How Adriavela collects, uses, shares, retains and protects personal data
Effective date: 23 June 2026
| Privacy at a glance • Adriavela OÜ is the controller of personal data used to operate the Adriavela Platform and administer reservations. • Reservation data is shared with the relevant independent yacht Operator and service providers only as reasonably necessary. • Adriavela does not sell or rent personal data. • Full payment card details are handled by payment service providers, including Mollie, and are not stored by Adriavela. • Optional analytics and marketing cookies are used only where required consent has been obtained. |
This Privacy and Cookie Policy (“Policy”) explains how Adriavela OÜ (“Adriavela”, “we”, “us” or “our”) processes personal data when you visit adriavela.com, create an account, contact us, submit or manage a reservation, make a payment, communicate with an Operator, or otherwise use the Adriavela website and related services (collectively, the “Platform”).
This Policy should be read together with the Adriavela Terms of Service and Cancellation Policy. It applies to Customers, prospective Customers, passengers and crew whose details are supplied for a reservation, Operators and their representatives, website visitors, and other persons who communicate with Adriavela.
1. Data Controller and Contact Details
The controller responsible for the processing described in this Policy is Adriavela OÜ, a company incorporated in Estonia.
• Website: adriavela.com
• Privacy and general contact: info@adriavela.com
Questions, objections and requests concerning personal data may be sent to the email address above. We may request reasonable information to verify your identity before acting on a request.
2. Adriavela and Operator Roles
Adriavela operates a yacht reservation platform and processes personal data for Platform operation, reservation administration, payment facilitation, customer support, fraud prevention and legal compliance.
When a reservation is confirmed, the charter agreement is concluded directly between the Customer and the independent yacht Operator. Adriavela shares with that Operator the personal data reasonably necessary to evaluate, confirm and perform the reservation.
The Operator generally acts as an independent controller for its own processing connected with the charter, including check-in, crew lists, licensing checks, safety, insurance, marina administration and compliance with maritime or local legal requirements. The Operator is responsible for its own data-protection obligations and processing practices. This Policy governs Adriavela’s processing and does not replace any privacy information that an Operator is legally required to provide.
3. Personal Data We Collect
The categories collected depend on how you use the Platform and what is required for a particular reservation.
3.1 Account and contact data
• name, email address, telephone number and preferred language;
• account username, password hash, account status and authentication records;
• profile information and, where social sign-in is used, identifiers and profile details supplied by Google, X or another selected provider; and
• communication preferences and marketing consent records.
3.2 Reservation and charter data
• selected yacht, destination, charter dates, trip type, extras, price and reservation status;
• arrival, check-in and special-request information relevant to the reservation;
• names and other required details of passengers or crew members;
• skipper information, boating licence, qualification or identification details where required by the Operator, applicable law, insurers or maritime authorities; and
• reservation identifiers, Operator confirmations and Booking Manager or similar reservation-system records.
3.3 Payment and transaction data
• billing details, transaction amount, currency, payment status, payment method type and transaction reference;
• refunds, pre-authorisations, deposits, payment disputes, chargebacks and fraud-prevention records; and
• authentication and risk information associated with payment processing, including 3-D Secure results where applicable.
Adriavela does not store complete payment card numbers or card security codes. Such information is collected and processed directly by payment service providers and financial institutions.
3.4 Communications, support and content
• emails, support requests, telephone or online communications, complaint details and correspondence with Adriavela;
• communications facilitated through the Platform between Customers and Operators, where the Platform provides such functionality;
• reviews, ratings, photographs or other content that you choose to submit; and
• records and evidence supplied in connection with cancellations, incidents, disputes or chargebacks.
3.5 Technical, usage and cookie data
• IP address, browser type, device type, operating system, device identifiers and approximate location derived from IP address;
• login times, visited pages, searches, selected filters, viewed yachts, referring and exit pages, timestamps and error logs;
• language, currency and preference settings; and
• cookie identifiers, consent choices and information collected by comparable technologies such as pixels or local storage.
3.6 Operator and business contact data
For Operators, suppliers and business partners, we may process names, work contact details, company and tax information, contractual records, payment details, authorisations and communications required to establish and manage the commercial relationship.
3.7 Special-category and unnecessary data
Please do not submit sensitive personal data, including health data, political opinions, religious beliefs, trade-union membership, sexual-orientation data or criminal-record information, unless it is strictly necessary, specifically requested and lawful. Free-text fields should contain only information relevant to the reservation or request.
4. How We Obtain Personal Data
• directly from you when you register, make a request, complete checkout, contact us or use the Platform;
• from the person organising a reservation, where that person supplies passenger, crew or skipper details;
• from Operators when they confirm availability, update a reservation, report an incident or provide charter-related records;
• from payment providers, banks and card networks in connection with payments, refunds, fraud checks and disputes;
• from social-login providers when you choose to sign in through them;
• automatically through server logs, cookies and similar technologies.
