infringed your data protection rights, you have the right to lodge a complaint with your local data protection authority.
8. Security Measures
We implement technical and organizational security measures to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure. Despite our best efforts, no security measures are 100% effective, and we cannot guarantee absolute security of your personal data.
9. Children’s Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children without parental or guardian consent. If you become aware that a child has provided us with personal data, please contact us so we can delete it.
10. Updates to This Policy
We may update this Policy from time to time to reflect changes in our practices, legal requirements, or for any other reason. Any changes will become effective when we post the revised Policy on our Site. Please review this Policy periodically to ensure you understand how we collect, use, and share your personal data.
11. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy & GDPR Terms or our data practices, please contact us at info@odyseacharters.com