Privacy Policy

Protecting your privacy is of great importance to us. Therefore, we handle all processes of data processing (e.g., collection, processing, and transmission) in accordance with the legal regulations of European and German data protection laws.

The following statement provides an overview of which of your data is requested on our websites, how this data is used and disclosed, how you can obtai

9. Use of Services for Marketing and Analytical Purposes

a) We use Google Analytics1. What does this mean for your data?

Google Analytics

On our websites, we use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies," text files that are stored on your computer and enable an analysis of your use of the website (see 8.). The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide further services related to website usage and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: (http://tools.google.com/dlpage/gaoptout?hl=en).

________________________________________

Right to Object

You can prevent the collection by Google Analytics, in addition to installing the browser plugin, especially in mobile device browsers, by clicking on the following link:
Deactivate Google Analytics
This will place an opt-out cookie on your device, preventing the future collection of your data by Google Analytics when visiting this website.

________________________________________

Please note that if you delete cookies in your browser settings, the opt-out cookie from Google Analytics may also be deleted, and you may need to reactivate it.

For more information on how Google Analytics works and the relevant terms of use and privacy policies for this service, please visit http://www.google.com/analytics/terms/en.html or http://www.google.com/intl/en/policies/privacy/.

10. Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights against the data controller:
- Information, correction, restriction of processing, and deletion: You have the right to free information about the data stored about you, its origin and recipient, as well as the purpose of data processing on our websites. In addition, you have the right to correction, deletion, and restriction of the processing of your personal data if the legal requirements are met.
- Right to data portability: You have the right to receive the personal data concerning you that you have provided to us as the data controller in a structured, common, and machine-readable format. We can fulfill this right by providing a CSV export of the customer data processed about you.
- Right to information: If you have exercised your right to correction, deletion, or restriction of processing against the data controller, the latter is obliged to inform all recipients to whom the personal data concerning you has been disclosed about this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients from the data controller.
- Right to object: For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you carried out on the basis of Article 6(1)(e) or (f) of the GDPR, including profiling based on these provisions. The data controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising, including profiling, insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the option, in connection with the use of services of the information society – irrespective of Directive 2002/58/EC – to exercise your right to object through automated processes using technical specifications.

- Revocability of data protection consent declarations: In addition, you can revoke your consent given to us at any time with effect for the future under the contact details provided below.
- Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement if you believe that the processing of personal data concerning you violates the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant about the status and results of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

11. Changes to this Privacy Policy

We reserve the right to change this privacy policy for valid reasons and without prior notice. Therefore, please regularly check this page for any changes to this privacy policy.

12. NauSYS Booking System

To provide you with the opportunity to stay informed about the availability of our charter yachts, we use the NauSYS booking system (Selska 90a, Sigma centar, 2nd floor, 10 000 Zagreb, Croatia) on our website.

The data entered there is transmitted exclusively to us in accordance with the agreements made with the system operators and processed only by us. Only data necessary for the functioning of the systems is processed and stored. If this is no longer the case, the data will be deleted. The operators of the booking system act independently and are responsible for compliance with the GDPR in their area.

________________________________________

1 We recommend not regularly using Google's analytics tool, as a data protection-compliant design is very difficult to implement. The Bavarian State Office for Data Protection Supervision (BayLDA) recently reviewed several websites for the data protection-compliant use of Google Analytics and concludes that very few website operators comply with data protection requirements. If you are not dependent on it, you should prefer the open-source solution Matomo (https://matomo.org/) or the unfortunately commercially associated service eTracker (https://www.etracker.com/).

n information about the information you provide to us, and what security measures we take to protect your data.

