Privacy Policy

Last updated: 10 September 2026

La informació legal es facilita en anglès com a versió autoritzada.

Controller

A1 Superyacht Consultancy Ltd., a private limited company registered in the Republic of Cyprus (HE439929), Kassima 710, Kyklamino Villa, Kissonerga, 8574 Paphos, Cyprus, is the controller of personal data described in this notice.

Privacy enquiries: contact@a1-superyacht.com or +357 94 089784. A1 has not appointed a Data Protection Officer. Privacy enquiries are handled by the Director.

How the website works

This website does not store enquiries in a website database. A1 does not use advertising, profiling, marketing analytics or cross-site tracking. When you submit the enquiry form on the contact page, the details you entered are transmitted securely to this website's server, processed transiently and sent by email to contact@a1-superyacht.com so that A1 can respond. They are not used for marketing and are not retained on the website beyond what is technically necessary for that transmission. Delivery is carried out by the hosting platform's email service acting as processor on A1's behalf, and the resulting email is retained in A1's own mailbox for the periods described below.

Our hosting platform may process limited first-party technical, performance and usage telemetry, including connection and browser-request information, for site delivery, reliability, security and performance.

Categories of personal data

• Identity and contact details: name, email address, telephone number, and where relevant employer or role.
• Enquiry and engagement content: yacht or project information, correspondence and instructions.
• Contract and administrative data: engagement records, invoicing and payment details.
• Recruitment data, where a candidate voluntarily sends a CV or application.
• Technical data processed by the hosting provider for delivery and security of the website.

Please do not send special category data or sensitive operational, financial or security information by unencrypted email.

Purposes and legal bases

• Responding to enquiries and pre-contractual discussions — Article 6(1)(b) GDPR (steps at your request prior to a contract), or Article 6(1)(f) where you write on behalf of an organisation, our legitimate interest being to answer business enquiries addressed to us.
• Delivering and administering agreed services — Article 6(1)(b) GDPR, or Article 6(1)(f) where the client is a company and you are its representative.
• Accounting, tax and company law obligations — Article 6(1)(c) GDPR.
• Establishing, exercising or defending legal claims and protecting the security of our communications — Article 6(1)(f) GDPR, our legitimate interest being the protection of the business and its clients.
• Considering voluntarily submitted crew or staff applications — Article 6(1)(b) GDPR (steps prior to a possible engagement) or Article 6(1)(f), our legitimate interest being to assess suitability; retention beyond the immediate role is based on consent, Article 6(1)(a).

Providing personal data is not a statutory requirement. It is however necessary in practice: without contact details and a description of your requirement, we cannot respond to an enquiry or provide services.

Recipients and processors

Personal data is shared only where necessary with: our website hosting and email providers acting as processors; professional advisers such as accountants and lawyers; and, within an agreed engagement, the specialist providers, management partners, yards, surveyors or authorities involved in that matter. We do not sell personal data and do not share it for marketing purposes.

International transfers

Superyacht work is international. Where personal data is transferred outside the European Economic Area, we rely on an adequacy decision of the European Commission, on the European Commission’s Standard Contractual Clauses, or on another safeguard permitted by Chapter V GDPR. Where a transfer is necessary to perform a contract you have requested, Article 49(1)(b) may apply. Details of the safeguards used for a particular transfer are available on request.

Retention

• Enquiries that do not lead to an engagement: normally up to 12 months from the last contact.
• Client and engagement records: for the duration of the relationship and normally 6 years thereafter, in line with limitation periods for claims.
• Accounting and tax records: for the periods required by Cyprus law, normally 6 years.
• Recruitment material: for the duration of the specific role, and normally up to 12 months thereafter only where the applicant has agreed to be kept on file. Consent may be withdrawn at any time.
• Hosting and security logs: kept only for the short periods applied by the hosting provider.

Security

Appropriate organisational and technical measures are used to protect personal data. No email or internet transmission can be guaranteed completely secure.

Your rights

Subject to the conditions of the GDPR and Cyprus Law 125(I)/2018, you have the right to request access to your personal data, rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. Requests may be sent to contact@a1-superyacht.com.

Automated decision-making

A1 does not use automated decision-making or profiling that produces legal or similarly significant effects.

Complaints

You may lodge a complaint with the supervisory authority in Cyprus:
Office of the Commissioner for Personal Data Protection
P.O. Box 23378, 1682 Nicosia, Cyprus
Telephone: +357 22 818456
Email: commissioner@dataprotection.gov.cy
dataprotection.gov.cy

Changes

This notice may be updated to reflect changes in our processing or in the law. The date above shows the current version.