The data controller responsible for your personal data is:
No Data Protection Officer (DPO) has been designated, as the volume and nature of processing does not require one under Article 37 of the GDPR. For any data protection queries, contact us at the email above.
| Situation | Data collected |
|---|---|
| Contact form | Name, email address, yacht length (price category), free-text message |
| Payment via Stripe | Name, email, billing country — processed directly by Stripe. We have no access to card data. |
| Providing the registration service | Identity documents (passport/ID), yacht ownership documents, technical vessel data (name, length, type, serial number) |
| Website navigation | IP address, browser type, pages visited — anonymised via Vercel Analytics, no tracking cookies |
We do not collect sensitive data (health, ethnic origin, political or religious beliefs, biometric data).
| Purpose | Legal basis (GDPR) |
|---|---|
| Performing the yacht registration service (REJA24) | Art. 6(1)(b) — contract performance |
| Responding to contact and enquiry requests | Art. 6(1)(b) — pre-contractual steps |
| Processing payment via Stripe | Art. 6(1)(b) — contract performance |
| Compliance with accounting and tax obligations | Art. 6(1)(c) — legal obligation |
| Sending service confirmation and document checklist by email | Art. 6(1)(b) — contract performance |
| Anonymous website traffic analysis | Art. 6(1)(f) — legitimate interest (no cookies, anonymised data) |
We do not use your data for direct marketing without your explicit consent. We do not make automated decisions based on your personal data.
| Sub-processor | Country | Purpose |
|---|---|---|
| Stripe, Inc. | USA (SCCs) | Payment processing |
| Vercel, Inc. | USA (SCCs) | Website hosting and database |
| Supabase, Inc. | USA / EU (eu-west-1) | Contact form data storage |
| Maileroo | EU | Transactional emails (confirmation, document checklist) |
| n8n GmbH | EU | Internal process automation (post-payment email trigger) |
| URZAD MORSKI w Szczecinie (REJA24) | Poland / EU | Public authority — recipient of registration documents |
Data transfers to the USA (Stripe, Vercel, Supabase) are made on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46 of the GDPR. We do not sell or share your data with third parties for commercial or advertising purposes.
| Data type | Retention period |
|---|---|
| Contact form data (no purchase) | 12 months from last contact |
| Client data (registration completed) | 2 years from service completion |
| Registration documents (copies submitted to REJA24) | 2 years — accounting and tax obligation |
| Billing data | 5 years — tax obligation (Polish law) |
| Anonymised navigation data | 90 days (Vercel Analytics) |
To exercise any of these rights, email us at polaca@registoiate.pt. We respond within 30 days.
You also have the right to lodge a complaint with a supervisory authority. In Poland: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw — uodo.gov.pl.
This website does not use tracking, advertising or third-party analytics cookies (no Google Analytics, no Meta Pixel, no Hotjar). We use only Vercel Analytics, which collects navigation data in a fully anonymous, cookie-free manner, in compliance with GDPR. No cookie consent banner is required.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. The website is served exclusively over HTTPS. Payments are processed exclusively by Stripe — we do not store credit card data.
We may update this Privacy Policy periodically. For material changes, we will notify you by email (if we have your contact) or via a prominent notice on the website. The "last updated" date at the top always reflects the current version.
Privacy contact
VIVIBOAT sp. z o.o.ul. Wały Jagiellońskie 28/30 lok. 2, 80-853 Gdańsk, Poland
Email: polaca@registoiate.pt
Response within 30 working days