1. Who is your contact person (controller) for your data protection concerns?

Controller, as defined by data protection regulations for all data processing processes carried out on our websites, is:

Sun Charter GmbH

Address: Hans-Urmiller-Ring 11, 82515 Wolfratshausen
Tel. +49 (0) 8171 299 05, Fax: +49 (0) 8171 299 05 9

Company: SUN CHARTER GmbH
Registered office Wolfratshausen, Local Court Munich HRB 238753
Hans-Urmiller-Ring 11, 82515 Wolfratshausen
Tel. +49 (0) 8171 299 05, Fax: +49 (0) 8171 299 05 9

Managing Directors: Marko Zacherl, Jakob Jürgens

We have not appointed a data protection officer because the legal requirements for an appointment do not apply to us. Please address inquiries regarding data protection and the assertion of data subject rights (see below) to the address mentioned above.

2. What data do we need from you for the use of our websites? What data is collected and stored during use?

Personal data includes all information relating to an identified or identifiable natural person ("data subject"), such as your name, address, telephone number, date of birth, bank details, and IP address.

We collect and use your personal data only to the extent necessary to provide a functioning website and our content and services. The collection and use of your personal data generally only occur with your consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and data processing is permitted by legal regulations.

Contact Form

On our website, we provide a contact form through which you can easily contact us electronically and submit your concerns. We only collect [your name and your email address through the contact form. Providing your phone number is optional.]

Before processing the data, you will be informed during the submission process about the intended use of your data and referred to this privacy policy.

Alternatively, you can contact us via the provided email address. In this case, the personal data transmitted with your email will be stored.

We use your data solely to process your request and may contact you for this purpose using the contact information provided. These data will not be used for advertising purposes.

Legal basis for processing the data transmitted via the contact form or in the course of sending an email is Art. 6(1)(f) GDPR. If the contact aims at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR.

The processing of personal data from the input mask serves solely to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the contact form and those sent by email, this is the case when the respective conversation with you is finished. The conversation is deemed terminated when it can be inferred from the circumstances that the matter at hand has been conclusively clarified.

Right to Object

You have the right to object to the processing of your personal data at any time. To exercise this right, please use the contact options listed above. If you contact us by email and object to the storage and use of your personal data, the conversation cannot be continued.

All personal data that was stored as part of the contact will be deleted in this case.

3. How are my data used and possibly shared with third parties, and for what purpose does this happen?

We use the personal data provided by you to respond to your inquiries, create an offer, and process your booking with the respective charter company.

Sharing or other transmission of your personal data to a charter company only occurs if such sharing is necessary for the purpose of contract fulfillment or if you have expressly consented.

Legal basis for the transfer of data to third parties for the purpose of contract fulfillment is Art. 6(1)(b) GDPR.

Disclosure in cases mandated by law

We point out that, in individual cases, we are authorized to provide information on data upon order of the competent authority, insofar as this is necessary for purposes of criminal prosecution, to avert danger by the police authorities of the federal states, to fulfill the legal tasks of the federal and state constitutional protection authorities.

4. Integration and use of plugins from Facebook and other references to external social network services

All buttons of the Facebook social network are embedded on our websites through placeholders. The buttons are only loaded after clicking on the placeholder of the respective button. Only then is a connection established to the servers of the respective social network service, and information is transmitted that you are visiting our websites; however, the transmission of your usage data only occurs when you are logged into your account with the respective social network service. By clicking on the placeholder of the respective button, you agree to the data processing described in this section of our privacy policy.

Specifically for the use of Facebook buttons on our websites:

On our websites, we have integrated so-called plugins of the external social network Facebook and also link to Facebook. Responsible for Facebook and its website is exclusively Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as "Facebook"). A complete overview of the Facebook plugins can be found here: http://developers.facebook.com/docs/plugins.

Our references to Facebook are marked on our websites with the Facebook logo, whereby Facebook plugins are not used and therefore no data from you is transmitted to Facebook.

The Facebook link or the Like button from Facebook is only activated when you click on it. Before that, you will receive additional information about the details of possible data transmission to Facebook through a displayed text field, referring to this part of our privacy policy.

