Contact

Privacy Policy

Last Updated: January 1, 2026 • Effective Date: January 1, 2026

1. Introduction & Data Controller

Welcome to Vaultvistashowcase.buzz ("we", "our", "us"). We are committed to safeguarding the privacy of visitors who access our digital publication, maritime directories, and island travel resources. This Privacy Policy details the types of personal data we collect, why we collect it, how it is processed under the European Union General Data Protection Regulation (GDPR - Regulation EU 2016/679), the UK Data Protection Act 2018, the California Consumer Privacy Act (CCPA/CPRA), and related global data privacy frameworks.

The designated Data Controller responsible for your personal information is:
Vaultvista Showcase Hellas Maritime Ltd.
Company Registration Number: GR-94821034
Registered Address: 14 Akti Miaouli, Piraeus Maritime Quarter, 185 35 Athens, Greece
Data Protection Officer (DPO) Contact: [email protected]

2. Categories of Personal Data Collected

We may collect and process the following categories of personal information:

  • Directly Provided Identifiers: Your full name, email address, telephone number, and message content submitted through our concierge contact forms or feedback systems.
  • Technical & Telemetry Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, device screen resolution, WebGL/graphics canvas capabilities, and referring URLs.
  • Usage & Behavioral Metrics: Page view durations, scroll depths, interaction with interactive island filters, clicked destination links, and session timestamps.
  • Consent State Records: Cryptographically generated tokens recording your explicit preferences regarding cookie categories and tracking choices.

3. Legal Bases for Data Processing (GDPR Art. 6)

We process your personal information under the following legal frameworks:

  • Consent (Art. 6(1)(a)): When you voluntarily submit an inquiry form or accept analytical and functional cookies via our persistent consent banner.
  • Performance of a Contract (Art. 6(1)(b)): To deliver requested travel guides, bespoke itineraries, or requested concierge correspondence.
  • Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent malicious bot attacks, diagnose network latency, and improve user interface architecture.
  • Legal Compliance (Art. 6(1)(c)): To fulfill mandatory accounting, tax, or regulatory obligations in Greece and the European Union.

4. Third-Party Data Processors & Transfers

We do not sell, rent, or lease your personal information to third parties. We share data only with vetted subprocessors bound by strict Data Processing Agreements (DPAs) compliant with Standard Contractual Clauses (SCCs):

  • Cloud Infrastructure: High-security European-based CDN and hosting facilities providing encrypted SSL/TLS data storage.
  • Transactional Email Services: Secure SMTP relays for delivering confirmations and concierge advisory responses.
  • Privacy-Preserving Telemetry: Aggregated, anonymized performance metrics without fingerprinting individual visitors.

5. Data Retention Schedules

We retain personal information only for the duration necessary to satisfy the purposes set out in this Privacy Policy:

  • Contact form inquiries: Retained for 24 months following the conclusion of correspondence, unless statutory tax records require longer retention.
  • Technical access logs: Automatically purged after 90 days.
  • Cookie consent records: Stored in your local client storage for 365 days or until cleared.

6. Your Statutory Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you hold enforceable rights regarding your personal data:

  • Right of Access & Portability: Obtain a copy of the personal data held about you in a structured, commonly used machine-readable format.
  • Right to Rectification: Request correction of inaccurate or incomplete information.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no legal basis overrides your request.
  • Right to Restriction & Objection: Object to processing based on legitimate interests or direct communications.
  • Right to Withdraw Consent: Revoke prior consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
  • Right to Non-Discrimination: We will never deny service, charge different prices, or provide a lower quality of experience for exercising your privacy rights.

To exercise any statutory rights, email our Data Protection Officer at [email protected]. We respond to all verified requests within 30 calendar days.

7. Security & Encryption Safeguards

We implement rigorous technical and organizational security measures, including 256-bit TLS transport encryption, strictly segregated database partitions, multi-factor administrative authentication, and scheduled penetration testing to prevent accidental loss, unauthorized disclosure, or data breaches.