Privacy
Data protection
This privacy policy explains what data we process when you use this website, and your rights. The site is privacy-friendly by design and loads analytics only with your consent.
Overview
We take the protection of your personal data seriously. This website is privacy-friendly by design and loads analytics only after you give your consent.
Data we process
When you contact us or make a booking enquiry, we process the details you provide (such as name, email, dates) solely to respond to your request.
Legal basis & retention
We process enquiry and booking data to take steps at your request and to perform a contract (Art. 6 (1)(b) GDPR); analytics load only with your consent (Art. 6 (1)(a) GDPR), which you can withdraw at any time. We keep this data only as long as needed to handle your request and to meet statutory (e.g. tax) retention periods, then delete it.
Cookies & analytics
We use Google Analytics (Google Ireland Ltd.) to understand how the site is used and improve it. It loads only after you give consent via our cookie banner and then sets cookies to measure visits. You can decline, or withdraw your consent at any time via Cookie settings in the footer. Data may be processed by Google; please also see Google’s privacy policy.
Maps
On our Location and Getting-here pages we offer an embedded Google Maps map (Google Ireland Ltd.). To protect your privacy it is not loaded automatically: only when you click “Show map” is the map requested from Google and data (including your IP address) transmitted there. A simple “Get directions” link opens Google Maps in a new tab and does not embed anything. See also Google’s privacy policy.
Contact form & booking
Our contact form is processed by Formspree (Formspree, Inc., USA), which forwards your message to our inbox. Bookings use the embedded HostCollect widget on the Booking page to show live availability and take reservations; the data you enter there is processed to handle your booking.
Visitor notifications
During a visit, our site sends a minimal notice to a serverless function — the pages viewed during the visit and the approximate time spent on each, the referring website, and an approximate location (city/country) derived from your IP address by our host (Vercel). The function forwards this to us as the operator as a short activity note via the messenger service Telegram (Telegram FZ-LLC) and updates that note while the visit continues. The history is kept only for the duration of the visit in your browser (sessionStorage); no cookies are set and nothing is stored on our servers. Legal basis: our legitimate interest in knowing the site's activity (Art. 6(1)(f) GDPR). Telegram may process the transmitted data outside the EU.
The notification may also include the region, approximate coordinates (as a map link) and — via the geolocation service ipwho.is (ipwhois.io), to which the IP address is transmitted for this — the approximate provider/network (which explains, for example, a SIM card roaming abroad). ipwho.is may process data outside the EU.
To recognise returning visits, we store a small visit counter (number and time of your last visit) in your browser (localStorage) and include it in the notification described above. Legal basis: our legitimate interest in knowing the site's activity (Art. 6(1)(f) GDPR); you can object at any time. The counter identifies a browser, not a person, and is not used for advertising or cross-site tracking.
International transfers
Some of the providers named above (Google, Formspree) may process data in the USA. Such transfers are safeguarded by the EU Standard Contractual Clauses and/or an EU adequacy decision.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing; where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact us at office@theinfinisea.com. You also have the right to lodge a complaint with a data-protection supervisory authority.