Last updated: 20 October 2026
This policy explains how Nerian Yachts collects and uses personal data when you visit nerianyachts.com, send us an enquiry, download a brochure or contact us. We process personal data in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), Greek Law 4624/2019, and Greek Law 3471/2006 on electronic communications, which governs cookies.
1. Who is responsible for your data
The data controller is NERIANPAY MONOPROSOPI I.K.E. (NERIANPAY ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε.), a single-member private company trading as Nerian Yachts, with its registered office at Agiou Georgiou 14, 46100 Igoumenitsa, Thesprotia, Greece. General Commercial Registry (GEMI) no. 173843528000, VAT no. (ΑΦΜ) 802296209.
For any question about your data or to exercise your rights, contact us at info@nerianyachts.com or +30 693 669 6096. We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR.
2. What we collect and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| You send an enquiry | First and last name, email, phone (optional), the model you are interested in, the type of request (information, viewing, sea trial), preferred date, your message, the page you sent it from, and the date and time you gave consent | To answer you, arrange a viewing or sea trial and prepare a specification or offer | Steps taken at your request before a contract (Art. 6(1)(b) GDPR) |
| You download a brochure | Name, email, phone (optional), which brochure, date and time of consent | To send you the brochure and follow up on your interest in that model | Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
| You email, call or message us on WhatsApp | Your contact details and what you tell us | To reply and handle your request | Steps at your request (Art. 6(1)(b)) or our legitimate interest in answering (Art. 6(1)(f)) |
| You become a customer | Identification, contact, contract and invoicing details | To perform the sale, delivery and after-sales service, and to keep accounting and tax records | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
| Any visit | IP address and technical request data, processed by our servers and kept briefly in security logs; a short-lived record of your IP address (one hour) to limit repeated form submissions and login attempts | To run the website securely and prevent spam and abuse | Our legitimate interest in a secure website (Art. 6(1)(f)) |
| Only if you click “Accept” on the cookie banner | Analytics and advertising cookies (see section 6) | To measure how the site is used and how our advertising performs | Your consent (Art. 6(1)(a) GDPR and Art. 4(5) of Law 3471/2006) |
Providing your data is voluntary, but without a name and email address we cannot reply to an enquiry or send a brochure. We do not make decisions about you based solely on automated processing.
3. Who receives your data
- Our hosting and email provider (Hostinger), which stores the website, its database and our mailboxes on our behalf under a data processing agreement.
- Google (Google Analytics, via the Site Kit plugin) and Meta (Meta Pixel), only if you accept analytics and advertising cookies.
- WhatsApp (Meta), if you choose to contact us on WhatsApp. WhatsApp’s own privacy policy applies to that service.
- Our accountants, lawyers and public authorities, where required by law or to establish, exercise or defend legal claims.
We do not share your enquiry or brochure request with SKIPPER, Stratos or any other company, and we never sell or rent personal data. If you go on to buy a boat, we pass to the shipyard only the details needed to build, register and deliver it.
4. Transfers outside the EU
Google and Meta may process data in the United States. Both participate in the EU–U.S. Data Privacy Framework, which the European Commission has recognised as providing adequate protection, and also use the Commission’s Standard Contractual Clauses. These transfers happen only if you accept analytics or advertising cookies, or choose to use WhatsApp.
5. How long we keep it
- Enquiries and correspondence: 24 months after our last contact, unless you become a customer.
- Brochure downloads: 24 months, or until you withdraw your consent if sooner.
- Customer, contract and invoicing records: for as long as Greek tax and accounting law requires (generally five years from the end of the tax year, longer in specific cases), and as needed for warranty and legal claims.
- Security data: the anti-spam IP record is deleted after one hour; server logs are kept for a short period by our hosting provider.
- Analytics data: up to 14 months in Google Analytics.
6. Cookies and similar technologies
Strictly necessary. The website remembers your cookie choice and whether you have already downloaded a brochure using your browser’s local storage (items nye_consent and nye_unlocked), and a cookie wc_facebook_signals_state records whether Meta measurement is on hold until you choose. These are needed for the features you use and do not require consent. Fonts are served from our own server, so no font provider receives your data.
Analytics and advertising (only with your consent). If you click “Accept”, we use Google Analytics to understand how visitors use the site, and the Meta Pixel to measure our advertising on Facebook and Instagram. With your consent, the same events (for example a page view or an enquiry) are also sent to Meta from our server through Meta’s Conversions API, so that they are measured reliably. These set cookies such as _ga / _ga_* (Google, up to 2 years) and _fbp (Meta, up to 3 months). They record pages viewed, the device and browser used, approximate location and actions such as sending an enquiry or downloading a brochure. Until you choose, Google’s consent mode is set to “denied”, so no analytics or advertising cookies are stored.
You can change your choice at any time using the Cookie settings link in the website footer, or by clearing cookies in your browser. Declining does not affect how the site works.
7. Your rights
Under Articles 15–22 GDPR you have the right to:
- access the personal data we hold about you and receive a copy
- have inaccurate data corrected
- have your data erased
- restrict how we process it
- receive your data in a portable format
- object to processing based on our legitimate interests, and to direct marketing at any time
- withdraw consent at any time, without affecting processing carried out before withdrawal
To exercise any right, email info@nerianyachts.com. We will reply within one month, as GDPR requires. We may ask you to confirm your identity first.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), 1–3 Kifisias Ave., 115 23 Athens, tel. +30 210 6475600, contact@dpa.gr, www.dpa.gr. We would appreciate the chance to resolve your concern first.
8. Security
The website uses encrypted connections (HTTPS). Enquiries are stored in a restricted area of our website that only authorised staff can access. We use login protection and keep our software up to date. No method of transmission over the internet is completely secure, but we take appropriate technical and organisational measures to protect your data.
9. Children
Our website and services are intended for adults. We do not knowingly collect personal data from anyone under 15, the age of digital consent in Greece under Law 4624/2019.
10. Changes to this policy
We may update this policy, for example when we add new services or tools. The date at the top always shows the latest version. If a change significantly affects how we use data you have already given us, we will tell you directly.