Privacy Policy

1. General

Our data protection practices comply with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the Telemedia Act (TMG) / Digital Services Act (DDG) as applicable.

Controller for data processing on boatbay.eu: [Company name], [Street and number], [Postal code and city], Germany. E-mail: info@boatbay.eu (further details in our Imprint).

We store and process your personal data primarily to process and deliver your orders. To fulfil delivery we only share the data required for shipment with the logistics partner commissioned for that delivery. Payment data is transmitted to the payment service provider you select at checkout. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).

Upon request we will provide you free of charge with information about the personal data we store about you, and we will rectify, restrict or erase such data where legally required. Please contact info@boatbay.eu.

2. Additional services

If you subscribe to our newsletter, you consent to us storing your e-mail address and, where provided, your name. Processing is based on your consent pursuant to Art. 6 (1) (a) GDPR. You may unsubscribe at any time via the link in every newsletter, via the newsletter form in the shop, or by e-mail to info@boatbay.eu.

Customer account

If you create a customer account, you consent to us storing your master data (name, address, e-mail address) and usage data (login credentials) so that you can order with your e-mail address and password. Guest checkout remains available. To delete your account, e-mail info@boatbay.eu.

My Boats / boat logbook

Logged-in customers may store boat and engine details and a personal maintenance logbook in their account. This data is processed to provide the account features you request (Art. 6 (1) (b) GDPR) and is only accessible to you and to BoatBay for support and technical operation. You can edit or delete boat and logbook entries in your account at any time.

3. Data we collect

We need your address and contact details to fulfil your order. We also process your name, address, e-mail address, order data and payment information for contract performance (Art. 6 (1) (b) GDPR).

Where necessary to process your order we pass your name, address and, if needed, your phone number to the delivery company to arrange delivery, and your payment data to the payment institution handling the payment (Art. 6 (1) (b) GDPR).

Your visit to our website is logged. We process: the page retrieved, date and time, volume of data transferred, browser type and version, operating system, referrer URL, IP address and requesting provider. Legal basis: our legitimate interests under Art. 6 (1) (f) GDPR (secure, reliable operation and improvement of the shop).

If you contact us via the contact form or by e-mail, we process your details (name, e-mail address, message) solely to handle your enquiry (Art. 6 (1) (a) or (b) GDPR, as applicable).

We may use your name and postal address for our own postal advertising about similar BoatBay products, provided we obtained these details in the course of a contractual relationship. You may object at any time by contacting us (see Imprint / info@boatbay.eu).

As a rule, no transfer of personal data to third countries takes place. If a payment or logistics provider processes data outside the EU/EEA, this is only done with appropriate safeguards (e.g. EU standard contractual clauses).

4. Server log files

For protection against external attacks we store server log files (IP address, date and time, URL, status code, referrer, user agent). These data are used solely to ensure trouble-free operation and to improve our offering and do not allow us to identify you personally beyond what is technically necessary.

5. Retention

We process and store your personal data for as long as our business relationship requires. We are also subject to statutory retention and documentation duties under the German Commercial Code (HGB) and Fiscal Code (AO), typically between two and ten years. Retention may also follow statutory limitation periods under §§ 195 ff. BGB (usually three years, in some cases up to thirty years).

6. Encryption

To protect transmitted personal data we use SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the browser address bar and the lock symbol. When SSL/TLS is active, it is substantially harder for unauthorised third parties to read data sent to us.

7. Cookies

A cookie is a small text file stored on your device. We use session cookies that are required for the shopping cart, login and language/currency selection; these are discarded when you leave the site or end the session. Optional cookies (e.g. for comfort or statistics) are only set if you consent via our cookie preferences dialog. Cookie data is not merged with your customer master data without a separate legal basis or your consent.

You can configure your browser to accept or reject cookies. If you disable cookies, some shop features (in particular the cart) may not work correctly. Temporary cookies must be allowed to use the cart.

8. Direct marketing by e-mail

Where we have received your e-mail address in connection with the sale of a product, we may use it to send you direct marketing by e-mail about our own similar goods or services, independently of a newsletter subscription. Legal basis: § 7 (3) UWG. You may object at any time free of charge (apart from transmission costs at basic rates), e.g. by e-mail to info@boatbay.eu or via the unsubscribe link in the message.

9. Analytics and marketing tools

We do not currently use third-party tracking, retargeting or review widgets (such as Google Analytics, Hotjar, Facebook Pixel, Trusted Shops Trustbadge or similar) on boatbay.eu. If we introduce such tools in future, we will only activate them with a valid legal basis (usually your consent via the cookie dialog) and will update this privacy policy accordingly.

10. Your rights and contact

You have the right to free information about your stored personal data and, where applicable, the right to rectification, erasure, restriction of processing, data portability and objection. To withdraw consent or exercise your rights, contact us using the details in the Imprint or at info@boatbay.eu. You also have the right to lodge a complaint with a data protection supervisory authority.