Privacy Policy & Data Protection

1. Data Controller

Company: Thunder Boats Marine
Address: Rysio, Thessaloniki, Greece
Email: kostasvasiliadismarine@gmail.com
Phone: +30 239 20 73331 / +30 694 894 8712

2. Personal Data We Collect

When you use our website or contact us through the contact form, we may collect and process the following data:

Identification & Contact Details: Full name, email address, phone number.

Message Content: Subject of communication and any information you include in the message field.

Technical Data: IP address, browser type / user agent, date and time of form submission.

Cookies & Statistics: Technical data through necessary cookies and server log files, such as session IDs and cookies for protection against malicious actions, including CSRF protection.

3. Purpose of Data Processing

We use your personal data exclusively for the following purposes:

Responding to Requests: To respond to inquiries you submit through the contact form.

Customer Service: To communicate with you regarding our services, boats, engines, products, or other requests.

Submission Confirmation: To send an automatic confirmation email after your message has been submitted.

Website Security: To protect the website from spam, malicious use, cyberattacks, and unauthorized access.

Legal Compliance: To keep records where required by applicable law or to defend our legal interests.

4. Legal Basis for Processing

The processing of your data is carried out in accordance with the General Data Protection Regulation (GDPR) and is based on the following legal bases:

Taking measures at your request before entering into a contract or starting a business relationship.

The legitimate interest of our company to respond effectively to your inquiries and ensure the security of its systems.

Compliance with a legal obligation of the company, such as tax or other legal provisions.

Consent, in cases where it is explicitly requested, such as for optional newsletters / marketing or non-essential cookies.

5. Recipients of Your Data

Access to your data is limited exclusively to authorized personnel of Thunder Boats Marine. We may share your data only with trusted external partners, acting as processors, such as:

Website hosting providers.

Email service providers and IT technical support providers.

Security system and backup providers.

Important Note: All our partners are bound by confidentiality clauses and process your data exclusively according to our instructions. We do not sell or trade your personal data.

6. International Data Transfers

Your data is generally stored within the European Economic Area (EEA). If a service provider transfers or processes data outside the EEA, this is done exclusively using appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, ensuring the same level of protection.

7. Data Retention Period

We retain your data only for as long as required to fulfill the purposes for which it was collected:

Contact Form Submissions: Up to 24 months after the completion of communication, unless it develops into a customer relationship.

Security Log Files / Server Logs: Up to 90 days, unless an investigation into a security incident is pending.

Tax / Legal Records: For the period defined by the applicable legislation.

8. Cookies

Our website uses necessary technical cookies for its basic operation, session management, and form security.

If analytics tools such as Google Analytics, advertisements, maps, or social media plugins are integrated in the future, the website will activate a relevant mechanism, such as a cookie banner, so that you can provide or refuse your consent.

9. Your Rights

According to the GDPR, you have the following rights regarding your personal data:

Right of Access & Information: To know which data we process and how.

Right to Rectification: To request the correction of inaccurate data or the completion of incomplete data.

Right to Erasure “Right to be Forgotten”: To request the deletion of your data under certain conditions.

Right to Restriction & Objection: To restrict or object to the processing of your data.

Right to Data Portability: To receive your data in a structured format or request its transfer to another controller.

Right to Withdraw Consent: To withdraw your consent at any time, where consent is the legal basis.

To exercise any of the above rights, you can contact us at: kostasvasiliadismarine@gmail.com.

10. Right to Lodge a Complaint

If you believe that the processing of your data violates the GDPR, you have the right to submit a complaint to the national supervisory authority:

Hellenic Data Protection Authority

Address: Kifisias 1-3, P.C. 115 23, Athens

Website: www.dpa.gr

Email: contact@dpa.gr

11. Updates to the Privacy Policy

This Privacy Policy may be amended from time to time for compliance with new legal regulations or technical changes. The current version will always be posted on this page.