Last updated: 2 September 2026
SeaScape Boats respects your privacy. This Privacy Policy explains what personal data we collect when you visit seascape-boats.com (the “Site”), book a boat or a tour with us, or contact us, why we collect it, how long we keep it, who we share it with, and what rights you have over it.
We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Greek data protection law (Law 4624/2019).
1. Who is responsible for your data
The data controller is:
- Trading name: SeaScape Boats
- Owner: Aggelos Kourtelesis
- Address: Paleokastritsa, Corfu, Greece
- Email: seascapeboatrental@gmail.com
- Telephone: +30 698 170 6369
If you have any question about this policy or about your personal data, write to us at seascapeboatrental@gmail.com and we will answer you directly.
2. What personal data we collect
2.1 Data you give us when you book
To create and honour a booking, we collect:
- Full name of the person making the booking
- Email address
- Telephone number
- Country of residence
- Booking details: boat or tour selected, date, time slot, number of passengers, and the names or ages of passengers where these are needed for safety and equipment
- Any special requests, notes, or accessibility information you choose to tell us
- Payment information for the deposit, processed by our payment provider (see section 2.4)
For self-drive rentals we also check identification documents at the meeting point, as required for the safe and lawful handover of the boat. We view and verify these documents; we do not photocopy or store them unless a specific legal obligation requires it.
2.2 Data you give us when you contact us
If you email us, call us, use a contact form, or message us on social media or a messaging app, we receive whatever you send: your name, your contact details, and the content of your message.
2.3 Data collected automatically when you browse
Like most websites, our Site records limited technical data when you visit:
- IP address (in some cases shortened or anonymised)
- Browser type and version, device type, and operating system
- Pages viewed, time on page, and the site or search that referred you
- Date and time of the visit
- Cookie and similar identifiers (see section 7)
2.4 Payment data
Deposit payments are handled by a third party payment provider. Card numbers and full payment credentials are entered directly into the provider’s secure environment. We never see or store your full card details. We receive only confirmation of payment, the amount, the date, and a transaction reference.
Our payment provider: Viva Payments, Revolut, Paypal,Stripe
2.5 Reviews and photographs
If you leave a review, or if you send us photographs or agree to appear in photographs or video taken during a trip, we process that content as described in section 4.5.
We do not knowingly collect personal data directly from children. Bookings are made by adults, who provide passenger details, including the number and ages of children, on behalf of their group.
3. Why we process your data, and on what legal basis
| What we do | Why | Legal basis (GDPR) |
|---|---|---|
| Take and manage your booking, send confirmations, prepare the boat, run the trip, take the balance payment | To provide the service you booked | Performance of a contract, Art. 6(1)(b) |
| Answer your enquiries before booking | To respond to your request | Performance of a contract or pre-contractual steps, Art. 6(1)(b), and legitimate interest, Art. 6(1)(f) |
| Contact you about weather changes, timing changes, or safety information for your trip | To operate safely and keep you informed | Performance of a contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c) |
| Keep records of bookings, payments, and invoices | To meet Greek tax and accounting obligations | Legal obligation, Art. 6(1)(c) |
| Handle incidents, damage, insurance claims, or disputes | To protect our legal position and to comply with maritime and insurance requirements | Legal obligation, Art. 6(1)(c), and legitimate interest, Art. 6(1)(f) |
| Understand how the Site is used and improve it | To keep the Site working well and relevant | Consent for analytics cookies, Art. 6(1)(a), or legitimate interest for strictly technical logs, Art. 6(1)(f) |
| Send marketing emails or offers, if you sign up | To keep you informed about our trips | Consent, Art. 6(1)(a) |
| Publish your review, or use photographs in which you appear | To present our service honestly | Consent, Art. 6(1)(a) |
You can withdraw consent at any time. Withdrawal does not affect processing that already took place before you withdrew.
Where you tell us about a health condition, mobility limitation, or requirement that affects participation, we treat that information as sensitive. We use it only to advise you honestly on suitability and to run the trip safely, we share it only with the skipper or staff who need it, and we delete it after your trip unless an incident requires us to keep it.
4. Who we share your data with
We do not sell your personal data, and we do not share it for other companies’ marketing.
We share data only with the following categories of recipient, and only to the extent needed:
4.1 Service providers that run our systems
- Our website hosting and e-commerce platform: cloud hosting, wordpress, & custom platform.
- Our online booking system, which stores your booking details
- Our payment provider (see section 2.4)
- Our email provider, for confirmations and correspondence
- Our website analytics provider, where you consent to analytics cookies: Google Analytics 4.
These providers act as data processors on our instructions, under contracts that require them to protect your data and use it only for the services they provide to us.
4.2 Our own team
Our skipper and staff receive the operational details of your trip: name, contact number, time, number of passengers, and any safety-relevant note.
4.3 Authorities and insurers
We may pass data to the port authority, the coastguard, our insurer, or our accountant where an incident, an inspection, an insurance claim, or a tax obligation requires it.
