Privacy Policy

Privacy Policy

This policy explains how personal data is handled when you use this website and submit a charter enquiry for the motor yacht Pangea. We keep data collection to the minimum needed to answer your enquiry.

1. Who is responsible (the controller)

The controller responsible for the processing of your personal data on this website is Pangea Yachting k.d., Tolstojeva 41, 21000 Split, Croatia. The operator's full legal name, registered address and representative are set out in our Imprint. For any privacy-related request, please contact booking@pangea-charter.com.

2. What data we collect

We collect personal data only when you choose to send us a charter enquiry through the enquiry form on this site. Depending on what you fill in, this may include:

• your name;
• your email address;
• your phone or WhatsApp number (optional);
• your preferred charter month;
• the number of guests;
• any message or details you choose to include.

You do not need to create an account, and we do not ask for any data beyond what is needed to respond to your enquiry.

3. Why we use it & the legal basis

We use the data you submit solely to respond to your charter enquiry, to answer your questions, and to take steps at your request prior to entering into a possible charter agreement.

• Art. 6(1)(b) GDPR — processing necessary to take steps at your request before entering into a contract, and to communicate with you about a possible charter.
• Art. 6(1)(f) GDPR — our legitimate interest in responding to enquiries, operating our charter business, and keeping a record of correspondence.

4. How long we keep it

We keep your enquiry data only for as long as needed to handle your enquiry and any resulting correspondence or booking, and thereafter for as long as required to meet legal retention obligations or to defend legal claims. When the data is no longer needed for these purposes, it is deleted. If your enquiry does not lead to a charter, we delete or anonymise your contact details once it is clear there will be no further correspondence.

5. Who can access your data (recipients & processors)

Your enquiry is received and read by the charter operator. To run this website and deliver enquiries, we rely on a small number of service providers acting as processors on our behalf, under appropriate data-processing agreements:

• our website hosting and content-delivery provider, which serves this site and routes your enquiry to us;
• our self-hosted, cookieless analytics, used to understand aggregate site usage.

A full, up-to-date list of processors is available on request from the contact address above.

We do not sell your data and do not share it with third parties for advertising.

6. International transfers

Some of our service providers may process data outside your home country, including outside the European Economic Area. Where this happens, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision, in line with Chapter V of the GDPR.

Providing a phone or WhatsApp number is entirely voluntary. If you give us a WhatsApp number and we use it to reply, this may involve transferring that number to the messaging provider, which may process the data outside the European Economic Area. We do this only on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time; you can also simply ask us to reply by email instead.

7. Cookies & analytics

This website uses no tracking or advertising cookies. Our analytics is self-hosted and cookieless: it measures aggregate, anonymised usage (such as page views) and neither sets nor reads anything on your device, nor builds a profile of you. Webfonts are served from this site rather than a third-party CDN, so loading the page does not disclose your IP address to any external font provider. Because the site sets no non-essential cookies or similar technologies, no cookie-consent banner is required. Should we ever introduce any non-essential cookies or comparable tracking technology, we will add a consent banner before doing so.

8. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data erased;
• restrict or object to processing based on our legitimate interests;
• receive your data in a portable format (data portability);
• where processing is based on your consent, withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• lodge a complaint with the competent data-protection supervisory authority.

To exercise any of these rights, contact us at booking@pangea-charter.com. You also have the right to lodge a complaint with the competent data-protection supervisory authority — for the operator this is the Croatian Personal Data Protection Agency (AZOP, azop.hr) — in particular in the EU/EEA member state of your residence, place of work, or where you believe an infringement has occurred.

9. Automated decisions, security & further information

No automated decision-making. We do not use your data for automated decision-making or profiling within the meaning of Art. 22 GDPR.

Security of processing. We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, in line with Art. 32 GDPR.

Children. This website is not directed at, and not intended for, children under the age of 16, and we do not knowingly collect their data.

Source of the data. The personal data we process is collected directly from you, through the enquiry form on this site.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The current version always applies to data we process from the date it is published.

For the operator's legal details, see our Imprint.

Last updated: 7 July 2026