If you provide personal data about another person, you must ensure that you are authorised to provide it and that the person has been informed that their data will be processed for the reservation and related purposes.
5. Purposes and Legal Bases
We process personal data only where a valid legal basis applies. Depending on the context, we rely on performance of a contract or steps requested before a contract, compliance with legal obligations, our legitimate interests, consent, or the establishment, exercise or defence of legal claims.
| Purpose | Typical data | Legal basis |
| Create and manage accounts; authenticate users | Account, contact, login and social-login data | Contract / steps before contract; legitimate interests in account security |
| Search, quote, submit and administer reservation requests | Contact, reservation, yacht, trip and communication data | Contract / steps before contract |
| Share reservation information with the relevant Operator and reservation systems | Customer, passenger, crew, licence and reservation data | Contract / steps before contract; legitimate interests in efficient reservation administration |
| Process payments, refunds, deposits and transaction reconciliation | Billing, transaction, payment status and authentication data | Contract; legal obligation; legitimate interests in payment administration |
| Prevent fraud, secure the Platform and investigate misuse | Technical logs, authentication, payment-risk and behavioural data | Legitimate interests in security and fraud prevention; legal obligation where applicable |
| Provide support and manage cancellations, complaints, incidents, disputes and chargebacks | Reservation, communications, evidence and transaction data | Contract; legitimate interests; establishment, exercise or defence of legal claims |
| Meet accounting, tax, regulatory and law-enforcement obligations | Identity, reservation, invoice, transaction and compliance data | Legal obligation |
| Maintain, diagnose and improve the Platform and services | Technical, usage, search and feedback data | Legitimate interests; consent where cookies or similar technologies require it |
| Send newsletters and promotional communications | Name, email and preferences | Consent or another lawful basis expressly permitted by applicable electronic-marketing law |
| Personalise advertising and measure campaigns | Cookie, usage and advertising identifiers | Consent |
| Publish and manage reviews or user-submitted content | Name or display name, review and submitted media | Consent and/or legitimate interests, depending on the feature and context |
| Manage Operator and business relationships | Business contact, company, contract and payment data | Contract; legitimate interests; legal obligation |
6. When Providing Data Is Required
Some personal data is required to create an account, submit a reservation, verify eligibility, process payment or comply with law. If required data is not provided, Adriavela or the Operator may be unable to process or confirm the reservation, provide support, issue a refund, or meet a legal obligation.
7. Recipients and Data Sharing
Adriavela does not sell or rent personal data. We disclose personal data only where reasonably necessary and subject to appropriate legal, contractual or confidentiality safeguards.
• the relevant independent Operator, so it can review, confirm and perform the requested charter;
• payment service providers, including Mollie, banks, card networks and fraud-prevention providers;
• analytics and advertising providers where the required cookie or marketing consent has been obtained;
• social-login providers when you choose to use their authentication service;
• competent authorities, courts, regulators, law-enforcement bodies or tax authorities where disclosure is required or legally justified.
Operators may need to provide reservation data to marinas, port authorities, insurers, skippers, crew providers or competent authorities. Such onward processing is generally controlled by the Operator and is subject to the Operator’s own legal responsibilities.
8. Payments
Adriavela uses independent payment service providers, including Mollie B.V., to process card and other payments. When you initiate a payment, relevant transaction and identity information is transmitted to the payment provider, which may process the data as an independent controller for payment execution, fraud prevention, anti-money-laundering controls, regulatory compliance and its own service security.
The payment provider’s own privacy statement applies to its independent processing. Adriavela generally receives transaction references, payment status, method type, risk or authentication results and limited billing information rather than full card credentials.
9. Cookies and Similar Technologies
Cookies are small data files stored on or accessed from your device. The Platform may also use similar technologies such as pixels, tags, local storage and software identifiers. These technologies support the following categories:
• Strictly necessary cookies: required for security, login, checkout, load balancing, fraud prevention, session management and recording privacy choices. These cannot normally be disabled through the Platform without affecting essential functions.
• Preference cookies: remember settings such as language, currency, search filters and interface preferences.
• Analytics cookies: help us understand how visitors use the Platform, identify errors and improve performance and usability.
• Marketing cookies: measure campaigns, limit repeated advertisements and, where enabled, support personalised advertising or retargeting on the Platform and third-party services.
Where applicable law requires consent, optional preference, analytics and marketing technologies will not be activated until you consent through the cookie banner or preference tool. You may withdraw or change your choices at any time through the cookie settings available on the Platform. Withdrawal does not affect processing that occurred before withdrawal.
