Privacy Policy

When you visit the website, technically necessary connection data is processed. This may include, in particular, your IP address, the date and time of your visit, the URL you accessed, the amount of data transferred, the referrer, and information about your browser and operating system. This processing is necessary to ensure the secure and stable operation of the website, as well as to detect errors and misuse.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, uninterrupted operation of our website. To the extent that a hosting or IT service provider processes data on our behalf, this is done in accordance with the legal requirements governing data processing on behalf of a controller.

When you contact us via a contact form, a yacht details page, by email, or by phone, we process the contact information you provide and the content of your inquiry in order to handle and respond to it.

If the inquiry relates to the initiation or performance of a contract, processing is based on Article 6(1)(b) of the GDPR. In all other cases, processing is based on Article 6(1)(f) of the GDPR; our legitimate interest lies in communicating effectively with prospective and existing customers.

If you choose to contact us via WhatsApp, the message will not be sent until you take action within the WhatsApp app. The privacy policy of the service you are using also applies to the subsequent processing by WhatsApp.

When you submit a yacht search request, we process, in particular, your name, email address, phone number (if applicable), as well as the search criteria and messages you provide. This data is used exclusively to process your search request and to contact you regarding suitable offers.

The legal basis is generally Article 6(1)(b) of the GDPR. Subscribing to the newsletter is not a prerequisite for submitting a search request. Consent to receive the newsletter can be provided voluntarily and separately via the form.

If you request personal access to the yacht listing form via the “Sell a Yacht” page, we will process your name, email address, and the yacht you have specified in order to generate a time-limited, one-time personal access link and send it to you via email.

Once activated, you can temporarily store information about the yacht, technical specifications, equipment features, condition and service details, as well as your contact information on the server. Any photos and documents you choose to upload are assigned to the respective transaction and stored in a secure upload area. Upon final submission, the uploaded photos can be automatically compiled into a ZIP file and provided to BCM Yachtsales either as an email attachment or via a time-limited, secure download link. The one-time link becomes invalid after the first activation; a technically necessary, time-limited session on your device is used for further processing. After the final submission, the processing session is closed, and BCM Yachtsales is notified of the submission.

The processing is intended to handle your sales inquiry and prepare for a potential transaction, and is generally based on Article 6(1)(b) of the GDPR. Unfinished drafts and submitted documents will be stored only for as long as necessary to process the matter, satisfy legitimate interests in retaining evidence, or comply with statutory retention requirements.

You will receive the BCM newsletter only after giving your express consent. After you sign up, we will send a confirmation email to the address you provided. Your registration will be considered confirmed only after you click the link included in that email (double opt-in).

To document consent, we store the confirmed email address, name, any contact and interest information provided voluntarily, the time of the request and confirmation, the consent version used, and truncated cryptographic checksums of technical connection data. The legal basis is Article 6(1)(a) of the GDPR; proof of consent is also retained to fulfill our accountability obligations.

You may revoke your consent at any time with future effect, for example, by sending an email to info@bcm-yachtsales.de. Once consent is revoked, your email address will no longer be used for newsletter marketing; however, records may be retained to the extent necessary to defend against or enforce legal claims.

When you submit a Yacht Controller inquiry, we process your contact information, details about the yacht and its engine specifications, the selected features, your message, and the uploaded photo of the existing controls. The photo is uploaded via a technical process, attached to the inquiry as an email attachment, and then removed from the website’s temporary upload area.

The legal basis is Article 6(1)(b) of the GDPR, to the extent that your inquiry is for the purpose of preparing a quote or contract.

Yacht listings are provided via technical interfaces and external listing data. Inventory data is generally retrieved on the server side. However, images or documents associated with a listing may be embedded from or linked to external sources. When such external content is retrieved, your IP address may be technically transmitted to the respective provider.

The integration is intended to provide an up-to-date overview of our yacht offerings. The legal basis, unless consent is required, is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing a comprehensive and user-friendly presentation of the yachts we offer.

The Yachtcontroller page includes a YouTube video set to enhanced privacy mode. The video does not load simply by visiting the page. Only when you intentionally start playback will a connection to YouTube/Google be established, and data—specifically your IP address and technical usage information—may be transmitted.

You will be notified of this data transfer prior to activation. Activation is based on your consent, Article 6(1)(a) of the GDPR; to the extent that information is stored on or retrieved from your device, § 25 of the TDDDG also applies.

Weglot may be used on this website to provide multilingual content. When the service is active, connection data technically necessary for the translation and delivery functions may be transmitted to Weglot. This processing is necessary to provide the language version selected by the user. To the extent that consent is required, activation occurs solely on this basis; otherwise, we base the technically necessary processing on Article 6(1)(f) of the GDPR.

When you use the "Bookmark" feature, the selected yacht information is stored locally in your browser's cache (localStorage) This watchlist does not require a user account. The watchlist data stored in your browser is not automatically transferred to BCM Yachtsales through this feature. You can remove items from the watchlist at any time or clear your browser's local website storage.

To improve our website, we collect only aggregated statistics—such as page views and clicks on yacht listings, specifications, phone, email, or WhatsApp contact options, and forms—in our own locally operated analytics system.

These statistics do not store any IP addresses, cookies, user IDs, or browser fingerprints. Only the date, event type, a descriptive label, the page path accessed, and the aggregated count are stored. This is not intended to identify individual visitors. The analysis serves to ensure a user-friendly design and to optimize our website based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.

The website may use technically necessary cookies or similar storage technologies to the extent that they are required for security, navigation, language settings, or explicitly requested features. When personal yacht registration is enabled, this includes a time-limited session that associates the already activated access link with this browser and enables the secure continued editing of a draft. The local wish list is not used until you add a yacht to it yourself. Analytics or marketing services requiring consent may not be activated before the necessary consent is obtained.

Within BCM Yachtsales, data is only shared with those departments that need it for processing. In addition, technical service providers—such as hosting, email, or IT service providers—may process data. In the case of intentionally activated external services, particularly YouTube, processing by providers outside the EU/EEA cannot be ruled out. In such cases, the legal requirements for transfers to third countries apply.

We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations. Contact and quote requests are deleted once they have been fully processed and there are no legal or legitimate grounds for further retention. Unconfirmed newsletter subscriptions are stored temporarily for technical reasons; the confirmation link is valid for 48 hours.

In accordance with the statutory requirements, you have, in particular, the rights to access, rectification, erasure, restriction of processing, and data portability. In cases where processing is based on Article 6(1)(f) of the GDPR, you have the right to object on grounds relating to your particular situation. You may withdraw any consent you have given at any time, effective for the future.

You also have the right to file a complaint with a competent data protection supervisory authority.