4.4 Legal advisers
If a dispute arises, we may share the relevant records with our legal advisers.
4.5 Reviews and photographs
Reviews you write are published with the name or initials you provide. Photographs or video in which you are recognisable are published only where you have agreed to it. If you change your mind, tell us and we will remove the content from our own channels as far as it is within our control.
5. International transfers
We keep your data inside the European Economic Area wherever we can. Some of our providers, particularly platform, email, and analytics services, may process data outside the EEA, including in the United States. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses, an adequacy decision, or another safeguard permitted under Chapter V of the GDPR.
You can ask us for details of the safeguards that apply to a particular provider.
6. How long we keep your data
- Booking and customer records: for the duration of the booking and then as required by Greek tax and accounting law, which in practice means invoices and payment records are kept for 5 years under Greek accounting rules.
- Enquiries that did not lead to a booking: up to 12 months, then deleted.
- Health or accessibility information given for a specific trip: deleted after the trip, unless an incident report requires otherwise.
- Incident, damage, and insurance records: for as long as a claim or a legal action can still be brought.
- Marketing subscriptions: until you unsubscribe, and for a short period afterwards to record that you unsubscribed.
- Website analytics data: for the retention period set in our analytics tool, typically up to 14 months.
- Reviews and published photographs: until you ask us to remove them.
When a retention period ends, we delete the data or anonymise it so that it can no longer identify you.
7. Cookies and similar technologies
Cookies are small files stored on your device when you visit a website. We use:
- Strictly necessary cookies. These make the Site work: your session, the contents of your booking, security, and load balancing. They cannot be switched off.
- Functional cookies. These remember choices such as language or currency.
- Analytics cookies. These help us understand which pages people read and where they arrive from, in aggregate. They are set only if you accept them.
- Marketing cookies. These may be used to measure advertising or to show relevant ads on other platforms. They are set only if you accept them.
On your first visit, our cookie banner asks for your choice. You can change or withdraw it at any time through the cookie settings link on the Site, and you can delete or block cookies in your browser settings. Blocking strictly necessary cookies may stop the booking system from working.
8. Marketing communications
We send marketing emails only to people who have asked for them. Every marketing email carries an unsubscribe link, and unsubscribing takes effect immediately.
Transactional messages about a booking you have made, such as confirmations, weather changes, meeting point details, or balance reminders, are part of the service and are not marketing.
9. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you, and receive a copy
- Rectify data that is inaccurate or incomplete
- Erase your data, where there is no overriding legal obligation for us to keep it
- Restrict processing in certain circumstances
- Object to processing based on our legitimate interests, and to direct marketing at any time
- Data portability: receive the data you gave us in a structured, commonly used, machine readable format, and have it sent to another controller where technically feasible
- Withdraw consent at any time, where processing is based on consent
- Not be subject to decisions based solely on automated processing. We do not carry out automated decision making or profiling with legal or similarly significant effects.
To exercise any of these rights, email seascapeboatrental@gmail.com. We answer within one month. If your request is complex, we may extend that by two further months and will tell you why. We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else.
Exercising your rights is free. We may charge a reasonable fee, or refuse, only where a request is manifestly unfounded or excessive.
10. Complaints
If you believe we have handled your data incorrectly, please contact us first at seascapeboatrental@gmail.com. We would rather fix a problem directly.
You also have the right to complain to the Greek supervisory authority:
Hellenic Data Protection Authority (ฮฯฯฮฎ ฮ ฯฮฟฯฯฮฑฯฮฏฮฑฯ ฮฮตฮดฮฟฮผฮญฮฝฯฮฝ ฮ ฯฮฟฯฯฯฮนฮบฮฟฯ ฮงฮฑฯฮฑฮบฯฮฎฯฮฑ) Kifissias Avenue 1-3, 115 23 Athens, Greece Telephone: +30 210 6475600 Website: https://www.dpa.gr
If you live in another EU country, you may also complain to your local supervisory authority.
11. Security
We take reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS) across the Site and the booking system, access limited to the people who need it, reputable providers for hosting and payments, and payment processing that keeps card details out of our own systems.
No online service can promise perfect security, but if a data breach ever occurred that posed a risk to your rights, we would notify the Hellenic Data Protection Authority within 72 hours and inform you directly where the law requires it.
12. Links to other websites
Our Site links to other websites, maps, and social media pages. This policy does not cover them. When you follow a link, read that site’s own privacy policy.
13. Changes to this policy
We may update this Privacy Policy when our services, our providers, or the law change. The current version is always published on this page, with the “Last updated” date at the top. If a change materially affects how we use your data, we will tell you directly where we can.
14. Contact
SeaScape Boats Paleokastritsa, Corfu, Greece Email: seascapeboatrental@gmail.com Telephone: +30 698 170 6369 Website: https://seascape-boats.com