PRIVACY POLICY

Last updated: October 2026

1. Data controller

• Controller: Jordi Fernández López
• Tax ID (NIF): 49286592F
• Address: C/ Eucaliptus 131, 08757 Corbera de Llobregat (Barcelona), Spain
• GDPR contact email: info@seatime.yachts
• Website: seatime.yachts

2. What data do we collect and why?

2.1. Contact and quote request forms

Data: name, email address, phone number, desired date, vessel type, number of passengers and any other data the user voluntarily provides. Purpose: to handle the information or booking request and to manage the resulting commercial relationship. Legal basis: performance of a contract or pre-contractual measures at the data subject’s request (Article 6(1)(b) GDPR). Retention period: for the duration of the commercial relationship and, after it ends, for the applicable statutory limitation periods (generally 5 years).

2.2. Email marketing

Data: name and email address. Purpose: sending commercial communications, offers and SeaTime news. Legal basis: the data subject’s consent (Article 6(1)(a) GDPR). Retention period: until the user withdraws consent. How to unsubscribe: the user may withdraw consent at any time by clicking the unsubscribe link in any communication or by sending an email to info@seatime.yachts.

2.3. Analytics tools and CRM

Customer data may be processed through the Maradigma CRM solely for the purpose of managing bookings and the client relationship. Maradigma acts as a data processor under a contract providing the guarantees required by the GDPR.

3. Who do we share data with?

SeaTime does not sell or transfer personal data to third parties, except:

• Nautical partners: data necessary for the execution of the booking (name, contact phone number) is shared with the partner responsible for the vessel, exclusively for operational purposes.
• Data processors: technology service providers acting under contract and under SeaTime’s strict instructions (Maradigma CRM, email marketing platform, Redsys for payment processing).
• Legal obligation: when required by a competent authority under applicable law.

4. International data transfers

Some tools used (including the web analytics tools described in the Cookie Policy) may involve transfers of data to third countries. In each case, SeaTime ensures that such transfers are carried out with appropriate safeguards under the GDPR (standard contractual clauses, European Commission adequacy decision or other valid mechanisms).

5. Data subject rights

The user may exercise the following rights at any time by submitting a written request to info@seatime.yachts, enclosing a copy of their identity document:

• Access: to know what data SeaTime holds about them.
• Rectification: to correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”): to request deletion of data where it is no longer necessary, among other grounds.
• Objection: to object to the processing of their data.
• Restriction of processing: to request that processing be restricted in certain circumstances.
• Portability: to receive data in a structured, commonly used format.
• Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

SeaTime will respond within a maximum of one month from receipt of the request.

The user also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es — if they consider that the processing of their data does not comply with the GDPR.

6. Data security

SeaTime implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. Payment data is processed exclusively by the Redsys gateway, which holds PCI DSS certification. SeaTime does not store full bank card data under any circumstances.