Privacy Statement

At VYBE Yachts, we respect your privacy and are committed to protecting your personal data. This privacy statement explains how we collect, use, and safeguard your information when you interact with our website and services.

1. Who We Are

Cantiere Del Vybe S.r.l. ("VYBE Yachts", "we", "us", "our") is the data controller responsible for your personal data. We are a luxury yacht manufacturer headquartered in Carrara, Italy.

For any privacy-related enquiries, please contact us at:
Email: privacy@vybe.yachts
Address: Cantiere Del Vybe S.r.l., Via Carriona 201, 54033 Carrara MS, Italy

2. Information We Collect

We may collect the following categories of personal data:

Information you provide directly

• Contact information: name, email address, phone number, and preferred language when you submit an enquiry or request a brochure
• Communication data: the content of messages you send to us through our contact forms or email
• Event and appointment data: scheduling preferences and location details for private viewings or sea trials

Information collected automatically

• Device and browser data: IP address, browser type and version, operating system, screen resolution, and device type
• Usage data: pages visited, time spent on pages, referral source, and click patterns
• Cookie data: information collected through cookies and similar technologies (see our Cookie Policy for details)

3. How We Use Your Information

We process your personal data for the following purposes:

• Responding to enquiries: to handle your requests about our yacht models, availability, and services
• Client relationship management: to manage communications with prospective and existing clients
• Marketing communications: to send you information about new models, events, and updates — only with your explicit consent
• Website improvement: to analyse how visitors use our website and improve its performance and content
• Legal compliance: to comply with applicable laws, regulations, and legal processes

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Consent: for marketing communications and non-essential cookies
• Legitimate interest: for website analytics, fraud prevention, and improving our services
• Contractual necessity: for processing data required to respond to your enquiries and provide our services
• Legal obligation: where we are required to process data by law

5. Data Sharing

We do not sell your personal data. We may share your information with:

• Service providers: trusted third parties who assist us with website hosting, analytics, email delivery, and customer relationship management
• Professional advisors: legal, accounting, and insurance professionals as necessary
• Authorities: where required by law or to protect our legal rights

All third-party service providers are contractually bound to process your data only as instructed and in compliance with applicable data protection laws.

6. Analytics

We use Umami Analytics, a privacy-focused, cookieless analytics tool that we host ourselves on a server in Germany (Hetzner). Umami collects only aggregated, anonymous usage data — for example: page views, referrer, country, device type, and browser. It does not use cookies, does not track individuals across sessions or sites, and does not transfer any data to third countries.

Because no personal data is processed, we do not require your consent under Art. 6(1) GDPR. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in understanding how our website is used in order to improve it.

7. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact enquiries are retained for up to 24 months following your last interaction. Marketing consent records are retained for as long as you remain subscribed. Analytics data is retained in anonymised form.

9. Your Rights

Under the GDPR, you have the following rights:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Restriction: request that we limit the processing of your data
• Portability: request your data in a structured, commonly used format
• Objection: object to processing based on legitimate interests or direct marketing
• Withdraw consent: withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@vybe.yachts. We will respond within 30 days of receiving your request.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), access controls, and regular security assessments.

11. Changes to This Statement

We may update this privacy statement from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this statement periodically.

12. Supervisory Authority

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority. In Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).