Privacy Policy

We appreciate your interest in our online services. Protecting your personal data is very important to us. Below, we inform you about how we process your personal data on our website www.nextcharter.com in accordance with the General Data Protection Regulation (GDPR) and the German Telecommunications and Telemedia Data Protection Act (TTDSG).


1. Controller

Next Charter GmbH
Oskar-von-Miller-Straße 35
86316 Friedberg
Germany
Commercial Register: HRB 38552, Local Court of Augsburg
VAT ID: DE276773586
Managing Director: Stephan Jud
Email: info@nextcharter.com
Phone: +49 821 589 42 820
Mobile: +49 1514 202 6204


2. Data Protection Officer

No data protection officer has been appointed, as there is no legal obligation for Next Charter GmbH pursuant to Article 37 GDPR. For any questions regarding data protection, please contact us using the details provided above.


3. General Information on Data Processing

We process personal data only to the extent permitted by law or with your consent. Personal data refers to any information relating to an identified or identifiable individual (e.g. name, email address, phone number, IP address, booking details or payment information).

We comply with the principles of data minimization, purpose limitation and storage limitation. Your data is processed lawfully, fairly, transparently, and only for the purposes stated.


4. Data Processing in the Context of Our Services

4.1 Booking Platform

To manage yacht bookings, we use an interface provided by NauSYS d.o.o. (www.nausys.com).

The information entered during the booking process (e.g. name, address, travel period, selected yacht) is transmitted to NauSYS and to the respective charter operator if applicable.

Processing is based on Article 6(1)(b) GDPR for the performance of pre-contractual measures or contractual obligations.

4.2 Customer Account

You have the option to create a customer account. The data collected during registration (e.g. email address, password, contact details) is used to manage your bookings and communication. In your account, you can update your data and upload documents (e.g. sailing or radio licenses, passport or additional files). These documents are processed solely for contract-related purposes.
Legal basis: Article 6(1)(b) GDPR.

4.3 Contact

When contacting us via form, email, phone, WhatsApp, Microsoft Teams or Telegram, we store the information you provide in order to respond to your inquiry. Processing is based on Article 6(1)(f) GDPR (legitimate interest in customer communication) or Article 6(1)(b) GDPR in the case of booking inquiries.

Note on messenger services: When using WhatsApp, Telegram, or Microsoft Teams, personal data (e.g. IP address, usage data, message content) may be processed by the respective provider and stored outside the EU. We have no control over this processing. The respective providers’ privacy policies apply.


5. Cookies, Tracking and Consent via Cookie Banner

Our website uses cookies and similar technologies. Technically necessary cookies are essential for the functioning of the website and are set without consent.

In addition, we use – with your consent in accordance with Article 6(1)(a) GDPR and § 25 TTDSG – cookies for the following purposes:

  • Statistics & Analytics (e.g. Google Analytics)

  • Marketing & Retargeting (e.g. Meta Pixel)

  • Integration of external content and mapping functions (e.g. Google Maps, Google My Maps, YouTube, Instagram plugins)

When you first visit our website, a cookie banner appears, allowing you to individually select which cookies you wish to allow. Your selection is recorded and can be changed or withdrawn at any time via the “Cookie Settings” link in the footer.


6. Data Retention

We retain your personal data only for as long as necessary to fulfill the stated purposes or as required by statutory retention periods.

Once the purpose for processing no longer applies, or after the expiry of retention obligations, your data is routinely deleted. Booking documents, payment data and contract-related information are generally stored for a period of 6 to 10 years (in accordance with commercial and tax regulations under the German Commercial Code (HGB) and the Fiscal Code (AO)).


7. Google Tag Manager

We use Google Tag Manager from Google Ireland Ltd. to centrally manage website scripts and tracking tools.
The Tag Manager itself does not set cookies or process personal data, but may activate other tools that do.

Legal basis: Article 6(1)(a) GDPR (consent for activated tools).


8. Google Analytics

We use Google Analytics (Google Ireland Ltd.) to analyze visitor behavior in an anonymized form. This may involve the following data:

  • Anonymized IP address

  • Browser type and version

  • Session duration and interactions

  • Source of traffic (e.g. search engine)

Data may be transferred to third countries (especially the USA). Such transfers are based on the EU Standard Contractual Clauses.
You may withdraw your consent at any time via the cookie banner.


9. Payment Processing and Third-Party Services

We offer various payment methods. Your payment data may be processed by:

  • Revolut (EU-based payment provider)

  • BitPay or a partner bank for cryptocurrency payments (data transfer outside the EU possible)

We do not store complete payment information (e.g. credit card numbers or crypto wallet access). 
Legal basis: Article 6(1)(b) GDPR.


10. Social Media, Embedded Content and Online Presence

We maintain profiles on social networks for communication and marketing purposes. When accessing these platforms, the privacy policies of the respective providers apply.

We currently operate profiles on:

  • Facebook (Meta Platforms Ireland Ltd.)

  • Instagram (Meta Platforms Ireland Ltd.)

  • LinkedIn (LinkedIn Ireland Unlimited Company)

  • Bluesky (Bluesky PBLLC, USA)

We also embed content from the following third-party providers on our website:

  • Google Maps and Google My Maps (for displaying locations, routes, and itineraries – Google Ireland Ltd.)

  • YouTube (video content – Google Ireland Ltd.)

  • Instagram plugins (e.g. previews or feeds)

When accessing this content, personal data (e.g. IP address, location data) may be transmitted to the respective provider. This may involve data transfers outside the EU (especially to the USA), typically based on EU Standard Contractual Clauses.

Legal basis: Article 6(1)(a) GDPR (consent via cookie banner) and Article 6(1)(f) GDPR (legitimate interest in user-friendly presentation and communication).


11. Data Disclosure to Third Parties

We disclose personal data only if:

  • it is required to fulfill contractual obligations

  • you have given explicit consent

  • or we are legally obligated to do so

Recipients may include:

  • Host Europe GmbH (web hosting)

  • Brevo / Sendinblue GmbH (newsletter distribution)

  • Google Ireland Ltd. (Analytics, Maps, Tag Manager)

  • NauSYS d.o.o. (booking platform)

  • Revolut / BitPay (payment processing)

We have data processing agreements in place with all partners pursuant to Article 28 GDPR.


12. Mandatory Data and Automated Decision-Making

Providing certain personal data is necessary to use our services (e.g. for bookings or account creation). Without this data, your request cannot be processed.
We do not use automated decision-making or profiling as defined in Article 22 GDPR.


13. Data Security and International Transfers

We implement appropriate technical and organizational measures to protect your data (e.g. SSL encryption).
Data transfers to third countries are only made where adequate safeguards exist (e.g. EU Standard Contractual Clauses or adequacy decisions by the European Commission).


14. Changes to This Privacy Policy

We reserve the right to update this privacy policy due to legal or technical changes. The current version is always available at www.nextcharter.com.

Last updated: November 2025