Privacy Policy

Last updated: 1 May 2026

1. Data Controller

The data controller responsible for your personal data is:

Rhodes Rent a Boat
Ionos Dragoumi 39, Rhodes 85100, Greece
Email: info@rhodesrentaboat.com
Phone: +30 695 166 6454

2. What Data We Collect

We collect the following personal data when you contact us or use our website:

  • Contact information: name, email address, phone number
  • Enquiry details: dates, group size, service preferences
  • Technical data: IP address, browser type, pages visited, time on site (collected via analytics tools)
  • Communications: emails, WhatsApp messages and other correspondence you send us

3. How We Use Your Data

We use your personal data for the following purposes:

  • To respond to your enquiries and provide the service you have requested
  • To process bookings and send booking confirmations
  • To send relevant follow-up information about your booking
  • To improve our website and services based on aggregate usage data
  • To comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

  • Contract performance (Art. 6(1)(b)): Processing necessary to fulfil your booking or enquiry
  • Legitimate interest (Art. 6(1)(f)): Improving our services and responding to enquiries
  • Legal obligation (Art. 6(1)(c)): Complying with applicable Greek and EU law
  • Consent (Art. 6(1)(a)): Where you have explicitly consented, e.g. for marketing communications

5. Cookies

Our website uses the following types of cookies:

  • Strictly necessary cookies: Required for the website to function. These cannot be disabled.
  • Analytics cookies: We use Google Analytics / Google Tag Manager to understand how visitors use our site. This data is anonymised and aggregated. You can opt out via your browser settings or the Google Analytics opt-out browser add-on.

You can control cookie preferences through your browser settings. Disabling analytics cookies will not affect your ability to use the site.

6. Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers: Third parties who provide IT infrastructure and analytics services (e.g. Supabase, Vercel, Google Analytics) — all bound by data processing agreements
  • Boat operators and skippers: To the extent necessary to fulfil your booking
  • Legal authorities: Where required by applicable law

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes set out in this policy:

  • Enquiry data: 2 years from last contact
  • Booking data: 5 years (required for accounting and legal purposes)
  • Analytics data: 26 months (standard Google Analytics retention)

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data ("right to be forgotten")
  • Right to data portability: Receive your data in a machine-readable format
  • Right to restrict processing: Request that we limit how we use your data
  • Right to object: Object to processing based on legitimate interest
  • Right to withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@rhodesrentaboat.com. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Our website is served over HTTPS and data is stored on secure, encrypted infrastructure.

10. International Transfers

Some of our service providers (e.g. Supabase, Vercel) may process data outside the European Economic Area. Where this occurs, we ensure that adequate safeguards are in place (e.g. Standard Contractual Clauses or adequacy decisions) as required by GDPR Chapter V.

11. Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page shows when it was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this privacy policy or our data practices, contact us at:

Email: info@rhodesrentaboat.com
Phone: +30 695 166 6454
Address: Ionos Dragoumi 39, Rhodes 85100, Greece

Let us help you