We are pleased that you are interested in our website www.sailing-allegra.com Protecting your privacy is very important to us. Below we will inform you in detail about how your data is handled.

We only process personal data (hereinafter referred to as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4, Paragraph 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” is considered to be any process carried out with or without the help of automated processes or any series of processes carried out in this context with personal data, such as collecting, recording, organizing, arranging, storing, adapting or changing, reading, querying, using, disclosing by transmission, dissemination or any other form of provision, comparison or linking, restricting, deleting or destroying.

With the following data protection declaration we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or jointly with others. We will also inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.

Our data protection declaration is structured as follows:

Information about us as controllers

II. Rights of users and those affected

III. Information on data processing

Information about us as controllers and the processing of personal data

The responsible provider of this website in terms of data protection law is:

Val Mora Yachting d.o.o

Trtrarska 75 A ,22000 Sibenik, HR

VAT No. HR22821230685Telephone: +43(0)69913322500

Email: info@theyachtcompany.com

Processing your order/enquiry

a) Information in accordance with Art. 13 GDPR

Your personal data, in particular

Your master data (last name, first name, address, email address, telephone number)

the data in travel documents (passport number, passport details, date of birth, issuing authority, duration)

the data on the payment method and in connection with payments

the destinations, hotels, length of stay, contact persons, conditions, special services, health data, frequent flyer number

special categories of data such as health data, special needs data and marriage/partnership data

are required for our services. This includes in particular bookings of trips, guides, coches, hotels, yachts, ships, restaurants, transfers, insurance, vouchers including customer investment, billing and their verification, etc.

We therefore store, process and, if necessary, transmit this data to third parties for these purposes – including service providers in third countries as processors for travel bookings, software and agency services.

b) Legal basis for data processing processing your order/enquiry

The legal basis for the data processing processes is the fulfillment of our pre-contractual and contractual obligations between you and Val Mora Yachting. If the data you require is not provided, the order cannot be processed.

The duration of storage is determined by the duration of our business relationship, the consent you have given, and the statutory retention requirements and legal obligations that apply to us. We emphasize that in the case of regular cooperation to provide the best possible customer service, we strive to know the customer requests you have already communicated to us so well that we can satisfy you on an ongoing and long-term basis.

Rights of users and those affected

With regard to the data processing described in more detail below, users and those affected have the right

for confirmation as to whether data concerning you is being processed, for information about the data processed, for further information about data processing and for copies of the data (see also Art. 15 GDPR);

to correct or complete incorrect or incomplete data (see also Art. 16 GDPR);

to the immediate deletion of the data concerning you (see also Art. 17 GDPR), or, alternatively, to the extent that further processing is necessary in accordance with Art. 17 Para. 3 GDPR, to restriction of processing in accordance with Art. 18 GDPR;

to receive the data concerning you and provided by you and to transmit this data to other providers/responsible parties (see also Art. 20 GDPR);

to complain to the supervisory authority if you are of the opinion that the data concerning you is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or the restriction of processing that takes place on the basis of Articles 16, 17 Paragraph 1, 18 GDPR teach. However, this obligation does not apply if this notification is impossible or involves disproportionate effort. Without prejudice to this, the user has the right to information about these recipients.

According to Article 21 of the GDPR, users and those affected also have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Article 6 (1) (f) of the GDPR. In particular, an objection to data processing for the purpose of direct advertising is permitted.

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data does not conflict with any legal retention obligations and no different information is subsequently provided about individual processing procedures.

Cookie Manager

To obtain consent for the use of technically unnecessary cookies on the website, the provider uses a cookie manager.

When the website is accessed, a cookie with the settings information is stored on the user’s device so that consent does not have to be asked on a subsequent visit.

The cookie is required to obtain legally compliant consent from the user.

The user can prevent or stop the installation of cookies through the settings of their browser.

Cookies

a) Session cookies/session cookies

We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored and stored on your device by the Internet browser you use. These cookies process certain information about you on an individual basis, such as your browser or location data or your IP address.

This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offering of a shopping cart function.

