1. Controller
Controller: MyBoatDesk, proprietor Rene Dressel, Im Höfchen 2, 53809 Ruppichteroth, Deutschland. Email: kontakt@myboatdesk.com.
2. Data we process
We process data required to provide and secure MyBoatDesk and information you choose to store in your boat record.
- Account and profile details
- Boat, component, maintenance, logbook, cost, inventory and collaboration data
- Uploaded documents, photos and metadata
- Technical request, security, device and error data
- Subscription and payment status; payment providers process complete payment details
- Support messages and attachments
3. Purposes, legal bases and legitimate interests
Depending on context, processing is necessary to perform or prepare a contract under Article 6(1)(b) GDPR, comply with legal duties under point (c), pursue legitimate interests under point (f), or act on consent under point (a). Our legitimate interests include protecting accounts and infrastructure, preventing fraud and abuse, diagnosing faults and establishing, exercising or defending legal claims.
- Providing the account, boat record, synchronization, export and collaboration
- Authentication, authorization, IT security and fault analysis
- Billing and administration of selected plans
- Handling support, privacy and deletion requests
- Optional notifications or assistance only when activated
4. Required data and consequences of not providing it
Registration and performance of the contract require at least a reachable email address and authentication details. Without them, we cannot create an account or provide the service. Boat, maintenance, document and profile data are generally optional, but the relevant function cannot be used fully without them. Payment information required by law or contract is collected by the selected payment provider.
5. Hosting, processors and other recipients
Primary product data runs on self-managed European infrastructure at Hetzner, including PostgreSQL, private object storage, Redis, MongoDB for offline synchronization and encrypted backups. Configured email and payment providers receive only necessary data.
- Hetzner Online GmbH for server and storage infrastructure
- The configured SMTP provider for transactional email
- Stripe, Apple or Google only when the corresponding payment channel is used
- Technical providers or professional advisers on an appropriate contractual basis and only where required
6. International transfers
Primary product infrastructure is operated in Europe. Individual payment, store, email or support providers may process data outside the European Economic Area. Such transfers take place only where GDPR requirements are met, for example under an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses. Details of a particular transfer are available on request.
7. Website, cookies and logs
The public website does not require advertising or tracking cookies. Strictly necessary cookies or local storage may support login, language, security and sessions.
8. Apps and permissions
Camera, photo or file access is used only when you invoke a related function. Permissions can be withdrawn in device settings. MyBoatDesk does not sell location or device data or use it for personalized advertising.
9. Files, sync and exports
Originals remain private and use short-lived authorized access. Offline work remains on your device until sync. Protect exports according to their contents.
10. Data about other people and data sources
When an account owner invites crew, co-owners or other participants, or records information about them in a boat record, we may receive their name, contact, role and activity data from the account owner or another authorized boat member. We process this information for shared use, permissions and traceability. Inviting users must appropriately inform the people concerned and record only necessary information.
11. Artificial intelligence and automated decisions
Optional AI functions will be activated only after technical and privacy review. The app will identify provider, purpose and data before transmission. Boat records are not released for third-party model training without clear activation.
MyBoatDesk does not make solely automated decisions that produce legal or similarly significant effects and does not create advertising profiles. Rule-based hints and future assistance features support organization and human decisions only.
12. Retention and deletion
Data is retained only for account, contract, legal, security or boat-record needs. Following deletion, active data is removed or anonymized unless limited retention is legally required. Backups expire through rotation.
13. Your rights and complaints
Subject to GDPR conditions, you may request access, correction, deletion, restriction or portability, object to processing and withdraw consent at any time for the future. You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation.
You may complain to any competent supervisory authority. The authority responsible for our place of establishment is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, poststelle@ldi.nrw.de. Read, search, original download, export, transfer and deletion rights within MyBoatDesk do not depend on your plan.
14. Contact and changes
Send privacy requests to kontakt@myboatdesk.com. Material changes will be reflected with a new date.