Privacy Policy
With this privacy policy, we inform you about the scope of the processing of your personal data ("data") in connection with our website at www.eseaboats.com (the "Website"). This policy does not apply to linked third-party websites that are not owned or controlled by ESEA Boats.
We only use your personal data in accordance with applicable data protection law, in particular the EU General Data Protection Regulation ("GDPR") and the Dutch GDPR Implementation Act (Uitvoeringswet AVG), and only as described in this privacy policy.
Personal data is any information relating to an identified or identifiable individual, for example your name, date of birth, e-mail address, postal address or telephone number, as well as online identifiers such as your IP address. Information that cannot be used to determine your identity, such as aggregated visitor counts, is not personal data. We reserve the right to put anonymised data to additional uses to the extent permitted by law.
Who is responsible for data processing
The controller responsible for data processing under the GDPR is:
ESEA Boats B.V.
Amsterdam, the Netherlands
Web: www.eseaboats.com
E-mail: it@eseaboats.com
General information on data processing
In the course of our business and Website operations, we process personal data. This includes disclosure to third parties and, where applicable, transfer to countries outside the European Economic Area ("EEA"). Where we transfer data outside the EEA, we highlight this below.
Data processing activities
The categories of data concerned, processing purposes, legal bases, recipients and, where applicable, transfers to third countries, are set out below.
a) Hosting
To provide the Website, we use the hosting and infrastructure services of one or more cloud hosting providers, which process the data mentioned below on our behalf. The legal basis for this processing is our legitimate interest in providing a secure and reliable website in accordance with Art. 6(1)(f) GDPR.
b) Log files during your website visit
When you visit the Website, we log:
- the name(s) of the pages accessed,
- date and time of access,
- the amount of data transferred,
- browser type and version,
- the operating system used,
- the referrer URL (the previously visited website),
- your IP address, and
- the requesting internet service provider.
The legal basis for this processing is our legitimate interest in the ongoing provision and security of the Website in accordance with Art. 6(1)(f) GDPR. Log files are deleted after seven days unless needed to investigate a specific security incident or legal violation identified within that period.
c) Contacting us
If you contact us, for example through our contact form, we process the data you provide — such as your name, contact details and message — to process and respond to your enquiry. The legal basis for this processing is our legitimate interest in handling your enquiry (Art. 6(1)(f) GDPR) and/or, where your enquiry relates to a potential purchase, our need to take steps prior to entering into a contract with you (Art. 6(1)(b) GDPR).
d) Newsletter
If you subscribe to our newsletter, we process your e-mail address (and, if provided, your name) to send you updates about ESEA Boats and our electric boat models. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent and unsubscribe at any time, free of charge, using the link in every newsletter or by contacting us.
e) Enquiries, configurator and quote requests
Where you use tools on the Website to configure a boat, request a quotation, or otherwise express interest in our products or services, we process the data you provide (such as your name, contact details, country and preferences) in order to respond to your request and, where relevant, take steps towards entering into a contract with you. The legal basis for this processing is Art. 6(1)(b) GDPR (performance of, or steps towards, a contract) and/or Art. 6(1)(f) GDPR (our legitimate interest in following up on commercial enquiries).
f) Contract fulfilment
Where you enter into a contract with us for the purchase of a boat or related services, we process your data as necessary to perform that contract, including order processing, delivery, after-sales service and warranty administration, and to comply with our legal obligations (for example accounting and tax obligations). The legal basis for this processing is Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR.
g) Use of cookies
We use cookies on the Website. Cookies are small text files stored on your device and saved by your browser. The legal basis for the use of cookies is your consent (Art. 6(1)(a) GDPR) as well as, for strictly necessary cookies, our legitimate interest (Art. 6(1)(f) GDPR).
Analysis and tracking tools
Google Analytics
We use Google Analytics, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) / Google LLC (USA). Data collected may be transmitted to and stored on a Google server, including in the United States. You can object to data collection and processing by Google Analytics by installing the opt-out browser add-on available at: http://tools.google.com/dlpage/gaoptout?hl=en. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), given via our cookie consent banner.
Where personal data is transferred to the United States or another country outside the EEA, such transfers take place on the basis of the European Commission's Standard Contractual Clauses or another appropriate safeguard recognised under Chapter V GDPR.
