Privacy Policy

The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Controller

Royal Legacy Marine Transport
Maximilian Christopher Garus

Address

Roggenkamp 1D
49849 Wilsum
Germany

Phone

+49 170 1488791

Email

marine.transport@royal-legacy.com

We process personal data solely on one of the following legal bases and only insofar as this is necessary for the respective purpose:

• Art. 6 (1) (a) GDPR — your consent, for example for the publication of images in which individuals are identifiable.
• Art. 6 (1) (b) GDPR — for pre-contractual measures and the performance of a contract, for example when carrying out a transport.
• Art. 6 (1) (c) GDPR — to fulfil legal obligations, in particular commercial and tax retention requirements.
• Art. 6 (1) (f) GDPR — to safeguard legitimate interests, such as the secure operation of the website and the prevention of abuse.

Depending on the nature of the contact, we process the following categories of personal data:

• Master data — first and last name, company where applicable.
• Contact data — email address, telephone number, postal address.
• Enquiry data — boat type, dimensions and weight, pick-up and destination, preferred date and further details from your message.
• Contract data — transport orders, terms, dates, handover reports, details of boat and trailer (such as registration or hull identification number) and billing records.
• Usage data — exclusively the technically necessary server log data of the hosting provider.
• Image data — photographs and video recordings of boats, trailers and the loading and unloading process.

If you contact us via the enquiry form, by email, telephone or WhatsApp, we process the data you provide in order to answer your enquiry and, where applicable, prepare an offer. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR for general enquiries.

The enquiry form on this website is sent via the FormSubmit service (FormSubmit.co). Your form entries are transmitted to its servers and delivered to us by email. The provider is a company based outside the European Union; a transfer to a third country can therefore not be excluded (see section 12). If you wish to avoid this, please contact us directly by email or telephone.

Details that go beyond what is necessary for processing are voluntary. We ask you not to enter special categories of personal data within the meaning of Art. 9 GDPR in free-text fields.

If a transport order is placed, we process the data required to carry it out: client and contact persons, collection point and destination, dates, details of boat and trailer, insurance details, handover reports and billing records. The legal basis is Art. 6 (1) (b) GDPR.

To carry out the transport, we pass on necessary data to the third parties involved — in particular harbours, marinas, operators of slipways and winter storage, yards and dealers at the collection point or destination, insurers and, for destinations outside the EU, customs authorities. In each case only the data the recipient needs for its part is transmitted.

We photograph the condition of the boat — and, for transports on the client’s trailer, of the trailer — before and after transport, as well as the loading and unloading process. These records serve as evidence of condition towards clients and insurers. The legal basis is Art. 6 (1) (b) and (f) GDPR.

Recordings in which persons are identifiable are published exclusively with their express consent pursuant to Art. 6 (1) (a) GDPR. Consent given may be withdrawn at any time with effect for the future.

When you access this website, the hosting provider automatically collects information transmitted by your browser: IP address, date and time of access, page accessed, volume of data transferred, referrer URL as well as browser and operating system details. This data is technically necessary to deliver the site and to ensure its stability and security.

The legal basis is Art. 6 (1) (f) GDPR. Log data is regularly deleted after no more than 30 days, unless it is required to investigate a specific case of abuse.

This website embeds fonts from Google Fonts. When the page is accessed, your browser establishes a connection to Google servers, transmitting your IP address. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in a consistent and fast presentation. If you wish to avoid this, you can prevent the execution of web fonts in your browser.

This website uses no analytics, tracking or advertising services. Neither Google Analytics nor comparable tools are employed, no audience measurement takes place, and no profiles of your behaviour are created. For that reason there is no cookie banner on this website either — there is nothing for which we would need to obtain your consent.

The only thing stored is your choice of language, held locally in your browser's storage under the key rlm_lang. This information never leaves your device and is not transmitted to us. Its sole purpose is to show you the site in your chosen language on your next visit. The legal basis is § 25 (2) no. 2 TDDDG, as the storage is strictly necessary for the service you requested.

You can remove this storage at any time by deleting the data saved for this website in your browser. Should we introduce an analytics service in future, we will obtain your express consent beforehand and amend this policy accordingly.

The price calculator on the prices page runs entirely in your browser. Your entries are neither stored nor transmitted to us or to third parties.

If you contact us via WhatsApp, your messages and your telephone number are processed via the servers of WhatsApp Ireland Limited. We have no influence over this processing; WhatsApp’s own privacy terms apply in addition. We process the content in order to answer your enquiry. The legal basis is Art. 6 (1) (b) or (f) GDPR. If you wish to avoid this processing, please use email or telephone.

Your data is disclosed only where necessary. Recipients may be:

• Harbours, marinas, yards, dealers and winter storage facilities — insofar as they are involved in the collection or handover of your boat.
• Insurers, subcontractors (such as relief drivers) and customs and permit authorities — in each case limited to the data needed for their part.
• IT service providers for hosting, email and form delivery — on the basis of data processing agreements pursuant to Art. 28 GDPR where applicable.
• Tax advisors, legal advisors and authorities — insofar as required by law or necessary to pursue legal claims.

Individual services used — specifically form delivery via FormSubmit and the typefaces from Google Fonts — may involve processing outside the European Union. Where an adequacy decision of the European Commission exists, the transfer takes place on that basis; otherwise we rely on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR. We point out that a level of data protection comparable to that of the EU is not guaranteed in every third country.

We store personal data only for as long as is necessary for the respective purpose:

• Enquiries not followed by a contract: up to 12 months after the last contact.
• Contract and billing records: 6 or 10 years in line with commercial and tax retention periods (§ 257 HGB, § 147 AO).
• Server log data: generally 30 days.

As a data subject you have the following rights. An informal message to the address given under point 01 is sufficient to exercise them:

• Access (Art. 15 GDPR) — which data we process about you.
• Rectification (Art. 16 GDPR) — correction of inaccurate or incomplete data.
• Erasure (Art. 17 GDPR) — unless a statutory retention obligation applies.
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR) — release in a structured, commonly used format.
• Objection (Art. 21 GDPR) — against processing based on legitimate interests.
• Withdrawal of consent (Art. 7 (3) GDPR) — at any time with effect for the future.

Without prejudice to other remedies, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR.

The authority responsible for us is the data protection supervisory authority of Lower Saxony (LfD Niedersachsen), Prinzenstraße 5, 30159 Hanover, Germany. You may also contact the supervisory authority of your habitual residence.

We amend this privacy policy whenever the legal situation, our services or the services used change. The version published on this page applies in each case. In the event of material changes requiring renewed consent, we will obtain it separately.