Privacy Policy

Last updated 22 October 2026

This policy explains what personal data Vista Yachting collects when you visit vistayachting.com, book or ask about a cruise, fill in a charter preference sheet, apply for a job or sign up to our newsletter, how we use it, and the choices and rights you have.

Who we are

Vista Yachting is a trade name of LA VISTA TRAVEL I.K.E. (VAT no. 801041264), which runs yacht cruises from Vlychada Marina in Santorini and is the controller of the personal data described in this policy.

Vista Yachting, Epar.Od. Firon-Ormou Perissis, Thira 847 00, Santorini, Greece · info@vistayachting.com · +30 22860 24422

What we collect

When you book a cruise: your name, e-mail address and phone number, the cruise, date and number of guests, your pickup hotel or meeting point, and any request you add. Payment is handled by our booking system and its payment provider; we never see or store your full card number.
When you contact us, through our contact form, «Curate your trip», a yacht charter enquiry, e-mail, phone or WhatsApp: your name, your contact details and what you tell us about your trip, such as dates, group size, the price range you have in mind and your interests.
When you charter Lucky Clover and fill in the charter preference sheet: the names, passport or ID numbers, nationalities and dates of birth of the guests (the captain submits the crew and passenger list to the Greek port authorities before departure), your travel details, and your preferences for food, drinks and the itinerary. If you tell us about allergies or about children joining the charter, we use this only to prepare the charter safely.
When you apply for a job: your name, contact details, location, the position you are interested in and your CV.
When you sign up to our newsletter: your e-mail address.
When you visit our website: technical data such as your IP address, device and browser, the pages you visit and how you use them, collected with cookies and similar technologies as described below.
If you book through a partner such as GetYourGuide, Viator or Airbnb, the partner shares with us the details we need to run your cruise. The partner’s own privacy policy applies to what you give them.

Why we use it, and on what legal basis

To take and run your booking: the pickup, the cruise itself, changes, cancellations and refunds (to perform our contract with you).
To answer your questions and prepare a proposal (steps you ask for before a contract, and our legitimate interest in replying to you).
To submit the crew and passenger list of a charter to the port authorities, and to keep our accounting and tax records (our legal obligations).
To plan food and safety on board around allergies you tell us about (your explicit consent, which you give by sharing them, and where needed your vital interests). You can withdraw it at any time, but we would then not be able to cater for the allergy.
To consider your job application (steps before an employment contract).
To send you our newsletter (your consent; you can unsubscribe at any time).
To measure and improve our website and to show our ads to people who may be interested (your consent, given in our cookie banner).
To keep our website and bookings secure and to prevent fraud (our legitimate interests).

We do not sell your personal data, and we do not use it for automated decisions that affect you.

Cookies and similar technologies

Cookies are small text files placed on your device. Some are needed for the website and the booking system to work. We use the others only if you accept them in our cookie banner, and you can change your choice at any time from the cookie settings or by deleting cookies in your browser.

Necessary: they remember your cookie choice (CookieYes) and keep your booking in progress (our booking system).
Analytics: Google Analytics and Microsoft Clarity show us how visitors use the website, so we can improve it.
Advertising: Google Ads, Meta (Facebook and Instagram) and Microsoft Advertising measure our ads and show them to people who may be interested.
Embedded content: YouTube videos and the reviews widget (Trustindex) may set their own cookies when they load.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

For guidance on turning cookies off in every modern browser, see the About Cookies website.

Transfers outside Europe

Some of these providers process data outside the European Economic Area, for example in the United States. Where they do, the transfer is protected by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

How long we keep it

We keep personal data only as long as we need it for the purpose we collected it for:

bookings and invoices: as long as Greek tax and accounting law requires;
enquiries and messages: as long as needed to answer them and follow up;
charter preference sheets, passport details and allergies: until the end of your charter, and the passenger list for as long as the law requires;
job applications: for the season you applied for, unless you ask us to keep your CV for later seasons;
newsletter: until you unsubscribe;
cookies: for the period shown in the cookie settings.

How we protect it

We keep personal data in professional systems, with access limited to the people who need it, and we ask our providers to protect it. Passport details and allergies go only to the people who need them for your charter.

Your rights

You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before. Write to info@vistayachting.com and we will reply within one month.

If you think we have not handled your data properly, you can complain to the Hellenic Data Protection Authority, Kifisias 1-3, 115 23 Athens, www.dpa.gr.

Children

Families are welcome on our cruises, but our website is not meant for children to use on their own. We collect a child’s details, such as name, date of birth and food needs, only from a parent or guardian, for the cruise or charter the child joins.