Privacy Policy

Last updated: March 2025

1. Data Controller

Your data is controlled by Sailing School DOO, Kraljice Marije 19, Belgrade, Serbia (Sail With Me, “we”, “us”). For any privacy-related enquiries contact us at team@sailwith.me.

2. Data We Collect

Inquiry form

When you submit an inquiry through our website we collect:

  • Name — to address you personally
  • Phone number — to follow up via WhatsApp or phone
  • Preferred dates, number of guests, destination — to prepare a relevant offer
  • Free-text message — any additional details you choose to share

This data is stored in a private Google Sheet accessible only to Sail With Me staff, and sent to us via Mailgun (email delivery service).

Analytics & marketing

With your consent we collect anonymised behavioural data through Google Analytics 4 (page views, session duration, traffic source) and serve and measure ads through the Meta Pixel (Facebook/Instagram). No data is shared with these third parties before you grant consent via our cookie banner.

Cookies

We use Cookiebot to manage cookie consent. The following categories are used:

  • Necessary — consent preference cookie set by Cookiebot. Always active.
  • Statistics — Google Analytics cookies (_ga, _ga_*). Active only with your consent.
  • Marketing — Meta Pixel cookies. Active only with your consent.

You can withdraw or change your consent at any time by clicking the cookie icon in the bottom-left corner of the page.

3. Legal Basis for Processing

  • Inquiry form data — processed on the basis of legitimate interest (Art. 6(1)(f) GDPR) to respond to your enquiry, and pre-contractual steps (Art. 6(1)(b)) where you are asking for a quote.
  • Analytics & marketing cookies — processed on the basis of your consent (Art. 6(1)(a) GDPR).

4. Data Retention

  • Inquiry data is retained for 2 years from the date of submission, after which it is deleted.
  • Analytics data is retained according to Google's default retention settings (14 months in GA4).
  • Cookie consent records are retained for 12 months.

5. Third-Party Processors

We use the following sub-processors, each bound by a data processing agreement:

  • Mailgun (Sinch) — email delivery, EU region servers
  • Google LLC — Google Sheets (data storage) and Google Analytics 4
  • Meta Platforms Ireland Ltd — Meta Pixel
  • Cybot A/S (Cookiebot) — cookie consent management
  • Vercel Inc. — website hosting and serverless functions, processed in the EU (Frankfurt, Germany)

Where processors are located outside the EU/EEA, transfers are covered by Standard Contractual Clauses (SCCs) or an adequacy decision.

6. Your Rights

Under GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data (“right to be forgotten”)
  • Restriction — ask us to limit how we use your data
  • Portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interest
  • Withdraw consent — at any time for consent-based processing, without affecting prior processing

To exercise any right, email us at team@sailwith.me. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

7. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top will always reflect the most recent version. Continued use of the website after changes constitutes acceptance of the updated policy.