Last updated: 24 October 2026
This Privacy Policy explains how personal data is collected and used when you visit boatinsivota.com (the “Website”), a directory of boat rental and cruise companies in Sivota, Thesprotia, Greece. We handle your data in line with the EU General Data Protection Regulation (GDPR) and Greek data protection law.
1. Who is responsible for your data
The data controller is TSOKAS G. WIDEVIEW ENTERTAINMENT L.P., 58 Grigoriou Lampraki, 16675 Glyfada, Greece (VAT EL803334554, GEMI 194800101000).
For any question about your data, write to [email protected].
2. What data we collect and why
Contact form and emails
If you write to us through the contact form or by email, we receive your name, email address and the content of your message. We use it only to answer you. Legal basis: our legitimate interest in replying to your request, or steps taken at your request before a contract.
User accounts
If you create an account, we store your username, email address and a password in encrypted (hashed) form. We use this data to let you log in and manage your listings. Legal basis: performance of the service you asked for.
Listings and reviews
Businesses that submit a listing give us business details such as name, address, phone number, website, opening hours, photos and social media links. These details are shown publicly on the Website, as supplied by the business. If you write a review, the review text and the name you choose are shown publicly. Legal basis: performance of the service you asked for, and your consent for reviews you choose to publish.
Payments
Paid listing plans are paid by card through Stripe. Your card details are entered on Stripe’s secure form and are processed by Stripe. We do not see or store your full card number. We keep the information we need to confirm the payment and to issue invoices, such as the plan bought, the amount, the date and your billing email. Legal basis: performance of the contract and our legal obligations under tax and accounting law.
Analytics and cookies
With your consent, we use Google Analytics 4 (through the Google Site Kit plugin) to understand how the Website is used, for example which pages are visited. This uses cookies and similar technologies. If you do not accept, analytics cookies are not set. You can change your choice at any time from the cookie banner settings. See our Cookie Policy for the full list of cookies.
Security and spam protection
To protect forms and the login from automated abuse, the Website uses spam-protection services such as Cloudflare Turnstile and Google reCAPTCHA. These services may process technical data such as your IP address and browser information. The Website is also served through Cloudflare, which processes IP addresses and request data to deliver pages and block attacks. Legal basis: our legitimate interest in keeping the Website secure.
Server logs
Our hosting server records technical data such as IP address, date and time, requested page and browser type. We use it to keep the Website running and secure.
3. Who receives your data
We share data only with providers that help us run the Website, under agreements that require them to protect it:
- Hosting and server infrastructure.
- Cloudflare (content delivery, security and Turnstile).
- Stripe (card payments).
- Google (Analytics, if you consent, and reCAPTCHA).
- Our email service, used to send and receive messages from the Website.
We do not sell your personal data. Details you publish in a listing or review are visible to every visitor of the Website.
4. Transfers outside the European Economic Area
Some providers, such as Google, Cloudflare and Stripe, may process data outside the EEA. Where this happens, it relies on a valid transfer mechanism, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.
5. How long we keep data
- Messages: for as long as needed to answer you and handle follow-up, and then deleted.
- User accounts and listings: until you ask us to delete them or the account stays inactive for an extended period.
- Payment and invoice records: for the period required by Greek tax and accounting law.
- Analytics data: according to the retention period configured in Google Analytics.
6. Your rights
You have the right to access your data, to correct it, to have it deleted, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time (withdrawal does not affect processing done before). To use any of these rights, write to [email protected]. We reply within one month.
If you believe your data is not handled properly, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
7. Children
The Website is not directed at children under 16, and we do not knowingly collect their data.
8. Third-party websites
Listings link to websites and social media pages of the listed businesses. We are not responsible for their content or privacy practices.
9. Changes to this policy
We may update this policy when the Website or the law changes. The date at the top shows the latest version.