Privacy policy

1. Controller

The controller of personal data is GlobalRental Rafał Flis, Karmelowa 31, 21-002 Marysin, Poland, tax ID (NIP) 946-189-90-78, REGON 431103551 (the “Controller”). Contact for data protection matters: biuro@e-globalrental.com, phone +48 600 490 005.

The Controller has not appointed a Data Protection Officer.

2. Data we process

• inquiry form data — first name, e-mail address, optionally phone number and preferred contact method, and the trip details you enter (countries or sailing area, dates, number of guests and cabins, yacht type, skipper, experience, budget, message),
• consent data — the wording of the consent and the date and time it was given,
• traffic source — campaign parameters (UTM) and the page where your visit started; only with your consent to analytics cookies,
• correspondence — messages exchanged with us by e-mail or phone in reply to your inquiry,
• technical data — IP address, browser and device information, server logs and cookie data (section 8).

3. Purposes and legal bases

• answering your inquiry and preparing a charter proposal — Art. 6(1)(a) GDPR (consent given in the form) and Art. 6(1)(b) (steps taken at your request before entering into a contract),
• further correspondence — Art. 6(1)(f) GDPR (our legitimate interest in communicating with people who contact us),
• website usage statistics (Google Analytics 4) — Art. 6(1)(a) GDPR (consent to analytics cookies),
• website security and protecting the form against abuse — Art. 6(1)(f) GDPR,
• establishing, exercising or defending legal claims and legal obligations (e.g. tax) — Art. 6(1)(f) and (c) GDPR.

Providing data is voluntary, but without your name and e-mail address we cannot reply to your inquiry.

4. Recipients

We entrust data to trusted providers who process it on our behalf:

• our server (hosting in Poland) and e-mail providers,
• Cloudflare, Inc. — website delivery, attack protection and the Turnstile service protecting the form against bots (technical browser data is processed),
• Google Ireland Limited (Google Analytics 4) — only with your consent to analytics cookies.

Where needed to prepare an offer, we share with the yacht owner or charter operator only the details required to check availability (e.g. dates, number of guests). Contact details are shared only when booking, with your knowledge. We do not sell personal data.

5. Transfers outside the EEA

Cloudflare and Google may process data outside the European Economic Area (including the USA). Transfers are based on the European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.

6. Retention

• inquiry and correspondence data — up to 24 months after the last contact, then personal data is anonymised (only non-identifiable statistics remain),
• data needed to defend claims or required by law — for the limitation period or the period required by law,
• server logs — full IP address for up to 14 days,
• Google Analytics data — 14 months.

7. Your rights

• access to your data and a copy of it,
• rectification,
• erasure,
• restriction of processing,
• data portability,
• objection to processing based on legitimate interest,
• withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, write to biuro@e-globalrental.com. We reply within 30 days.

You may also lodge a complaint with the Polish supervisory authority — President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) — or with the supervisory authority in your country of residence.

8. Cookies

• necessary — remembering the website language and your cookie banner choice, plus Cloudflare cookies for security and form protection; they work without consent because the website cannot function properly without them,
• analytics (Google Analytics 4, “_ga” cookies) — only with your consent; without consent the Google Analytics script is not loaded. We use the statistics to improve the website; Google shortens the IP address.

You can change or withdraw your consent at any time via the “Cookie settings” link in the footer. You can also delete cookies in your browser settings.

9. Automated decisions

We do not make decisions based solely on automated processing, including profiling.

10. Changes

This policy may be updated following changes in law or in our services. The current version is always available on this page with the date of the last update.