GDPR & Data Protection
Privacy Policy
Last updated: September 2026
1. Data Controller
This Privacy Policy outlines how SAS BELLAYACHT collects, uses, and protects your personal information in compliance with the European General Data Protection Regulation (GDPR No. 2016-679) and the French Data Protection Act.
Data Controller: SAS BELLAYACHT — 22 Avenue Sainte-Marguerite, 06150 Cannes, France.
Data Protection Contact: Mathieu GUEDIN — contact@bellayacht.com | Telephone: +33 6 69 46 09 45.
2. Categories of Data Collected
We may collect and process the following information when you use our website or contact our yacht brokers:
- Identity and Contact Details: Full name, email address, telephone number, country of residence (via contact forms, valuation requests, Yacht Acquisition Club applications, or guide downloads).
- Yachting Project Requirements: Preferred vessel type, target length, budget, usage program, technical preferences, and details of any yacht trade-in.
- Technical & Browsing Data: IP address, browser type, device information, country-level geolocation (used to adapt currency display EUR/USD), visited pages, and session duration.
3. Purposes and Legal Grounds for Processing
- Responding to Inquiries & Organizing Viewings: Legal basis: Performance of pre-contractual steps at your request.
- Executing Brokerage & Search Mandates: Legal basis: Performance of our brokerage contract.
- Personalized Yacht Alerts & Market Updates: Legal basis: Your explicit consent or our legitimate interest in sharing matching opportunities.
- Website Security & Fraud Prevention: Legal basis: Legitimate interest in safeguarding digital infrastructure.
- Compliance with Anti-Money Laundering (AML) Laws: Legal basis: Legal obligation under French and European maritime and financial legislation.
4. Data Sharing & Third-Party Disclosure
Bella Yacht does not sell, rent, or trade your personal data to third parties. Information is shared strictly with:
- Authorized brokers and internal team members of Bella Yacht.
- Trusted technical service providers subject to strict confidentiality terms: our CRM platform (HubSpot), secure hosting servers, and web security network (Cloudflare).
- Professional partners strictly required to complete a transaction (certified marine surveyors, maritime attorneys, flag registrars) upon your consent.
5. Retention Periods
- Prospective Buyer/Seller Inquiries: Retained for 3 years from the date of last contact.
- Contractual Clients: Retained for 10 years following completion of the transaction (statutory accounting and maritime compliance requirement).
- Technical Server Logs: Retained for a maximum duration of 12 months.
6. Your Rights Under GDPR
Under GDPR, you have the right to:
- Access and Rectification: Request a copy of your stored data and request any necessary corrections.
- Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal record-keeping requirements.
- Restriction and Objection: Object at any time to marketing communications or processing of your information.
- Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
To exercise any of your rights, contact us at contact@bellayacht.com. You also have the right to lodge a formal complaint with the competent supervisory authority (in France: the CNIL at www.cnil.fr).