1. General information
This Privacy Policy explains how personal data is collected, used, stored, shared and protected when using the YachtFinder24 platform available at YachtFinder24.com (the ‘Platform’).
The Platform is currently operated as a website intended primarily for users and listings from Europe and selected neighbouring countries. If a mobile application is launched in the future, this Policy will be updated accordingly.
Personal data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 (the ‘GDPR’), and, where appropriate, the laws applicable in the United Kingdom and other countries in which the Platform is available.
2. Data controller
The controller of personal data is:
Necsaris GroupCalle Baleares 4
38670 Adeje
Santa Cruz de Tenerife
Spain
Email: info@necsaris.com
Questions about privacy and requests concerning the exercise of data subject rights may be sent to the same address.
3. Platform users
YachtFinder24 is intended for adults. User accounts and the publication of listings are available to persons who are at least 18 years old.
We do not knowingly collect personal data from children. If we learn that an account has been created by a minor without the required legal basis, we may suspend or delete it.
4. Personal data we may process
The scope of the data depends on how the Platform is used.
4.1. Private account data
We may process, among other things:
- first name and surname;
- email address;
- telephone number, if provided;
- country, city or approximate location;
- data necessary to verify the account;
- a secure password hash if the user signs in with an email address and password.
4.2. Business account data
We may process, among other things:
- the contact person’s first name and surname;
- company name;
- business email address;
- mandatory telephone number;
- company address;
- country and location;
- NIF, VAT number or other tax details where required for settlements and invoicing;
- data necessary to verify the account.
4.3. Sign-in with Google or Apple
If a user chooses to sign in with Google or Apple, we may receive the following from the selected provider:
- a unique account identifier;
- email address;
- information as to whether the email address has been verified;
- first name and surname, if shared by the user;
- profile picture, if available and shared;
- other basic data covered by the consent given to the sign-in provider.
When using Apple, the user may use a private relay address instead of sharing their actual email address.
Google and Apple also process data as independent providers of their own services, in accordance with their respective privacy policies.
4.4. Listing data
In connection with publishing listings, we may process:
- the listing title, description and category;
- the price and information about the offer;
- technical details of the item listed;
- photographs, videos and other content uploaded by the user;
- a precise or approximate location, depending on the seller’s choice;
- documents or identification numbers associated with the listed item, if the feature for adding them is available;
- seller details intended for public display.
Before uploading documents, the user should remove personal data, document numbers, payment data and other information that is not necessary to present the offer.
4.5. Communication data
We may process:
- first name;
- email address;
- optional telephone number;
- message content;
- information about the listing to which the enquiry relates;
- correspondence with YachtFinder24 support.
Messages between a buyer and a seller may be stored in both parties’ accounts.
4.6. Payment and billing data
Once paid services are launched, we may process:
- data necessary to issue an invoice;
- information about the selected service;
- the payment amount, currency and status;
- transaction identifier;
- payment information supplied by the payment service provider.
Payments may be made through Stripe or by bank transfer. YachtFinder24 does not store full payment card details.
Payments will relate to publishing, extending or promoting listings and will not constitute payment processing for the boat, engine, trailer, equipment or any other listed item being sold.
4.7. Technical and security data
When the Platform is used, the following may be processed automatically:
- IP address;
- date and time of connection;
- device type;
- browser type and version;
- operating system;
- language and service settings;
- pages visited and basic activity information;
- error and security logs;
- session identifiers and information stored in cookies or localStorage.
5. Public data in listings
Public listings may be visible to all users and indexed by internet search engines.
For a business seller, the following in particular may be publicly visible:
- company name;
- first name and surname of the contact person;
- country, city and other location details;
- company or business address, if designated for publication;
- telephone number after the relevant button is clicked;
- other information included in the business profile and listing.
The email address is not published directly. Contact is made through the YachtFinder24 form.
For a private seller, primarily the first name may be publicly visible. The email address is not published, and the telephone number becomes visible only after the relevant button is clicked, if the seller has chosen to share it.
The precision of the location depends on the seller’s choice when adding the listing. An exact point or only an approximate area may be shown.
After a listing is deleted, copies may remain for some time in the caches of search engines or external services, over which YachtFinder24 does not always have direct control.
6. Purposes of processing
Data may be processed for the purpose of:
- creating, verifying and administering an account;
- distinguishing between private and business accounts;
- publishing, editing, promoting and managing listings;
- enabling contact between an interested user and a seller;
- storing message history in user accounts;
- providing Favourites and user settings;
- providing paid services and handling payments and invoices;
- handling reports and providing technical support;
- ensuring the security of the Platform;
- detecting spam, attempted fraud, bots, abuse and breaches of the terms;
- compiling statistics and improving the Platform;
- complying with tax, accounting and legal obligations;
- establishing, pursuing or defending legal claims;
- sending marketing communications where the user has given the required consent.
