Last updated: October 2026
This privacy policy sets out how our company uses and protects any information that you give us when you use this website.
Our company is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
Data controller
GIANT M.C.P.Y., MCPY Registry No. 4424, VAT EL996505680, Kiouptsidou 11, Kalamaria, 55133 Thessaloniki, Greece. Email: info@babasails.eu
What we collect and why
- Booking details (name, email, phone, date, number of guests): to make and
manage your booking. - Passenger details required by the Greek port authority: only to comply with the law
for each trip. - Payment: card payments are processed by myPOS (myPOS Ltd). We do not store
your card number. - Website use: cookies and Google Analytics, to see how the site is used. You can
refuse non-essential cookies in the cookie banner.
Legal basis
We process your data to carry out your booking (contract), to comply with Greek law (passenger lists), and, for analytics and newsletters, with your consent.
Who we share it with
Only with service providers that help us run the bookings: myPOS (payments), our booking platform and its hosting (Supabase, Cloudflare), our email provider, and Google (analytics). We do not sell your data.
How long we keep it
Booking and invoice records for as long as Greek tax law requires. Passenger details only as long as the law requires for each trip. Marketing data until you unsubscribe.
Your rights
You can ask to see, correct or delete your data, or object to its use, by emailing info@babasails.eu. You also have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr).
What we do with the information we gather
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
- Internal record keeping.
- We may use the information to improve our services.
- We may periodically send promotional emails about news, special offers or other information which we think you may find interesting using the email address which you have provided.
We may contact you by email or phone. We may use the information to customize the website according to your interests.
Data Security
We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place physical, electronic and managerial procedures to safeguard and secure the information we collect.
Also, we are using Google Cloud Services to secure our information (https://cloud.google.com/security/compliance/gdpr/ )
Controlling your personal information
You may choose to restrict the collection or use of your personal information in the following ways:
- whenever you are asked to fill in a form on the website and subscribe to our newsletter marketing process
- during your check in time you are asked to fill in a form, look for the box that you can click to indicate that you do not want the information to be used for direct marketing purposes
- if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by unsubscribe from our newsletter.
- If you want to delete all your records from our local database email us at info@babasails.eu
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.
We may use your personal information to send you promotional information about our property.
You may request details of personal information which we hold about you under the DPA (Data Protection Act 1998) and the GDPR (General Data Protection Regulation). If you would like a copy of the information held on you please write to info@babasails.eu.
You accept that any entries you make to an on-site guest book, if available, will not contain personal information or details you would not want disclosed. Any entries containing personal details that may fall into GDPR may be removed and destroyed.