Last updated: [30 September 2026]

This Privacy Policy explains how ΑΡΜΟΥΤΑΚΗΣ ΓΚΥ ΜΙΧΑΗΛ (“Marina Pilot”, “we”, “us”, “our”) collects, uses and protects your personal data when you visit marinapilot.gr (the “Website”) or use our services. We process personal data in line with the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek Law 4624/2019.

1. Data Controller

ΑΡΜΟΥΤΑΚΗΣ ΓΚΥ ΜΙΧΑΗΛ
Address: ΜΙΑΜΟΥ, 70400
VAT No.: 103821996 ΗΡΑΚΛΕΙΟΥ
Email: [[email protected]]
Phone: (+30) 6986791079

2. What Personal Data We Collect

a) Data you give us directly

Contact and inquiry forms: name, email address, phone number, and the content of your message.
Service requests / bookings: name, contact details, vessel details (e.g. vessel name, type, length, flag), requested dates and services, and any other information you give us.
Account / client area (if applicable): username, password (stored encrypted), and your history of requests and services.
Invoicing: company name, VAT number, tax office and billing address.
Newsletter (if applicable): email address and your consent record.

b) Data collected automatically

Technical data: IP address, browser type and version, device type, operating system, pages visited, and date and time of access.
Cookies and similar technologies: see Section 8.

We don’t knowingly collect special categories of personal data (Art. 9 GDPR), and we don’t knowingly collect data from children under 18.

3. Why We Use Your Data and Our Legal Basis

Where we rely on your consent, you can withdraw it at any time. Withdrawing consent doesn’t affect processing that took place before you withdrew it.

4. Who We Share Your Data With

We don’t sell or rent your personal data. We share it only with the following recipients, and only as far as each one needs it:

• Hosting and IT providers that host and maintain the Website: [Hosting provider / Wedoo Digital Agency].
• Accountants and tax advisors, for invoicing and legal compliance.
• Email and communication service providers.
• Google LLC, for Google Maps and, where you consent, Google Analytics.
• Public authorities, where the law requires it (e.g. tax, port or coast guard authorities).

All processors act on our instructions and are bound by data processing agreements under Art. 28 GDPR.

5. International Transfers

Some providers (e.g. Google) may process data outside the European Economic Area. Where this happens, we make sure appropriate safeguards are in place, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. How Long We Keep Your Data

• Inquiries: up to [24] months after our last communication, unless they lead to a contract.
• Client and contract data: for the length of our business relationship, and then for as long as needed to establish, exercise or defend legal claims.
• Invoicing and accounting records: for the period required by Greek tax legislation.
• Newsletter data: until you unsubscribe.
• Server logs: up to [6] months.

When a retention period ends, we delete or anonymise the data.

7. Your Rights

Under the GDPR, you have the right to:

• access your personal data;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”);
• restrict processing;
• data portability;
• object to processing based on legitimate interest or used for direct marketing;
• withdraw consent at any time.

To exercise any of these rights, email us at [[email protected]]. We’ll reply within one month. We may ask you to confirm your identity first.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifissias Ave., 115 23 Athens, Greece. Website: www.dpa.gr, email: [email protected].

8. Cookies

The Website uses:

• Strictly necessary cookies, which the Website needs to work (e.g. security, session and saving your cookie preferences). These don’t require consent.
• Analytics cookies (e.g. Google Analytics), which help us understand how visitors use the Website. We set these only with your consent.
• Third-party content, such as embedded Google Maps, which may set its own cookies.

You can accept, reject or change your cookie preferences at any time through the cookie banner/settings on the Website, or through your browser settings.

9. Security

We use appropriate technical and organisational measures to protect your data. These include SSL/TLS encryption, access controls, regular backups and software updates. However, no method of transmission over the internet is completely secure.

10. Third-Party Links

The Website may contain links to other websites. We’re not responsible for their privacy practices, and we encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, with the “Last updated” date shown at the top.

12. Contact

For any questions about this Privacy Policy or how we process your data, contact us at [[email protected]] or at the address in Section 1.