This Privacy Policy explains how Mykonos Sea Transfer ("we", "us", "our") collects, uses, and protects personal data of visitors to www.mykonosseatransfer.com (the "Website"). We comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679 — "GDPR") and Greek Law 4624/2019.
1. Data Controller
The data controller responsible for your personal data is:
Mykonos Sea Transfer
Platis Yialos, Mykonos 84600, Greece
Email: welcome@mykonosseatransfer.com
Phone: +30 22890 23995
2. What Data We Collect
We only collect the minimum data needed to operate the Website and respond to your enquiries.
- Contact form submissions: your name, email address, phone number (optional), and the content of the message you choose to send us.
- Technical data: standard server logs (IP address, browser type, request time, referrer) kept by our hosting provider for security and troubleshooting purposes for a short period.
We do not use Google Analytics, advertising pixels, marketing trackers, or any third-party profiling cookies on this Website.
3. Cookies and Local Storage
We only use a small number of strictly necessary cookies / local storage entries. Under Greek and EU law, strictly necessary cookies do not require your prior consent.
| Name | Purpose | Duration |
|---|---|---|
mst_cookie_notice | Remembers that you have closed the cookie notice so it does not reappear. | 12 months |
mst_weather_dismissed_v1 | Remembers that you have dismissed the weather service notice for the current browser session. | Session |
mst_admin | Authentication cookie for internal staff only, set on the/admin page. Not set for normal visitors. | 7 days |
4. Why We Process Your Data (Legal Basis)
- Contact form: to respond to your enquiry and provide the service you have asked about (Art. 6(1)(b) GDPR — performance of pre-contractual measures and Art. 6(1)(a) — your consent given via the form checkbox).
- Technical logs: to keep the Website secure and functional (Art. 6(1)(f) GDPR — our legitimate interest in operating the service).
- Strictly necessary cookies: to remember your preferences (e.g. dismissed notices) — Art. 6(1)(f) GDPR.
5. How Long We Keep Your Data
We keep contact form messages only for as long as needed to respond and follow up — typically up to 12 months. Technical server logs are kept by our hosting provider for a short period (usually up to 30 days). You can ask us to delete your data at any time (see Section 8).
6. Who We Share Your Data With
We do not sell or rent your personal data. We share it only with service providers strictly needed to run the Website and respond to you:
- Hosting: Vercel Inc. (USA / EU) — hosts the Website. Data may be transferred outside the EEA under Standard Contractual Clauses.
- Email delivery: our transactional email provider, used to forward contact form messages to our inbox.
- Data storage: Upstash Inc. — used to store the boat timetable and service notices. This service does not store any personal data of visitors.
All providers are bound by data processing agreements and appropriate safeguards.
7. International Transfers
Some of our service providers may process data outside the European Economic Area. In such cases we rely on the European Commission's Standard Contractual Clauses or other valid transfer mechanisms under Chapter V of the GDPR.
8. Your Rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- request rectification of inaccurate or incomplete data;
- request erasure of your data ("right to be forgotten");
- request restriction of processing or object to it;
- request data portability;
- withdraw any consent at any time.
To exercise these rights, contact us at welcome@mykonosseatransfer.com. You also have the right to lodge a complaint with the Greek Data Protection Authority (www.dpa.gr).
9. Security
The Website is served exclusively over HTTPS. Access to internal tools is password-protected. Communication with our service providers is encrypted in transit. Despite all reasonable measures, no transmission over the Internet can be guaranteed to be 100% secure.
10. Changes to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted on the Website.
11. Contact
Questions about this Privacy Policy or our handling of your personal data? Reach out anytime via the contact page or email welcome@mykonosseatransfer.com.