Privacy Policy

Ether Experience ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains what data we collect, why we collect it and how we handle it in accordance with the EU General Data Protection Regulation 2016/679 ("GDPR") and Greek law.

1. Data controller

Ether Experience, Platonos 7, 15234 Chalandri, Greece. For any privacy enquiry contact info@etherexperience.com.

2. Personal data we collect

• Contact & booking data: name, email, phone, route, dates, passengers, message — provided through our request, booking and contact forms.
• Technical data: IP address, browser, device, pages viewed, timestamps — collected automatically via cookies and server logs.
• Communications: messages you send via email, WhatsApp or other channels.

3. Purposes & legal basis

• Responding to enquiries and providing quotes — performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR).
• Operating, securing and improving the website — our legitimate interest (Art. 6(1)(f) GDPR).
• Analytics and marketing cookies — your consent (Art. 6(1)(a) GDPR), withdrawable at any time.
• Compliance with legal obligations such as tax and accounting — Art. 6(1)(c) GDPR.

4. Recipients & processors

We share data only with carefully selected service providers acting as processors on our behalf (hosting, database, email delivery) and with operators (airlines, charter operators, yacht crews) strictly to fulfil your booking. We do not sell your personal data.

5. International transfers

Where data is transferred outside the European Economic Area, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses.

6. Retention

We keep enquiry and booking records for as long as needed to provide the service and to meet legal obligations (typically up to 5 years for accounting records). Technical logs are kept for a short rolling period.

7. Your rights

Under the GDPR you have the right to:

• Access your data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

To exercise these rights, email info@etherexperience.com.

8. Security

We apply appropriate technical and organisational measures including TLS encryption in transit, access controls and row-level security on our database.

9. Cookies

For details on the cookies we use and how to manage them, see our Cookie Policy.

10. Changes

We may update this policy from time to time. The "last updated" date above reflects the most recent revision.