Privacy Policy

This privacy policy has been compiled to better serve those who are concerned with how their Personal Data is being used online. From 25 May 2018 onwards, you and your personal data will be protected by the EU General Data Protection Regulation (which is otherwise known as GDPR). In this privacy policy, we refer to this legislation as data protection laws.

Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website. We will only process your personal data as set out in our privacy policy or otherwise notified to or agreed by you or as we are otherwise permitted to do in accordance with data protection laws.

What is my personal data and what do you mean by process?

When we refer to personal data, we mean any information which relates to an identified or identifiable individual. Where we refer to process or processing, we mean anything which we may do with your personal data including collecting, storing, using, disclosing to third parties and erasing it.

What personal information do we collect from the people that visit our blog, website or app?

When registering on our site, as appropriate, you may be asked to enter your name, email address, Company Name, Industry or other details to help you with your experience. We collect personal data from and about you whenever you use our services, or if you are in touch with us in any way, whether this is directly or indirectly.

Examples of personal data which we might collect include (but are not limited to):

Your personal contact details such as name, title, postal addresses, email addresses and telephone numbers.
Technical information, such as information from your visits to our website/app or relating to the event invitations, updates, marketing materials and other communications we send to you electronically.
Your communication preferences regarding marketing materials.
Any other personal information you provide to us during your relationship with us, such as dietary requirements, any physical disability and your views and comments.
Identification and background information we may collect about you as part of our business acceptance procedures and recruitment procedures.
Copies of documents you provide to prove your identity where the law requires this or where we require it when you transact with us. This may include a copy of your passport or equivalent ID document. This will include details of your full name, address, date of birth and facial image. If you provide a passport, the data will also include your place of birth, gender and nationality.
Details of your yachting preferences.
Financial information, such as your bank account details.
The company you work for and your position.

For a booking or booking enquiry, we will process your personal data (other than any data which comes within special categories of personal data – see below) on the basis that this is necessary for the performance of your contract with us or to enable us to take steps at your request prior to your entering into a contract with us. We may also need to do so to comply with a legal obligation to which we are subject or in order to protect your vital interests (for example, in an emergency situation).

If you wish to receive brochures or other promotional material from us, we will need your name and the contact details applicable to the form of communication you have consented to. For example, if you wish to receive information by e-mail, we will need your e-mail address.

When do we collect information?

We collect information from you when you register on our site, subscribe to a newsletter, respond to a survey, fill out a form, Use Live Chat or enter information on our site. Provide us with feedback on our products or services.

When you wish to do business with us or to work for us.
When you visit our website or submit your information via the website.
When you ask Epic Yachts & Villas to send you information about a yacht or service.
When you contact us by any means with queries, complaints etc.
When you book any kind of appointment or meeting with us.
When you engage with us on social media.
When you fill in any forms.
When you have given a third-party permission to share with us the information they hold about you.
We collect data from publicly available sources where the information is made public as a matter of law.

How and why we use your information?

We want to give you the best possible client service and yachting experience. One way to achieve that is to ensure we have all the relevant information which may also include your personal data.

We then use this to inform the Epic Yachts & Villas team and to tailor our services accordingly.

The data privacy law allows this as part of our legitimate interest in understanding our clients so we provide the highest levels of service.

Please be aware that if you choose not to share your personal data with us, or if you refuse certain contact permissions, we might not be able to provide some services that you may have asked for.

This is how we will collect your personal data and why:

