Privacy and cookies

In short

We only collect what we need to answer your enquiries and organise your stays. Your data is hosted in France, is never sold, and the website uses no advertising or audience measurement cookies.

Data controller

Portolan SAS, Quai Suffren, 83990 Saint-Tropez. For any question: donnees@portolan.example.

The data we process

• Your account: name, email, phone, language. The password is encrypted; nobody at Portolan can read it.
• Your bookings: yacht, dates, boarding time and port, number of guests, your wishes.
• Your enquiries sent through the forms: contact details, project, message.

Why, and on what basis

• Managing your account and bookings: performance of the contract or of pre-contractual steps taken at your request.
• Answering your requests for a file, a viewing or a brochure: your consent, given by ticking the box on the form.
• Keeping our accounts: legal obligation.

Who can access it

Portolan's brokers and, for a confirmed charter, the captain and owner of the yacht concerned. Our technical providers act only on our instructions: Supabase (database, servers in Paris), GitHub (website hosting) and our email delivery service.

Some of these providers are American companies: any transfers are governed by the European Commission's standard contractual clauses.

For how long

• Account: while it is active, then three years after your last sign-in.
• Enquiries: three years after our last exchange.
• Bookings and invoices: ten years, as required by the French Commercial Code.

Your rights

You may at any time access your data, correct it (your details can also be changed in My account), have it erased, restrict its use, object to its processing, obtain it in a readable format and set instructions for after your death. Write to donnees@portolan.example: we reply within one month.

If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

Security

All exchanges are encrypted, passwords are never stored in plain text, and strict rules ensure that each client sees only their own bookings.

Cookies

The website sets no advertising cookies, no audience measurement cookies and no social network trackers. This is why no banner asks for your consent.

Only your sign-in is remembered in your browser (local storage “portolan-session”), so that you stay signed in to My account. This storage is strictly necessary for the service you request and is removed when you sign out.

Typefaces are served by the website itself. Links to WhatsApp or Google Maps load nothing until you click them.