The legal basis for this processing is Art. 6 Para. 1 lit b.) GDPR, provided that these cookies data are processed for the purpose of initiating or executing a contract.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6 Paragraph 1 Letter f) GDPR.

When you close your internet browser, these session cookies are deleted.

b) Third-party cookies

Our website may also use cookies from partner companies with whom we work for the purposes of advertising, analysis or the functionality of our website.

Please see the information below for details, in particular the purposes and legal basis for processing such third-party cookies.

c) Possibility of elimination

You can prevent or restrict the installation of cookies by setting your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you use. If you have any questions, please use the help function or documentation of your Internet browser or contact the manufacturer or support. However, with so-called Flash cookies, the processing cannot be prevented via the browser settings. Instead, you have to change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support.

However, if you prevent or restrict the installation of cookies, this may result in not all functions of our website being fully usable.

Newsletter

If you register for our free newsletter, the data requested from you, i.e. your email address and – optionally – your name and address, will be transmitted to us. At the same time, we store the IP address of the Internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to send the newsletter, describe the content specifically and refer you to this data protection declaration. We use the data collected exclusively for sending newsletters – which is why they are not passed on to third parties.

The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR.

You can revoke your consent to receive the newsletter at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation or click on the unsubscribe link contained in every newsletter.

Server data

For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted to us or our web space provider through your Internet browser. These so-called server log files contain, among other things, the type and version of your internet browser, the operating system, the website from which you switched to our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the Internet connection from which our website is used.

The data collected in this way will be stored temporarily, but not together with other data about you.

This storage takes place on the legal basis of Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted after seven days at the latest, unless further storage is required for evidentiary purposes. Otherwise, the data will be completely or partially excluded from deletion until an incident has been finally clarified.

Facebook

To advertise our products and services and to communicate with interested parties or customers, we maintain a company presence on the Facebook platform.

We are jointly responsible for this social media platform with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Facebook’s data protection officer can be reached via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the resulting processing of personal data and described below is Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in the analysis, communication, sales and promotion of our products and services.

The legal basis can also be the user’s consent to the platform operator in accordance with Article 6 Paragraph 1 Letter a of the GDPR. The user can revoke his consent to this at any time in the future in accordance with Art. 7 Para. 3 GDPR by notifying the platform operator.

When you access our online presence on the Facebook platform, Facebook Ireland Ltd. as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).

This user data serves to provide statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. For example, it is possible to advertise to users within and outside of Facebook based on their interests. If the user is logged into their Facebook account at the time of access, Facebook Ireland Ltd. also link the data to the respective user account.

If the user contacts you via Facebook, the user’s personal data entered on this occasion will be used to process the request. We will delete the user’s data as long as the user’s request has been answered conclusively and there are no legal retention obligations, such as in the event of subsequent contract processing.

To process the data, Facebook Ireland Ltd. Cookies may also be set if necessary.

If the user does not agree to this processing, there is the option of opting out.

Instagram

To advertise our products and services and to communicate with interested parties or customers, we maintain a company presence on the Instagram platform.

We are jointly responsible for this social media platform with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Instagram’s data protection officer can be reached via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the resulting processing of personal data and described below is Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in the analysis, communication, sales and promotion of our products and services.

The legal basis can also be the user’s consent to the platform operator in accordance with Article 6 Paragraph 1 Letter a of the GDPR. The user can revoke his consent to this at any time in the future in accordance with Art. 7 Para. 3 GDPR by notifying the platform operator.

When you access our online presence on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).

This user data serves to provide statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. For example, it is possible to advertise to users within and outside of Instagram based on their interests. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. also link the data to the respective user account.

If the user contacts you via Instagram, the user’s personal data entered on this occasion will be used to process the request. We will delete the user’s data as long as the user’s request has been answered conclusively and there are no legal retention obligations, such as in the event of subsequent contract processing.

To process the data, Facebook Ireland Ltd. Cookies may also be set if necessary.

If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. With Flash cookies, processing cannot be prevented via the browser settings, but rather by setting the Flash player accordingly. If the user prevents or restricts the installation of cookies, this may result in not all of Facebook’s functions being fully usable.

