Privacy Policy
Privacy Policy
Information on the processing of personal data pursuant to Art. 13 GDPR.
1. Data controller
Controller within the meaning of the GDPR:
AYJ Maritime & Advisory Ltd Office 620 Initial Business Centre Wilson Business Park Manchester, M40 8WN United Kingdom
German representative: Alexander Schäfer · Yachtvertrieb Rehhagenhof 4, 33619 Bielefeld, Germany Email: alexander@ayj-group.com
2. Hosting & SSL
This website is hosted on a server located in Germany [TODO: insert hosting provider and address — e.g. Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen]. All traffic is end-to-end encrypted via SSL/TLS (indicated by the padlock icon and https:// in the address bar).
Legal basis: legitimate interest in providing the website securely and reliably (Art. 6 (1)(f) GDPR).
3. Server log files
When you access the site, technically necessary data is automatically collected and temporarily stored in log files: IP address, date and time, requested URL, referrer URL, user agent (browser/operating system).
Purpose: operation, error analysis, abuse protection. Legal basis: Art. 6 (1)(f) GDPR. Storage period: up to 30 days; deleted automatically thereafter.
4. Contact by email
If you contact us by email, we process the data you provide (name, email address, content of the message) solely to handle your enquiry.
Legal basis: Art. 6 (1)(b) GDPR (pre-contractual measures) or (f) (legitimate interest in responding). Storage period: until your enquiry has been dealt with, then deletion — unless statutory retention obligations apply.
5. Callback form
When you use the callback form, you submit your name and phone number. This data is used solely to handle your callback request.
We use Mailgun (Mailgun Technologies Inc., USA) via the EU endpoint located in Frankfurt, Germany to deliver the notification to our inbox. A data processing agreement under Art. 28 GDPR is in place; processing takes place within the EU.
Legal basis: Art. 6 (1)(b) GDPR (initiation of a business relationship) or (a) (consent by submitting the form). Storage period: until your request has been dealt with.
6. Cookies
We use only strictly necessary cookies. Specifically: a language cookie (NEXT_LOCALE) that stores your language selection (de/en). This cookie is required for the website to function and is set without consent (§ 25 (2) No. 2 TDDDG, Art. 6 (1)(f) GDPR).
We do not use any tracking, analytics or marketing cookies. No profiling takes place.
7. Fonts and media
Fonts (Cinzel, Montserrat) are served locally from our own server — no connection to Google servers takes place. Background video, images and logos are also delivered from our own server.
8. Your rights
You have the right at any time to:
· access information about the data we hold about you (Art. 15 GDPR) · rectification of inaccurate data (Art. 16 GDPR) · erasure (Art. 17 GDPR) · restriction of processing (Art. 18 GDPR) · data portability (Art. 20 GDPR) · object to processing (Art. 21 GDPR) · withdraw consent with effect for the future (Art. 7 (3) GDPR)
To exercise your rights, an informal message to alexander@ayj-group.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority. Competent in North Rhine-Westphalia: Landesbeauftragte für Datenschutz und Informationsfreiheit NRW · https://www.ldi.nrw.de
9. Last updated
Last updated: May 2026. We reserve the right to update this privacy policy if the legal situation or our data processing changes.