When you click on the Facebook references, in particular, the Like button is loaded, and a connection is established to the servers of Facebook. Information is then transmitted to Facebook that you are visiting our websites. If you are logged into Facebook through your user account, additional information, including the user data mentioned under 2., is forwarded to Facebook. This information is transmitted to Facebook, assigned to your user account, stored there, and possibly also passed on to third parties, especially Facebook's advertising partners, but only if you are logged into your Facebook user account. To prevent data transmission to Facebook, you must log out of your Facebook user account before clicking on the Facebook references on our websites. We point out that the functions associated with the Facebook references, especially the transmission of information and user data to Facebook, are not activated by simply visiting our websites but only by clicking on the Facebook references. For more information about the purpose and scope of data collection and the further processing and use of your data by Facebook, please refer to Facebook's privacy policy. This can be found on the Internet at http://de-de.facebook.com/privacy/explanation.php.

Among other things, you will find information here about options for protecting your privacy and about your further rights regarding the collection, processing, and use of your data by Facebook.

The legal basis for data processing is Art. 6(1)(a) GDPR.

On our websites, we provide links to the social media platforms Facebook, Instagram, Pinterest, SoundCloud, and YouTube. This is done through a corresponding symbol on our websites, marked with the respective logo of the respective social media platform, behind which is a corresponding link to our respective social media page. Social plugins (such as the Facebook "Like" button) are not integrated.

No data is transmitted to these services through our references to social media services. These are normal hyperlinks through which regular data transmission does not occur. If you click on the reference, you will be directly redirected to our social media presence on the respective social media service. Data transmission only occurs if you are logged into your user account on the respective social media service. You can then link or share content from our websites directly with the social media service or, in the case of YouTube, watch videos from our YouTube channel. The respective social media service may thus become aware of the content you have viewed on our websites.

The responsible entities for the social media services we link to are exclusively:

- For Facebook and its website, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA;
- For Instagram and its website, Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA;
- For Pinterest and its website, Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA;
- For SoundCloud and its website, SoundCloud Limited, c/o JAG Shaw Baker, Berners House, 47-48 Berners Street, London W1T 3NF, UK;
- For YouTube and its website, YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA;

Further information about the purpose and scope of data collection and about the further processing and use of your data by the respective social media service can be found in the privacy policies of the respective service, which are available on the internet. There, you will also find information about options for protecting your privacy and about your further rights regarding the collection, processing, and use of your data by the respective social media service. You are responsible for the data transmission to the aforementioned social network services, as you actively initiate the subsequent data processing by logging into your respective social network account and following the respective link.

**1. Legal Basis for Data Processing:**
The legal basis for data processing is Art. 6(1) lit. a GDPR.

**2. Social Media Links:**
On our websites, we provide links to the social media platforms Facebook, Instagram, Pinterest, SoundCloud, and YouTube. This is done through a corresponding symbol on our websites, marked with the respective logo of each social media platform, behind which there is a link to our corresponding social media page. Social plugins (such as the Facebook "Like" button) are not integrated. Clicking on these links does not transmit any data to these services. They are normal hyperlinks through which no data transmission usually occurs. If you click on the link, you will be redirected directly to our social media presence on the respective platform, and data transmission occurs only if you are logged into your user account on the corresponding social media service. The social media service may then potentially learn which content you viewed on our websites.

The responsible entities for the linked social media services are exclusively:

- Facebook and its website: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
- Instagram and its website: Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA
- Pinterest and its website: Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA
- SoundCloud and its website: SoundCloud Limited, c/o JAG Shaw Baker, Berners House, 47-48 Berners Street, London W1T 3NF, UK
- YouTube and its website: YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA

Further information about the purpose and scope of data collection, as well as the processing and use of your data by each social media service, can be found in the respective service's privacy policy, available on the internet.

You are responsible for the data transmission to the mentioned social network services, as you actively engage by logging into your respective social network account and following the respective link, initiating the subsequent data processing by the social network service.

