Privacy Policy

What personal data do we collect?

• Name, phone, email, address
• Boat/vehicle details linked to you (e.g. ownership info for transfers)
• Payment details (handled securely via payment provider)
• Messages or inquiries you send us
• Website usage data via Google Analytics (cookies)

We do not collect unnecessary or sensitive data unless required by law (e.g. for boat registration).

Why do we process your data?

• To perform contracts (buy/sell/broker boats) – GDPR Art. 6(1)(b)
• To comply with legal obligations (bookkeeping, tax, registration) – GDPR Art. 6(1)(c)
• With your consent: newsletter/marketing, publishing boat photos where you appear – GDPR Art. 6(1)(a)
• Legitimate interest: basic customer service and business follow-up – GDPR Art. 6(1)(f)

How long do we keep your data?

• Contracts and accounting records: 10 years after the transaction (Finnish bookkeeping law + dispute protection)
• Newsletter list: until you unsubscribe
• Other data: only as long as needed, max 10 years

Who do we share data with?

• Accounting service / auditor
• Authorities (e.g. Traficom, Transportstyrelsen, tax offices) when required
• Payment providers, insurance companies (for the deal)
• Google (for Analytics and future Ads) – they act as processors with GDPR agreements

We do not sell your data.

Cookies and Google Analytics / Ads

We use Google Analytics to understand website usage. It sets first-party cookies (e.g. _ga, _gid) for visitor tracking (up to 2 years). We also plan to use Google Ads for marketing.

You can manage cookies via our banner: Accept (full features) or Reject (limited data, modeling used).

IP addresses are anonymized where possible.

Your rights

You have the right to:

• Access your data
• Correct errors
• Request deletion (where possible)
• Object to processing (e.g. marketing)
• Restrict processing
• Receive your data in portable format

Contact us at [email protected]. We reply within one month (free in most cases).

Security

We use passwords, encryption, and secure providers. We report breaches to authorities within 72 hours if needed.