In the course of our business acceptance procedures to manage, administer and improve our provision of services to clients and to administer any service or support which you have requested, based on your consent given at the time of request.
To provide information requested by you. We may also keep a record of your requests to inform any future communication and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service and understanding how we can improve our service based on your experience.
To protect our business and you from fraud and other illegal activities. This includes using your personal data to maintain, update and safeguard our dealings with you. We will also monitor your browsing activity with us to quickly identify and resolve any problems and protect the integrity of our website/app. We will do all of this as part of our legitimate interest.
To process payments and to prevent fraudulent transactions. We do this on the basis of our legitimate business interests. This also helps to protect our clients from fraud.
If we discover any criminal activity or alleged criminal activity. We aim to protect the individuals we interact with from criminal activities.
To follow up with you on a job application.
With your consent, we will use your personal data to keep you informed by post, email and telephone about relevant services, events that you may be interested in, and so on. Of course, you are free to opt out of hearing from us by any of these channels at any time.
To send you relevant, personalized communications by post and email in relation to updates and services. We will do this on the basis of our legitimate business interest. You are free to opt out of hearing from us by post and/or email at any time.
To send you communications required by law or which are necessary to inform you about the services we provide to you. For example, legally required information relating to any service we have agreed to provide. These messages will not include any promotional content and do not require prior consent when sent by email, post or text message. If we do not use your personal data for these purposes, we would be unable to comply with our legal obligations.
To display the most interesting content to you on our websites or apps, we will use data we hold and will do so on the basis of your consent to receive app notifications and/or for our website to place cookies or similar technology on your device.
To develop, test and improve the systems and services we provide to you. We will do this on the basis of our legitimate business interests.
To comply with our contractual or legal obligations to share data with law enforcement.

What are special categories of personal data?

Personal data which concerns your health or which reveals your racial or ethnic origin or your sexual orientation are special categories of personal data. Other information also comes within special categories but this is unlikely to be relevant to the booking and provision of travel arrangements.

Generally speaking, the processing of special categories of personal data requires your explicit consent.

Accordingly, information concerning any disability, medical condition, restricted mobility or other health related issue which may affect your travel arrangements (and related requirements) as well as dietary restrictions which disclose your religious beliefs or a health issue are special categories of personal data. We will ask for your consent to our processing this information at the time you make your booking or your booking enquiry.

Who may we provide your personal data to?

Where you make a booking, appropriate personal data will be passed on to the relevant suppliers of your chosen arrangements (such as yacht owners, base staff, experience providers, car hire companies and restaurants) together with any other third party (such as banks and/or credit card companies) who need this information so that we can arrange for your holiday to be provided. The information may also be provided to government / public authorities such as customs or immigration if required by them, or as required by law. Certain information may also be passed on to security or credit checking companies.

We may also make personal data available to other companies who provide services on our behalf, such as mailing brochures and marketing material.

We only provide third parties with the personal data they require in order to deliver their services. Other than in relation to government / public authorities (over whom we have no control), we will take appropriate steps which are intended to ensure that anyone to whom we pass your personal data for any reason agrees to keep it secure, only uses it for the purposes of providing their services and does not collect any personal data from you in the course performing their services.

Where will we process your personal data?

Your personal data may be processed within Greece and/or any other country(ies) of the European Economic Area (EEA).

We may also process personal data outside the EEA. Data protection laws may not be as strong outside the EEA as they are in the EEA. Personal data will not be transferred to a country outside the EEA unless (1) the country to which it is transferred is one which the European Commission considers to provide an adequate level of data protection or (2) the personal data is transferred to a company which is required by our contract with them only to deal with the data in accordance with our instructions and to maintain appropriate security to protect the personal data which we are satisfied they have or (3) we are obliged to provide the personal data to a government / public authority in order to provide your holiday

How do we protect your personal data?

We know how much data security matters to all our clients. Keeping this in mind, we will treat your data with the utmost care and take all appropriate steps to protect it.

We have in place technical and organizational measures to protect the personal information we collect about you from unauthorised, improper or unlawful access, use, disclosure, alteration or destruction consistent with applicable data protection laws.

We secure access to all transactional areas of our websites using ‘https’ technology.

Can we use your personal data to send you information about our holidays or other services in the future?

We will only retain and use your personal data for marketing purposes where you have specifically consented to our doing so or, in relation to e-mail marketing, where we comply with the Privacy and Electronic Communications Regulations 2003 (PECR). PECR permits us to send you e-mail marketing where you have previously provided us with your e-mail address in the course of entering into a contract with us for tour arrangements or negotiations for such arrangements and we wish to e-mail you marketing material about our similar services or products. You will of course be given the opportunity to opt out of receiving such e-mail marketing communications when you first provide us with your e-mail address and whenever we send you any e-mail marketing.

