Privacy Policy

1. Who Processes Your Data

The controller of your personal data is Tivat Yacht Club yacht club, Montenegro, Tivat, Porto Montenegro Marina. You can contact us by phone at +382 67 747 279 or by email at info@tivatyachtclub.ru.

We process data in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Montenegrin Law on Personal Data Protection.

2. Data We Collect

• Contact details: name, phone number and email address. You provide these when completing a form or making a booking.
• Booking details: departure date and time, selected boat, number of guests and comments included with the request.
• Technical data: IP address, device and browser type, and pages viewed. These are collected automatically using cookies.

We do not collect special categories of data, such as information about health, religious or political beliefs, or ethnic origin.

3. Purposes and Legal Bases

• Processing requests and bookings and communicating about an order. Legal basis: performance of a contract, Article 6(1)(b) GDPR.
• Responding to questions and enquiries. Legal basis: legitimate interest, Article 6(1)(f) GDPR.
• Analysing website traffic and improving the website. Legal basis: your consent, Article 6(1)(a) GDPR.
• Accounting and tax records. Legal basis: legal obligation, Article 6(1)(c) GDPR.

4. Retention Periods

• Requests that do not become bookings: 12 months.
• Completed bookings: for the period required by accounting regulations.
• Analytics data: up to 24 months or until consent is withdrawn.

5. Who Receives Your Data

Access is provided to employees who need it for their work and to contractors providing hosting, email delivery and payment processing. They act on our instructions and are bound by confidentiality obligations. We do not sell personal data.

6. Transfers Outside the EEA

If a contractor is located outside the European Economic Area, data is transferred under the European Commission's Standard Contractual Clauses or an adequacy decision.

7. Your Rights

• access your data and receive a copy;
• correct inaccurate data;
• request deletion;
• restrict processing;
• receive your data in a machine-readable format and transfer it to another controller;
• object to processing based on legitimate interest;
• withdraw consent at any time without affecting the lawfulness of processing before withdrawal;
• lodge a complaint with a supervisory authority. In Montenegro, this is the Agency for Personal Data Protection and Free Access to Information.

To exercise your rights, email info@tivatyachtclub.ru. We will respond within 30 days.

8. Cookies

The website uses cookies. See the Cookie Policy for details.

9. Security

We use technical and organisational safeguards, including connection encryption, restricted access to data and regular software updates.

10. Changes to This Policy

We may update this Policy. The current version is always available on this page.