Privacy Policy

Welcome to Online Watersports (accessible via onlinewatersports.app). Our platform is a dedicated maritime directory cataloguing over 680 beaches and coastal activity centers. We connect sea enthusiasts, travelers, and watersport athletes directly with licensed local beach operators, instructors, and equipment rental stations.

We are committed to operating with complete transparency and ensuring your personal data is protected in full compliance with the European Union General Data Protection Regulation (Regulation EU 2016/679 - GDPR) and Greek Law 4624/2019 regarding personal data processing and privacy.

When you submit the enquiry form on a beach page:

• What we record: your name, email address, and (if you provide them) your phone number, the activity you are interested in, your preferred date and your message, together with the beach and operator the enquiry relates to.
• Why we record it: to deliver your enquiry reliably, to follow up if the operator does not reply, and to measure how many genuine enquiries we pass to each operator. The lawful basis is our legitimate interest in operating and improving the service, and in taking steps at your request prior to any contract with the operator.
• Who receives it: the operator you selected, who receives it by email with your address set as the reply-to so they can respond to you directly. A copy is retained by us. No other third party receives your enquiry.
• Where it is stored: in our database, hosted by Supabase on servers within the European Union. Access is restricted so that an operator can see only the enquiries addressed to them.
• How long we keep it: no longer than necessary for the purposes above. You may ask us to delete your enquiry at any time using the contact details in Section 9.
• We never ask for payment details. There is no checkout on this site and we do not process payments, so we never hold card or bank information.

Depending on how you interact with our platform, we may collect minimal data under lawful bases:

We keep cookies to a minimum. Essential storage is listed below; analytics and advertising are described underneath and are only enabled if you accept them.

Analytics and advertising

This site is supported by advertising. We use Google AdSense to display ads, together with Google Analytics and Google Ads conversion measurement, and the Meta pixel. These are third-party services that may set their own cookies and process data such as your IP address, device and browsing activity on this site, in order to measure audience and to select and measure ads.

• Nothing loads until you choose. Advertising, analytics and ad personalisation are all set to denied by default through Google Consent Mode. They are only enabled if you accept on the cookie banner.
• Withdrawing consent. You can change your mind at any time by clearing this site's data in your browser, which makes the cookie banner appear again.
• Google as an advertising vendor. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this and other sites. You can review and control how Google uses this data atMy Ad CenterandGoogle's partner-sites notice.
• We do not sell your personal data, and we do not combine your enquiry details with advertising profiles.

You can clear or disable your local storage and cookies at any time through your browser settings.

Our interactive beaches directory embeds mapping tiles provided by OpenStreetMap contributors via standard Leaflet client libraries.

• Map Tiles: When viewing the map at /beaches, map tile images are loaded directly from OpenStreetMap servers. Your IP address may be logged by OpenStreetMap strictly for server operational logs.
• No GPS Geolocation Tracking: We do not track your real-time physical GPS location without your explicit, one-time permission. All pin clustering and region filtering are performed client-side based on published beach coordinates.

To guarantee maritime safety and protect travelers from unlicensed operators, all businesses requesting verified listing badges must undergo verification:

• VAT / Tax ID: Verified against official national business registers (e.g. EU VIES) to confirm valid legal establishment.
• Port Authority Compliance: Operator listings are bound to comply with local coast guard and port authority regulations concerning licensed ski boats, jet ski speed corridors, and safety lifejackets.
• Public Display: Only public business information (trade name, official telephone, website, authorized activities) is published on beach guides. Private tax records are never made public.

Under Chapter III of the EU GDPR and Greek Law 4624/2019, you possess full statutory rights over your personal data:

Our platform is served globally over high-performance edge networks powered by Cloudflare. All traffic is enforced with modern TLS 1.3 encryption in transit, strict HTTP Content Security Policies (CSP), and automated DDoS mitigation to safeguard visitors from interception or tampered scripts.