You may provide your consent by opting to receive marketing material either on-line or by telephone. You may also choose in what ways you are happy to receive communications from us. You may, for example, be happy to receive information and offers by post and e-mail but not by telephone.

Can you withdraw your consent to our processing your personal data?

Yes, you can withdraw your consent to receiving marketing material or other communications from us, either generally or in any particular way, at any time by e-mailing us atinfo@epic-yachts.com or telephone us.

How can you find out what information we are holding about you?

You are entitled to ask us (by letter or e-mail) what personal data of yours is being held or processed, for what purpose and to whom it may be or has been disclosed. No fee will be charged for responding to this request unless it is obviously unfounded or excessive or we have previously provided the same information. We promise to respond to your request without delay and in any event within 1 month unless the request is complex or you have made numerous requests in which case we may be able to extend our response time by a further 2 months.

What should you do if the personal data we are holding is inaccurate, out of date or incomplete?

If you believe this is the case, please tell us by e-mail as soon as possible. We will rectify the problem within 1 month or within 3 months if the rectification request is complex.

How long can we retain and process your personal data?

We will not process your personal data in a form which enables you to be personally identified for any longer than is necessary in order to fulfil the purpose for which it was originally collected or for any other legitimate business purpose.

We will delete your personal data from our systems unless we believe in good faith that we need to retain some information to place you on a ‘do not contact’ list or where the law or other regulation requires us to preserve it (for example, because of our obligations to tax or regulatory authorities). If you have consented to receiving marketing communications from us, we may continue to use your personal data for this purpose until you withdraw your consent or otherwise for as long as we reasonably consider your consent remains valid and effective.

Can you ask us to delete your personal data?

Yes, you can ask us to erase your personal data in certain circumstances, for example where you have withdrawn your consent to further marketing material where the data in question has only been processed for this purpose. However, this is not always the case. Please see the previous paragraph for further information on the period of time we may retain personal data.

Can this privacy policy be changed?

Yes, from time to time we may need to make changes to this privacy policy. These may be required as a result of changes in data protection laws or in the guidance issued by regulators such as the Information Commissioner’s Office (which is usually referred to as the ICO) or where we make changes to our procedures.

Do we use ‘cookies’?

Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. If you’ve used our website we may use advertising on other websites and on social media sites and apps, to remind you about the services we provide based on your browsing.

We use cookies to:

Understand and save user’s preferences for future visits.
Keep track of advertisements.
Compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf.
Enable and support our security features, and to help us detect malicious activity and violations of our User Agreement.
Cookies help us learn how well our site and plugins perform in different locations. We also use cookies to understand, improve, and research products, features, and services, including when you access Epic Yachts & Villas from other websites, applications, or devices such as your work computer or your mobile device.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser (like Internet Explorer) settings. Each browser is a little different, so look at your browser’s Help menu to learn the correct way to modify your cookies. If you disable cookies off, some features will be disabled It won’t affect the user’s experience that make your site experience more efficient and some of our services will not function properly.

Third-party disclosure

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when it’s release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.

However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

Google

Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users.

We use Google AdSense Advertising on our website

Google, as a third-party vendor, uses cookies to serve ads on our site. Google’s use of the DART cookie enables it to serve ads to our users based on previous visits to our site and other sites on the Internet. Users may opt-out of the use of the DART cookie by visiting the Google Ad and Content Network privacy policy.

We have implemented the following:

Remarketing with Google AdSense
Google Display Network Impression Reporting
Demographics and Interests Reporting

We along with third-party vendors, such as Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website.

Opting out

Users can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising initiative opt out page or permanently using the Google Analytics Opt Out Browser add on.

What should I do if I have a complaint about the processing of my personal data?

If you have any complaint about the way in which your personal data has been dealt with, please let us know by e-mail toinfo@epic-yachts.com . We will investigate and respond to you as soon as we reasonably can.

Does our site allow third-party behavioral tracking?

It’s also important to note that we allow third-party behavioral tracking.

COPPA (Children Online Privacy Protection Act)

When it comes to the collection of personal information from children under 13, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the nation’s consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online. We do not specifically market to children under 13.

Contacting Us

If there are any questions regarding this privacy policy you may contact us using the information below.

www.epic-yachts.com