Privacy policy

Who is responsible for your data

www.rycrentals.ru is run by RYC Russian Yacht Center. We decide what data is collected and why, and are responsible for it.

For any question about your data, write to nikolai.shilin.ryc@gmail.com.

This policy is the personal data processing document required by Article 18.1 of Russian Federal Law No. 152-FZ on Personal Data.

What we collect and why

• Your email — so you can sign in: the sign-in link is sent there.
• Subscriptions and their criteria (country, dates, boat type, cabins) and saved boats — to send you new deals and keep your choices.
• Questions and requests to the manager — the text, the boat and how to reach you. With a request we also keep where you came to the site from and the page you started on, so we can see which links and posts work.
• A shortlist (/quote/…) the manager sent you personally: opens and clicks on boats, so the manager can see what interests you.
• Vercel statistics (Vercel Web Analytics) — only if you agree: anonymous counts of page views and button clicks (request to the manager, subscription, sign-in), with no cookies and nothing that identifies a person. Page addresses are sent without parameters or numbers in the path.
• Google Analytics and Yandex Metrica — only if you agree: which pages are viewed, where visitors come from, device and approximate location; which buttons were used (request to the manager, subscription, favourites), page load speed and page errors — never what a request says. Metrica with Webvisor records actions on the page; anything typed into fields is hidden. These counters never run on account, sign-in, shortlist or shared-favourites pages, even with consent.

Cookies and browser storage

Necessary items keep the site working and need no consent. Google and Yandex cookies appear only after you agree. Vercel statistics store nothing in your browser.

Who else processes data, and where

• Vercel — Vercel statistics, USA. Only with your consent.
• Google — Google Analytics, USA. Only with your consent.
• Yandex — Yandex Metrica, Russia. Only with your consent.

We don’t sell data or share it for advertising. Google’s and Yandex’s advertising features are turned off.

Transfer abroad

Data is transferred to Sweden and the USA (Vercel, Google). The USA is not on Russia’s list of countries with adequate protection of data subjects’ rights, so data goes there on the basis of your consent.

Legal grounds

• Consent (152-FZ Art. 6(1) item 1) — email sign-in, questions and requests to the manager, Vercel statistics, Google Analytics and Yandex Metrica. Consent to the counters is given in the cookie card, to everything else in a separate document.
• A contract concluded at your initiative or to which you are a party (item 5) — subscriptions, saved boats, a reply to your request, a shortlist.
• The operator’s legitimate interests without harm to your rights (item 7) — site security.

Consent to personal data processing

How long we keep it

• Account, subscriptions and saved boats — until you delete your account.
• Requests to the manager, where you came from with them, and shortlist events — 3 years.
• Vercel statistics — Vercel’s default. Google Analytics — 14 months. Yandex Metrica — Metrica’s default.
• Theme, form drafts and visit labels in your browser — until the browser clears them.

Your rights

You can find out what data we hold about you and how it is processed, ask us to correct, block or delete it, and withdraw consent. Withdrawing doesn’t undo what happened before.

Write to nikolai.shilin.ryc@gmail.com — we reply within 10 working days; we may extend this by 5 working days if we tell you why. After you withdraw consent or the purpose is achieved, we delete the data within 30 days unless the law requires keeping it longer.

If you think we’ve violated your rights, you can complain to Roskomnadzor or go to court.

How we protect data

The site works over HTTPS only, sign-in uses a one-time code from an email, only the site’s server and the operator can access the database, and each visitor sees only their own data.