Further information about the processing activities, how to prevent them and how to delete the data processed by Instagram can be found in Instagram’s data policy:

https://help.instagram.com/519522125107875

It cannot be ruled out that processing by Facebook Ireland Ltd. also via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

“Facebook” social plugin

We use the plug-in from the social network Facebook on our website. Facebook is an internet service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in improving the quality of our website.

Facebook provides further information about possible plug-ins and their respective functions at

https://developers.facebook.com/docs/plugins/

ready for you.

If the plug-in is stored on one of the pages of our website you visit, your Internet browser will download a display of the plug-in from Facebook’s servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of the visit to our website are also recorded.

If you are logged in to Facebook while you visit one of our websites with the plug-in, the information collected by the plug-in from your specific visit will be recognized by Facebook. Facebook may assign the information collected in this way to your personal user account there. If, for example, you use the so-called “Like” button on Facebook, this information will be stored in your Facebook user account and, if necessary, published via the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or prevent the Facebook plug-in from being blocked by using an add-on for your internet browser.

Facebook provides further information about the collection and use of data as well as your related rights and protection options in the following

https://www.facebook.com/policy.php

available data protection information.

Google Analytics

We use Google Analytics on our website. This is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.

The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.

Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google shortens the IP address within the EU or EEA.

The data collected in this way is in turn used by Google to provide us with an analysis of visits to our website and usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.

Google states that it does not associate your IP address with other data. In addition, Google is keeping under

https://www.google.com/intl/de/policies/privacy/partners

Further data protection information is available for you, including, for example, the options for preventing data use.

Google also offers under

https://tools.google.com/dlpage/gaoptout?hl=de

a so-called deactivation add-on along with further information about this. This add-on can be installed with common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on tells Google Analytics’ JavaScript (ga.js) that information about visits to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can of course also find out whether and which other web analysis services we use in this data protection declaration.

FontAwesome

Um Schriften und visuelle Elemente unseres Internetauftritts darstellen zu können, setzen wir die externen Schriftarten von FontAwesome ein. Bei FontAwesome handelt es sich um einen Dienst der

Fonticons Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA, nachfolgend nur „FontAwesome“ genannt.

Bei dem Aufruf unseres Internetauftritts wird eine Verbindung zum Server von FontAwesome in den USA aufgebaut, um so die Darstellung von Schriften und visuellen Elemente zu ermöglichen und zu aktualisieren.

Rechtsgrundlage ist Art. 6 Abs. 1 lit. f) DSGVO. Unser berechtigtes Interesse liegt in der Optimierung und dem wirtschaftlichen Betrieb unseres Internetauftritts.

Durch die bei Aufruf unseres Internetauftritts hergestellte Verbindung zum Server von FontAwesome kann FontAwesome ermitteln, von welcher Website Ihre Anfrage gesendet worden ist und an welche IP-Adresse die Darstellung der Schrift zu übermitteln ist.

FontAwesome bietet unter

https://fontawesome.com/privacy

weitere Informationen an und zwar insbesondere zu den Möglichkeiten der Unterbindung der Datennutzung.

Google Fonts

In unserem Internetauftritt setzen wir Google Fonts zur Darstellung externer Schriftarten ein. Es handelt sich hierbei um einen Dienst der Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, nachfolgend nur „Google“ genannt.

Um die Darstellung bestimmter Schriften in unserem Internetauftritt zu ermöglichen, wird bei Aufruf unseres Internetauftritts eine Verbindung zu dem Google-Server in den USA aufgebaut.

Rechtsgrundlage ist Art. 6 Abs. 1 lit. f) DSGVO. Unser berechtigtes Interesse liegt in der Optimierung und dem wirtschaftlichen Betrieb unseres Internetauftritts.

Durch die bei Aufruf unseres Internetauftritts hergestellte Verbindung zu Google kann Google ermitteln, von welcher Website Ihre Anfrage gesendet worden ist und an welche IP-Adresse die Darstellung der Schrift zu übermitteln ist.

Google bietet unter

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

weitere Informationen an und zwar insbesondere zu den Möglichkeiten der Unterbindung der Datennutzung.