7. Legal bases for processing
Data may be processed on the basis of:
- performance of a contract or steps taken before entering into a contract — in particular for registration, publishing listings, handling messages and providing paid services;
- compliance with a legal obligation — in particular in tax, accounting and security matters and when cooperating with competent authorities;
- the controller’s legitimate interests — in particular to protect the Platform, prevent fraud and spam, improve services and pursue claims;
- consent — in particular in relation to optional cookies, marketing, newsletters, precise location or additional features requiring consent.
Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
8. Contact between buyer and seller
A message sent through the YachtFinder24 form is forwarded to the relevant seller and may be stored in both parties’ accounts.
Messages may be analysed automatically or manually where necessary to detect spam, fraud, illegal content, breaches of the terms or threats to users.
YachtFinder24 does not plan to record or monitor telephone calls or SMS messages between users.
9. Expired and deleted listings
When a listing expires, it ceases to be publicly visible on the Platform but may remain in the seller’s account so that it can be reactivated later.
The seller may delete a listing, its photographs and other added content. Certain information may be retained for the period necessary to comply with legal obligations, prevent abuse or defend claims.
10. Payments and invoices
Listings may initially be offered free of charge. Once paid services are launched, payment may be made through Stripe or by bank transfer.
Stripe may process identification, contact, transaction and technical data, as well as other information required to process payments and prevent fraud.
Full payment card details are not stored by YachtFinder24.
Billing data is used to process payments, maintain accounting records, issue invoices and comply with tax obligations.
12. Fraud and abuse prevention
YachtFinder24 may use technical safeguards and filters to detect:
- automated spam;
- bots;
- fake accounts and listings;
- suspicious sign-ins;
- attempted fraud;
- content that is unlawful or contrary to the terms.
If a risk is detected, a particular action may be temporarily blocked or referred for manual review.
A user may contact the controller if they believe that an action has been restricted in error.
13. Recipients of personal data
Data may be disclosed to:
- the seller to whom the user sends an enquiry;
- Stripe and payment institutions;
- Google or Apple in connection with the selected sign-in method;
- providers of hosting, infrastructure, file storage and backups;
- email and technical service providers;
- providers of security and protection against spam and abuse;
- accountants, lawyers and other professional advisers;
- public authorities where disclosure is required by law.
Providers acting on the controller’s instructions may process data only to the extent necessary to provide the specified services.
14. Transfers of data outside the EEA
Google, Apple, Stripe or other technical providers may process data in countries outside the European Economic Area.
Where data is transferred outside the EEA, the appropriate legal bases and safeguards required by law are used, such as a European Commission adequacy decision, standard contractual clauses or other appropriate mechanisms.
15. Data retention period
Data is retained no longer than necessary for the purpose for which it was collected, unless a longer retention period is required by law.
In particular, the following criteria apply:
- account data — for the lifetime of the account and, after deletion, for the period necessary to comply with legal obligations, protect against abuse or defend claims;
- expired listings — in the seller’s account until reactivation, deletion or deletion of the account;
- messages — for the period needed for communication, security, dispute handling and the defence of claims;
- payment data, invoices and accounting records — for the period required by tax and accounting law;
- security logs — for the period necessary to detect abuse and protect the Platform;
- marketing consents and opt-outs — for as long as necessary to demonstrate consent or honour an opt-out;
- backups — until replaced as part of the normal backup cycle.
At the end of the applicable period, the data is deleted or anonymised.
16. Account deletion
A user may delete their account using the relevant feature or send a request to info@necsaris.com.
Deleting an account does not always result in the immediate deletion of all data. Certain information may be retained where required by law or necessary for settlements, fraud prevention or the defence of claims.
17. User rights
A user may have the right to:
- access their data;
- receive a copy of their data;
- rectify their data;
- erase their data;
- restrict processing;
- object to processing;
- data portability in the cases provided for by law;
- withdraw consent;
- lodge a complaint with a supervisory authority.
The right to data portability does not have to be exercised through an automated button in the account. A user may submit an appropriate request to info@necsaris.com.
The controller may ask for information necessary to verify the identity of the person submitting the request.
Requests are handled without undue delay and within the time limits laid down by applicable law.
A user may also lodge a complaint with the competent supervisory authority, in particular:
Agencia Española de Protección de Datos (AEPD)Spain
18. Data security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration, destruction or disclosure.
User passwords are not stored in plain text.
However, no information system can guarantee complete security.
19. External links and services
The Platform may contain links to external websites or services.
When a user proceeds to such a service, its own privacy policy applies. YachtFinder24 is not responsible for the way in which independent external services process data.
20. Changes to this Privacy Policy
This Policy may be updated in connection with changes to the Platform’s functionality, the launch of a mobile application, the addition of new providers, changes in law or changes in the manner in which data is processed.
The current version will be published on YachtFinder24.com together with the date of the last update.
Where changes are material, users may be informed through the Platform or by email.
21. Contact
For matters relating to privacy and data protection, please contact:
Necsaris GroupCalle Baleares 4
38670 Adeje
Santa Cruz de Tenerife
Spain
Email: info@necsaris.com
Last updated: October 20, 2026