Privacy Policy

We may collect and process the following personal data: • Information you voluntarily provide via website forms (including name, email address, phone number and message). • Technical and usage data related to your interaction with our website (such as IP address, browser type, pages visited and approximate location). • Data collected through cookies and similar technologies. We do not knowingly collect or process any special categories of personal data (sensitive data) as defined in Article 9 of the GDPR (e.g., data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, etc.). We kindly ask you not to submit such information through our Website.

Your personal data is processed strictly for the following purposes: • To respond to your inquiries, provide requested information, and communicate with you. • To manage, operate, and improve the performance, security, and functionality of our Website. • To analyze Website usage and trends to enhance user experience. • To protect our legitimate business interests and ensure the quality of our services. We do not sell, rent, or trade your personal data to third parties. We do not engage in automated decision-making or profiling based on your personal data.

Processing is carried out on the basis of: • Legitimate interests (Article 6(1)(f) GDPR), where processing is necessary to respond to inquiries, communicate with potential clients and improve our website. • Consent (Article 6(1)(a) GDPR), where required by law, including for certain cookies. Further details on cookies are provided in a separate Cookies Policy.

SIMARE may engage carefully selected third-party service providers (data processors) to support website hosting, analytics and communication services. All our data processors are carefully selected and are bound by written agreements that require them to process data only on our instructions, in compliance with GDPR, and to implement appropriate security measures. We may also disclose your data if required by law or to protect our legal rights.

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), such as the United States, where our service providers are located. We ensure that any such transfer is conducted with appropriate safeguards in place, such as: • EU Standard Contractual Clauses approved by the European Commission, or • Transfers to countries deemed by the European Commission to provide an adequate level of data protection.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specific retention periods are based on the nature of the data and the purpose of processing. For example, inquiry data is typically retained for 24 months unless a longer retention period is required by law.

If you are located in the EEA, you have the following rights regarding your personal data: • Right of Access: To request a copy of your personal data we hold. • Right to Rectification: To request correction of inaccurate or incomplete data. • Right to Erasure ("Right to be Forgotten"): To request deletion of your data under certain circumstances. • Right to Restriction of Processing: To request limitation of how we use your data. • Right to Data Portability: To receive your data in a structured, machine-readable format. • Right to Object: To object to processing based on legitimate interests. • Right to Withdraw Consent: To withdraw your consent at any time, where processing is based on consent. To exercise any of these rights, please contact us using the details in Section 9. We will respond to your request free of charge and within one month of receipt, subject to any legal extensions or exceptions. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or with the supervisory authority in your country of residence.

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption (HTTPS/SSL), access controls, and secure server infrastructure.

For any privacy-related questions or to exercise your rights, please contact: Email: info@simareyachting.com You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.