1. Data controller
The data controller is Fernando Artiach Careaga, operating under the trade name ArtiYacht, domiciled in the Republic of Panama. Contact email: soporte@artiyacht.com.
2. Data collected
ArtiYacht collects the following personal data from its users:
- Full name and email address.
- Phone number (providers).
- Boat data: brand, model, year, length, engine details, generator, electronics, home marina.
- Marina or service location.
- Photographs of work and/or parts uploaded by the user.
- Platform navigation and usage data.
3. Purpose
Personal data is collected for the following purposes:
- Connecting clients with marine technical service providers.
- Managing service and parts requests.
- Payment processing and invoicing.
- Service-related communications (notifications, quotes, status updates).
- Continuous improvement of the platform and user experience.
4. Legal basis
The processing of personal data is based on user consent, granted upon registration on the platform and acceptance of the Terms and Conditions and this Privacy Policy, in accordance with Panama's Law 81 of 2019 on Personal Data Protection and Executive Decree 285 of 2021.
5. Third-party data processors
ArtiYacht uses the following third-party services for platform operation:
- Supabase — Database and authentication (US servers).
- Vercel — Web application hosting and distribution (US servers).
- Resend — Transactional email delivery (US servers).
- Stripe — Payment processing (future, US servers).
All technology service providers comply with security standards equivalent to or exceeding those required by Law 81 of 2019.
6. International data transfer
Personal data is stored on servers located in the United States (Supabase us-east-1). This international transfer is covered by Article 25 of Law 81 of 2019, as it is based on the data subject's consent and the data is protected by adequate security standards as required by said law.
7. User rights
In accordance with Law 81 of 2019, every user has the right to:
- Access: Know what personal data is stored.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of personal data.
- Portability: Request a copy of data in a structured format.
To exercise these rights, the user may send a request to soporte@artiyacht.com. The response period is 10 business days.
8. Security
ArtiYacht implements the following security measures to protect personal data:
- Encryption in transit via HTTPS/TLS.
- Row Level Security (RLS) in the database, ensuring each user only accesses their own data.
- Restricted data access through roles and permissions.
- Secure authentication with session tokens.
9. Data retention
Personal data is retained while the user's account is active on the platform. Upon account deletion by the user, data will be anonymized or deleted within a maximum of 30 days. Data required to comply with legal or tax obligations may be retained for the period required by law.
10. Cookies
ArtiYacht uses only essential technical cookies necessary for authentication and user session functionality. No tracking, advertising, or third-party analytics cookies are used.
11. Contact
For any inquiries related to this Privacy Policy or the processing of your personal data, you may contact us at: soporte@artiyacht.com.