**3. Security Measures:**
We have implemented various security measures to protect personal information adequately. Our databases are protected by physical, technical, and procedural measures that restrict access to the information to specifically authorized individuals in accordance with this privacy policy. Only employees who need the information to perform a specific task have access to personal information. Our staff is trained in security and privacy practices. We use standardized SSL encryption technology for the collection and transmission of data through our websites. Personal data is transmitted via SSL encryption during the order process, identifiable by the padlock symbol in the browser and the addition of "https://" in the address bar.

Please note that full data security cannot be guaranteed when communicating via email.

**4. Email Marketing (e.g., Email Newsletters):**
For sending email messages to our customers, we use the newsletter service provider MailChimp from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data mentioned below is processed by MailChimp on our behalf and stored on MailChimp's servers in the USA for this purpose. MailChimp uses your data for sending and evaluating newsletters. The privacy policy of the service provider is available at https://mailchimp.com/legal/privacy/.

The following data is transmitted during the newsletter registration:

- First name and last name
- Email address

During the registration process, your consent for the processing of data by MailChimp is obtained, referring to this privacy policy. The legal basis for data processing by our newsletter service provider after newsletter registration, given your consent, is Art. 6(1) lit. a GDPR.

The collection of your email address is for the purpose of delivering the newsletter. The data is deleted as soon as it is no longer necessary for the purpose of its collection. Your email address is therefore stored as long as the newsletter subscription is active.

The newsletter subscription can be canceled by you at any time, and each newsletter includes a corresponding link for this purpose, enabling the revocation of consent for the storage of personal data collected during the registration process.

**5. Newsletter Tracking:**
The newsletters sent by MailChimp contain a tracking pixel (see 8.) that transmits information to MailChimp when the newsletter is opened by you. The following information is collected:

- Time of access
- Click behavior on links

The legal basis for the processing of personal data by the service provider MailChimp for analytical purposes is Art. 6(1) lit. f GDPR.

The use of tracking software serves to improve the quality of our newsletter system and its content. Through the tracking software, we learn how the newsletters are used and can continuously optimize our offering.

Our legitimate interest in processing personal data pursuant to Art. 6(1) lit. f GDPR lies in these purposes.

Right to Object By exercising your right to object to receiving the newsletter (via the link above), you can simultaneously object to the processing of your data for tracking purposes.

7. Blog with Comment Functionality For the comment function on this page, in addition to your comment, information about the time of comment creation, your email address, and, if you post non-anonymously, the username you have chosen are stored.

We need your email address to contact you if a third party objects to your published content as unlawful. We also reserve the right to delete comments if they are objected to as unlawful by third parties.

Your IP address is logged and stored when commenting. This storage of the IP address is for security reasons and in case the person in question violates the rights of third parties or posts unlawful content through a submitted comment.

Comments and the associated data (e.g., IP address) are stored and remain on our website until the commented content is completely deleted or comments need to be deleted for legal reasons (e.g., offensive comments).

The legal basis for storing comments, given your consent, is Art. 6(1) lit. a GDPR. The legal basis for storing the IP and email address is Art. 6(1) lit. f GDPR.

Subsequent comments can be subscribed to by you. You will receive a confirmation email to verify that you are the owner of the entered email address.

Revocability of Granted Consents You can unsubscribe from ongoing comment subscriptions at any time. The corresponding instructions can be found in the confirmation email.

