Privacy Policy

Last updated: 08-Mar-2026

The website yachtlicense.yalrowingr.com respects your right to the protection of personal data. This Privacy Policy explains what data we collect, for what purposes we use it, on what basis we process it, how long we store it, and what rights you have in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable legislation of Greece.

1. Who is the data controller

The controller of personal data is:

“ΝΑΥΤΑΘΛΗΤΙΚΟΣ ΟΜΙΛΟΣ ΜΑΡΙΟΥΠΟΛΙΤΩΝ ΘΕΣΣΑΛΟΝΙΚΗΣ” (N.O.MA.TH.)

Address: 3rd Floor, ERMOU 18, 54624, Thessaloniki, Greece

Tax ID (Α.Φ.Μ.): 996400291

E-mail: info@yalrowingr.com

For any questions regarding the processing of personal data, you may contact us using the details above.

2. What data we may collect

Depending on how you use the website, we may process the following data:

- first and last name;

- phone number;

- e-mail address;

- preferred participation dates;

- city of participation;

- number of participants;

- the content of your message;

- technical data when using the website, including IP address, device type, browser, language, date and time of visit;

- cookie data and similar technologies, if they are used on the website.

3. How we obtain data

We obtain personal data:

- when you fill out a form on the website;

- when you contact us by phone, e-mail, WhatsApp, or any other indicated means;

- automatically when you use the website, if technical logs, cookies, or analytics tools are used.

4. For what purposes we process data

We may process your personal data for the following purposes:

- to respond to your request;

- to contact you regarding participation in a group;

- to provide information about the training program for club members;

- to organize communication regarding your inquiry;

- to maintain internal records of inquiries;

- to ensure website security and prevent abuse;

- to comply with applicable legal obligations.

5. Legal bases for processing

We process your data on one or more of the following legal bases:

- your consent — when you voluntarily submit a form or agree to certain processing;

- the necessity to take steps at your request before entering into a relationship with the club — for example, when you ask us to contact you and provide information;

- the club’s legitimate interest — for example, for processing and recording incoming inquiries, protecting the website, and organizing communication;

- compliance with legal obligations — where required by law.

6. To whom we may disclose data

We do not sell your personal data.

We may disclose data only to the extent necessary for the relevant purpose to the following categories of recipients:

- hosting, domain, and website technical support providers;

- communication service and e-mail providers;

- partners, if this is necessary to review your request and only to the extent required for that purpose;

- public authorities, if such disclosure is required by law.

7. International data transfers

If, as part of the operation of the website or the services used, personal data is transferred outside the European Economic Area, such transfer shall be carried out only where there is a lawful basis and appropriate safeguards as provided for by the GDPR.

8. Data retention period

We store personal data no longer than necessary for the purposes for which it was collected, unless a longer period is required by law.

Indicatively:

- contact form data — for up to 12 months from the last contact;

- data related to legal obligations or accounting records — for the period established by applicable law;

- technical logs and security data — for a reasonable period necessary to protect the website and investigate incidents.

9. Cookies and similar technologies

The website may use technically necessary cookies for proper operation. If analytical, marketing, or other non-essential cookies are used, they shall be applied only where there is an appropriate legal basis and, where required, after obtaining the user’s consent.

If necessary, a separate Cookie Policy may be published on the website.

10. Your rights

In accordance with the GDPR, you may have the right to:

- request access to your data;

- request rectification of inaccurate data;

- request erasure of data;

- request restriction of processing;

- object to processing in cases provided by law;

- request data portability, where applicable;

- withdraw consent at any time, where processing is based on consent;

- lodge a complaint with the competent data protection authority.

11. Where to lodge a complaint

If you believe that the processing of your personal data violates the law, you have the right to lodge a complaint with the competent supervisory authority.

For Greece, this is:

Hellenic Data Protection Authority (HDPA / Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα)

12. Data protection

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

13. Children’s data

The website is not intended for independent use by children without the involvement of parents or legal guardians. If you believe that a minor has provided us with data without the appropriate involvement of a legal guardian, please contact us.

14. Changes to this policy

We may periodically update this Privacy Policy. The current version is always published on the website with the date of the last update indicated.