You can also control cookies through browser settings. Blocking strictly necessary cookies may prevent account, checkout or reservation functions from operating correctly. The current cookie preference tool, where implemented, provides more detailed information about active cookies, providers, purposes and durations.
10. International Data Transfers
Adriavela is established in Estonia and seeks to use providers located in the European Economic Area where reasonably possible. Some Operators or service providers may nevertheless process personal data outside the EEA, particularly where a yacht, Operator, technology provider or support service is located in another country.
Where personal data is transferred outside the EEA, Adriavela will use a lawful transfer mechanism as required, such as an adequacy decision, European Commission Standard Contractual Clauses, another approved safeguard, or a specific legal derogation. You may contact us for information about the safeguards relevant to a particular transfer.
11. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including contractual performance, accounting, tax, fraud prevention, security and legal claims. The following are general retention criteria; longer or shorter periods may apply where law, an active dispute, a regulatory request or technical requirements justify it.
| Data category | Typical retention approach |
| Account and profile data | While the account is active and generally for up to 3 years after closure or last meaningful activity, unless earlier deletion is appropriate or longer retention is required. |
| Reservation, support and communication records | For the reservation lifecycle and generally for up to 3 years after completion, cancellation or the last related communication; longer while a complaint, dispute or claim remains open. |
| Invoices, accounting and tax records | At least 7 years from the end of the relevant financial year, or longer where applicable law requires. |
| Payment, fraud, chargeback and security records | For as long as needed to prevent fraud, protect accounts, manage disputes and comply with payment-provider or legal requirements; active cases may be retained longer. |
| Marketing records | Until consent is withdrawn or an objection is received; minimal suppression information may be retained to ensure that the opt-out is respected. |
| Cookie and analytics data | According to the duration shown in the cookie preference tool or the relevant provider settings, subject to consent choices. |
| Operator and business records | For the commercial relationship and applicable accounting, tax and legal-claim periods. |
When retention is no longer necessary, data is deleted, anonymised or isolated from ordinary use, subject to secure backup-deletion cycles.
12. Security
Adriavela applies technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures may include encrypted transport, access controls, authentication, logging, backups, least-privilege administration, software updates, security monitoring and contractual controls for service providers.
No online system can be guaranteed completely secure. You are responsible for protecting your login credentials, using a unique password and notifying Adriavela promptly if you suspect unauthorised account access or misuse.
13. Your Data-Protection Rights
Subject to the conditions and exceptions in applicable law, you may have the right to:
• receive information about how your personal data is processed;
• access personal data held about you and receive a copy;
• correct inaccurate or incomplete personal data;
• request erasure of personal data;
• request restriction of processing;
• object to processing based on legitimate interests and object at any time to direct marketing;
• receive certain data in a structured, commonly used and machine-readable format and request portability;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal; and
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where this right applies.
Send requests to info@adriavela.com. We may ask for information necessary to confirm your identity and clarify the scope of the request. We normally respond within one month. Where a request is complex or numerous, the response period may be extended by up to two additional months, and we will explain the extension.
Rights are not absolute. For example, Adriavela may retain information required for accounting, tax, fraud prevention, legal claims or other mandatory purposes even after an erasure request.
14. Complaints
Please contact Adriavela first at info@adriavela.com so that we can investigate and address your concern.
15. Children and Legal Capacity
The Platform and yacht reservation services are intended for adults with legal capacity to enter into binding contracts. Adriavela does not knowingly invite children to create booking accounts or make reservations. If we learn that personal data of a child has been collected without an appropriate legal basis or necessary authorisation, we will take reasonable steps to delete or restrict it.
Passenger or crew details relating to minors may be processed where supplied by an authorised adult and necessary for a legitimate reservation, safety, insurance or legal purpose.
16. Automated Processing and Fraud Screening
Adriavela does not ordinarily make decisions producing legal or similarly significant effects solely by automated means. Payment providers, card networks or fraud-prevention services may use automated risk and fraud-screening systems under their own responsibilities and privacy notices. Such screening may cause a transaction to be declined, delayed, authenticated or reviewed.
17. Third-Party Websites and Services
The Platform may contain links to third-party websites or services. Adriavela does not control their privacy practices, and this Policy does not apply to personal data processed independently by those third parties. You should review their privacy information before providing data to them.
18. Changes to This Policy
We may update this Policy to reflect changes in law, technology, service providers or Platform functions. The current version will be published on the Platform with an updated effective date. Where a change materially affects your rights or the way we use personal data, we will provide additional notice where reasonably required by law.
19. Contact
For privacy questions, rights requests or complaints, contact:
• Adriavela OÜ
• Email: info@adriavela.com
• Website: adriavela.com