8. When using our websites, a cookie is placed on your computer. What does that mean? We use so-called cookies on our websites. Cookies are small amounts of data in the form of text information that the web server sends to your browser. These are only stored on your hard drive. Cookies can only be read by the server that placed them and contain information about what you viewed on a website and when. Cookies themselves only identify the IP address of your computer and do not store personal information such as your name. The data stored in cookies is not linked to your personal data (name, address, etc.). We use cookies to make our website more user-friendly. Some elements of our website require the calling browser to be identified even after a page change. The following data is stored and transmitted in cookies: 1. Language settings 2. Wishlist We also use cookies on our website that allow us to analyze user browsing behavior. Essential Essential cookies enable basic functions and are necessary for the proper functioning of the website. Borlabs Cookie Name: Borlabs Cookie Provider: Owner of this website, Impressum Purpose: Saves the settings of visitors selected in the Borlabs Cookie box. Cookie Name: borlabs-cookie Cookie Runtime: 1 year Statistics Statistical cookies collect information anonymously. This information helps us understand how our visitors use our website. Marketing Marketing cookies are used by third parties or publishers to display personalized advertising. They do this by tracking visitors across websites. External media Content from video platforms and social media platforms is blocked by default. If cookies from external media are accepted, access to this content no longer requires manual consent. Facebook Name: Facebook Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland Purpose: Used to unlock Facebook content. Privacy Policy: [Link to Facebook Privacy Policy] Host(s): .facebook.com Google Maps Name: Google Maps Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Purpose: Used to unlock Google Maps content. Privacy Policy: [Link to Google Privacy Policy] Host(s): .google.com Cookie Name: NID Cookie Runtime: 6 months Instagram Name: Instagram Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland Purpose: Used to unlock Instagram content. Privacy Policy: [Link to Instagram Privacy Policy] Host(s): .instagram.com Cookie Name: pigeon_state Cookie Runtime: Session OpenStreetMap Name: OpenStreetMap Provider: Openstreetmap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom Purpose: Used to unlock OpenStreetMap content. Privacy Policy: [Link to OpenStreetMap Privacy Policy] Host(s): .openstreetmap.org Cookie Name: _osm_location, _osm_session, _osm_totp_token, _osm_welcome, _pk_id., _pk_ref., _pk_ses., qos_token Cookie Runtime: 1-10 years Twitter Name: Twitter Provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland Purpose: Used to unlock Twitter content. Privacy Policy: [Link to Twitter Privacy Policy] Host(s): .twimg.com, .twitter.com Cookie Name: __widgetsettings, local_storage_support_test Cookie Runtime: Unlimited Vimeo Name: Vimeo Provider: Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA Purpose: Used to unlock Vimeo content. Privacy Policy: [Link to Vimeo Privacy Policy] Host(s): player.vimeo.com Cookie Name: vuid Cookie Runtime: 2 years YouTube Name: YouTube Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Purpose: Used to unlock YouTube content. Privacy Policy: [Link to Google Privacy Policy] Host(s): .google.com Cookie Name: NID Cookie Runtime: 6 months The data collected in this way is pseudonymized through technical measures. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with your other personal data.

The legal basis for processing personal data using technically necessary cookies and cookies for analytical purposes is Article 6(1)(f) of the General Data Protection Regulation (GDPR).

The purpose of using technically necessary cookies is to simplify the use of websites for you. Some functions of our website cannot be offered without the use of cookies. It is necessary for the browser to be recognized even after changing pages.

User data collected by technically necessary cookies is not used to create user profiles.

The use of analytical cookies is for the purpose of improving the quality of our website and its content. Through analytical cookies, we gain insights into how the website is used, allowing us to continually optimize our offering.

These purposes constitute our legitimate interest in processing personal data according to Article 6(1)(f) of the GDPR.

________________________________________

Right to Object

Cookies are stored on your computer and transmitted to our site. As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time, and this can also be done automatically. If cookies are deactivated for our website, not all functions of the website may be fully usable.

________________________________________

Some of our services also use so-called tracking bugs or tracking pixels. These are usually 1x1 pixel code snippets that can identify and recognize your browser type through the browser ID – the individual fingerprint of your browser. These web bugs send your IP address, the internet address (URL), the time the web bug was viewed, your browser type, and previously set cookie information to a web server. This allows the service provider to see when and how many users accessed the pixel, or whether and when an email was opened or a website visited.

________________________________________

Right to Object

To prevent web bugs on our websites, you can use tools such as webwasher, bugnosys, or AdBlock. To prevent web bugs in our newsletter, please configure your email program so that no HTML is displayed in messages or external graphics are blocked. Web bugs are also prevented if you read your emails offline. Without your explicit consent, we will not use web bugs to collect personal data about you unnoticed or transmit such data to third-party providers and marketing platforms.