Amplitude
We use Amplitude, a product analytics service provided by Amplitude, Inc. (San Francisco, California, USA), to understand how visitors interact with the Website — for example which pages and features are used and how users navigate through the site — so that we can analyse and improve the user experience of our Website and services. For this purpose, Amplitude processes usage and event data such as the pages and features you view, your interactions and clicks, approximate location, device and browser type, operating system, and online identifiers including your IP address.
Data collected may be transmitted to and stored on servers operated on Amplitude's behalf, including in the United States. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), given via our cookie consent banner. You can withdraw your consent at any time with future effect by adjusting your preferences in our cookie settings.
Where personal data is transferred to the United States or another country outside the EEA, such transfers take place on the basis of Amplitude's self-certification under the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, or another appropriate safeguard recognised under Chapter V GDPR.
Duration of data storage
We only store personal data for as long as necessary for the purposes for which it is processed, or until any consent you have given is withdrawn. Where statutory retention obligations apply (for example under Dutch tax and accounting law), the retention period for certain data may be up to 7 years, irrespective of the original processing purpose.
Transfer of personal data
We do not disclose or otherwise share your personal data with third parties unless this is necessary to perform our services (Art. 6(1)(b) GDPR), you have consented to the disclosure (Art. 6(1)(a) GDPR), or disclosure is required or permitted by law.
We may engage external service providers as processors within the meaning of Art. 28 GDPR, for example for website hosting, data management, marketing, logistics and reporting. Such providers process your data strictly on our instructions and under contractual data processing agreements. We remain responsible for the protection of your data, ensured through contractual, technical and organisational measures.
Personal data may also be disclosed to third parties where we are legally obliged to do so, for example by court order (Art. 6(1)(c) GDPR), or where necessary to support legal or criminal proceedings or to protect our legitimate interests (Art. 6(1)(f) GDPR).
Automated decision-making
We do not carry out automated decision-making, including profiling, within the meaning of Art. 22(1) and (4) GDPR.
Your data subject rights
a) Right of access
Upon request, we will provide you, free of charge, with information about the personal data we hold about you.
b) Rectification, erasure and restriction of processing
If your data is inaccurate or no longer required, you can ask us to correct, delete or restrict its processing, insofar as this is legally possible. You have the right to object to processing based on our legitimate interest, including profiling based on it, and to object at any time to processing for direct marketing purposes.
c) Right to withdraw consent
You may withdraw any consent you have given at any time, with future effect. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
d) Right to data portability
Where data is processed on the basis of a contract, consent, or automated means, you have the right to receive your data in a structured, commonly used and machine-readable format, and to transfer it to another controller.
e) Exercising your rights and right to complain
To exercise any of these rights, or if you have questions about our data processing, please contact us. You also have the right to lodge a complaint with a data protection supervisory authority — for ESEA Boats, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl). We would, however, appreciate the opportunity to address your concerns directly before you contact the supervisory authority.
Security
We use up-to-date technical measures to protect your data, including SSL/TLS encryption for online forms and firewalls to prevent unauthorised external access. Technical and organisational measures protect your personal data against accidental or intentional manipulation, loss, destruction or unauthorised access.
Updating your information
If you believe the information we hold about you is inaccurate, or that we are no longer entitled to use it, and you wish to request rectification, erasure, or object to its processing, please contact us. For your protection, we may ask you to verify your identity before responding to such requests.
We may decline certain requests where permitted by law, for example where a request is unlawful or would infringe on trade secrets, intellectual property, or the privacy of another individual, or where fulfilling an objection would prevent us from continuing to provide our services to you.
Links to other providers
The Website may contain links to websites operated by other companies. We have no influence over the content of these third-party websites and accept no liability for them. The relevant operator is responsible for the content of its own pages. Links found to lead to unlawful content will be removed promptly once we become aware of this.
Personal data and children
Our Website and services are aimed at individuals aged 18 and over. We do not knowingly collect, use or disclose personal data from minors under the age of 18 without the consent of a parent or legal guardian.
Changes and updates to this privacy policy
We may amend this privacy policy from time to time to reflect changes in our data processing activities or in the law. We recommend you review this page periodically. Where changes require your cooperation (for example renewed consent) or individual notification, we will inform you accordingly.
Contact
If you have any concerns about your privacy, a possible compromise of your data, or any other questions about this privacy policy, please contact us at it@eseaboats.com.