Privacy Policy.

1. Data Controller

Yacht Concierge Montenegro
Pomorska ulica, Zgrada Baia, Porto Montenegro, Tivat 85320, Montenegro
Email: info@yacht-concierge.me

This Privacy Policy governs all personal data processed through our website, service request forms, and provisioning platform. It applies to captains, crew members, owners, and vessel managers who engage with our services.

2. Data We Collect

We collect the following categories of personal data:

• Contact data: name, email address, phone number, role (captain / manager / owner).
• Vessel data: yacht name, flag state, length overall (LOA), gross tonnage, MMSI, IMO number.
• Operational data: arrival and departure dates, ports of call, crew and guest count, berthing preferences.
• Service request data: provisioning orders, laundry requests, maintenance briefs, floristry specifications.
• Technical data: IP address and browser type retained in server logs for security purposes for up to 30 days. Analytics data is collected in aggregated, anonymised form using Plausible Analytics (cookie-less).

3. Legal Basis for Processing

We process your data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR / Art. 12 LPDP): processing necessary to execute the services you request.
• Legitimate interests (Art. 6(1)(f) GDPR): maintaining client vessel files, operational record-keeping, and service quality improvement.
• Legal obligation (Art. 6(1)(c) GDPR): retaining financial records as required by Montenegrin accounting law.

4. Retention Periods

Active client files are retained for the duration of the service relationship. Following the last service engagement, data is retained for five (5) years in accordance with Montenegrin financial record-keeping requirements. Technical server logs are deleted after 30 days. Provisioning and order records are retained for five (5) years for accounting purposes.

5. Data Processors and International Transfers

We engage the following sub-processors who may process your data on our behalf:

• Google LLC (United States): Service request and quote data submitted through website forms is relayed to Google Sheets via Google Apps Script. Google participates in the EU–US Data Privacy Framework. Data is processed under Google's standard contractual clauses.
• Railway Corp. (United States): Website hosting and deployment infrastructure. Server logs are retained for security purposes.
• Plausible Insights OÜ (Estonia, EU): Cookie-less, aggregated web analytics. Data is hosted and processed within the European Union.

6. Your Rights

Under the Law on Personal Data Protection of Montenegro (LPDP) and GDPR, you have the following rights:

• Right of access — request a copy of your data.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request deletion where data is no longer necessary.
• Right to restriction — limit how we process your data.
• Right to portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at info@yacht-concierge.me. We will respond within 30 days of receiving your request.

7. Supervisory Authority

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Montenegrin data protection authority:

Agencija za zaštitu ličnih podataka i slobodan pristup informacijama (AZLP)
Karadžićeva 2, 81000 Podgorica, Montenegro
www.azlp.me

8. Updates to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website or services following any update constitutes acceptance of the revised policy.