Google reCAPTCHA

On our website we use Google reCAPTCHA to check and prevent interactions on our website through automated access, for example by so-called bots. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.

Through this service, Google can determine from which website a request is sent and from which IP address you use the so-called reCAPTCHA input box. In addition to your IP address, Google may also collect other information that is necessary to offer and guarantee this service.

The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the security of our website and in preventing unwanted, automated access in the form of spam or similar.

Google offers under

https://policies.google.com/privacy

further information on the general handling of your user data.

Google Maps

On our website we use Google Maps to display our location and to create directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.

In order to enable the display of certain fonts on our website, a connection is established to the Google server in the USA when our website is accessed.

If you access the Google Maps component integrated into our website, Google stores a cookie on your device via your Internet browser. In order to display our location and create directions, your user settings and data are processed. We cannot rule out that Google uses servers in the USA.

If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in optimizing the functionality of our website.

Through the connection to Google established in this way, Google can determine from which website your request was sent and to which IP address the directions should be sent.

If you do not agree to this processing, you have the option of preventing the installation of cookies by using the appropriate settings in your internet browser. You can find details on this under “Cookies” above.

In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and the Terms and Conditions for Google Maps https://www.google. com/intl/de_de/help/terms_maps.html.

In addition, Google offers at

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

further information.

Vimeo

We use “Vimeo” on our website to display videos. This is a service provided by Vimeo, LL C, 555 West 18th Street, New York, New York 10011, USA, hereinafter referred to as “Vimeo”.

Some of the user data is processed on Vimeo servers in the USA.

If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in improving the quality of our website.

If you visit a page on our website in which a video is embedded, a connection will be established to Vimeo’s servers in the USA to display the video. For technical reasons, it is necessary for Vimeo to process your IP address. In addition, the date and time of the visit to our website are also recorded.

If you are logged in to Vimeo at the same time as you visit one of our websites in which a Vimeo video is embedded, Vimeo may assign the information collected in this way to your personal user account there. If you want to prevent this, you must either log out of Vimeo before visiting our website or configure your Vimeo user account accordingly.

For the purpose of functionality and usage analysis, Vimeo uses the web analysis service Google Analytics. Google Analytics stores cookies on your device via your Internet browser and sends information about the use of our websites, in which a Vimeo video is embedded, to Google. It cannot be ruled out that Google processes this information in the USA.

If you do not agree to this processing, you have the option of preventing the installation of cookies by using the appropriate settings in your internet browser. You can find details on this under “Cookies” above.

The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in improving the quality of our website and in Vimeo’s legitimate interest in statistically analyzing user behavior for optimization and marketing purposes.

Vimeo offers at

http://vimeo.com/privacy

further information on the collection and use of data as well as your rights and options for protecting your privacy.

MailChimp – Newsletter

We offer you the opportunity to register for our free newsletter via our website.

To send newsletters, we use MailChimp, a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as “The Rocket Science Group”.

The Rocket Science Group also offers:

http://mailchimp.com/legal/privacy/

further data protection information.

If you register to receive our newsletter, the data requested during the registration process, such as your email address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address and the date of your registration and time are stored. As part of the further registration process, your consent to sending the newsletter will be obtained, the content will be specifically described and reference will be made to this data protection declaration.

The newsletter subsequently sent via The Rocket Science Group also contains a so-called tracking pixel, also known as a web beacon. With the help of this tracking pixel, we can evaluate whether and when you have read our newsletter and whether you have followed any further links contained in the newsletter. In addition to other technical data, such as the data from your computer system and your IP address, the data processed is stored so that we can optimize our newsletter offer and respond to the wishes of readers. The data is used to increase the quality and attractiveness of our newsletter offering.

The legal basis for sending the newsletter and the analysis is Art. 6 Para. 1 lit. a.) GDPR.

You can revoke your consent to receive the newsletter at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation or click on the unsubscribe link contained in every newsletter.

Newsletter via WhatsApp

You can also receive our free newsletter via the instant messaging service WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA, both hereinafter referred to as “WhatsApp”. Some of the user data is processed on WhatsApp servers in the USA.