Last updated: July 1, 2019
We inform you that the personal data of our Customers is processed in accordance with the principles of transparency, purpose limitation, data minimisation, accuracy, integrity and confidentiality, and in compliance with other obligations and guarantees established by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
In accordance with the recommendations of Payment Card Industry Security Standards Council, customer card details are protected using Transport Layer encryption TLS 1.2 and application layer with algorithm AES and key size 256 bits.
The Data Controller is the company THE BOAT GLOBAL (TBG) LIMITED, Tax ID No: CY 10393645R, address: Agiou Athanasiou Avenue 33, Agios Athanasios, 4102, Limassol, Cyprus. Email: firstname.lastname@example.org.
The Company is engaged in the rental of pleasure boats and we offer our services through the brand TheBoats.com, hereinafter, the «Company».
The information that you provide through the website or application may vary depending on the services you request or the actions that you expressly authorise us to carry out. Generally speaking, we can process your data for the following purposes:
The personal data that we process is the identification information that you directly provide either through the registration form on our Website or through other means, such as enquiries or complaints made to our customer service department.
The personal data that is processed includes the following specific categories:
The Company does not, under any circumstances, accept liability for the use of false, inaccurate, incomplete or out-of-date information provided by the Customer.
4.1. Recipients: the data that you provide will not be transferred to any third parties, except to public authorities, judges, the courts or the police, in the event that we are legally required to do so.
4.2. Data processors: to carry out certain necessary functions for the provision of the Company’s services, your data may be processed by third parties who act as data processors and are contractually required to comply with their legal obligations to keep information confidential and secret.
4.3. International transfers: while the data that we collect about you is usually stored within the European Economic Area (EEA), it may also be transferred and processed in a country outside the EEA using the cloud storage model. You are informed that any transfer to a location outside the EEA is only made to companies that belong to the EU-US Privacy Shield, which guarantees an adequate level of personal data protection. Further information is available at: https://www.privacyshield.gov/welcome.
4.4. Categories: The categories of recipients that may process your data for the purposes indicated and according to the legitimising basis are the following:
|RECIPIENT||TYPE OF DATA||LEGITIMISING BASIS|
|Public authorities, judges, the courts, the police||Identification information||Compliance with a legal obligation|
|Hosting and cloud storage services||Identification information||Management of the contractual relationship|
|Postal, distribution and messaging services||Identification information||Management of the contractual relationship|
The data provided will be kept for as long as the contractual relationship with you, the Customer, lasts.
When your data is no longer necessary for the purpose for which it was obtained, it will be blocked and only made available to competent public authorities, judges, the courts, public prosecutors, etc., upon their request, for the necessary number of years to comply with legal obligations, after which it will be completely deleted.
6.1. Rights. Our data protection regulations grant you a series of rights in relation to the processing of your data when you contract our services. These can be summarised as follows:
6.2. Right of withdrawal of consent. You can withdraw the consent that you have provided by notifying us by email at email@example.com or by post at Agiou Athanasiou Avenue 33, Agios Athanasios, 4102, Limassol, Cyprus.
6.3. Right not to be the subject of a decision based solely on the automated processing of data. You also have the right to request that no processing of personal data be carried out which involves the data controller making decisions that could significantly affect you based on automated processing of data without human intervention.
6.4. Exercise of rights. The Company guarantees the adoption of the necessary measures to ensure that these rights can be exercised free of charge. To exercise your rights, you can notify us by email at firstname.lastname@example.org, specifying the right you wish to exercise.