Privacy Policy

Last updated: 30 September 2026

This Privacy Policy explains how HOLLASEA S.R.L. ("HollaSea", "we", "us") collects, uses and protects your personal data when you visit or use hollasea.com (the "Platform"), and what rights you have. We process personal data under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Romanian law, including Law no. 190/2018 and Law no. 506/2004.

This policy is information for you. You do not need to agree to it for us to use your data. Section 4 explains the legal basis for each use.

1. Data Controller Information

The controller of your personal data is:

  • Company: HOLLASEA S.R.L., a limited liability company registered in Romania
  • Registered office: Șoseaua Pipera nr. 61, Bl. 2, Sc. 1, Et. 1, Ap. 14, Sector 2, 020111 București, Romania
  • Trade Registry: J2026049846005 (EUID ROONRC.J2026049846005)
  • Tax ID (CUI): 55427204
  • VAT ID: RO55427204
  • Email: office@hollasea.com
  • Phone: +40 756 978 654

We have not appointed a data protection officer (DPO). For any question about your personal data, or to use your rights, write to office@hollasea.com. You can write in English or Romanian.

2. HollaSea in Short

HollaSea is an online platform that connects sailors: skippers, crew, people who want to rent a boat, and charter companies. HollaSea acts as an intermediary. It does not own or operate boats. How we use your data depends on what you do on the Platform:

  • Boat charters: boats are offered by independent charter companies through their booking systems. When you hold or reserve a boat, we pass your reservation to the charter company's booking system. For a reservation, you pay HollaSea and we issue our invoice. You can pay by card, or by another method shown in Stripe's payment form, processed by Stripe. Where this option is offered, you can also pay by bank transfer to the account shown in the payment window. The charter contract itself is between you and the charter company.
  • Voyages: a skipper publishes a voyage and sets the cost of a spot on board. If you join, you pay the skipper directly. HollaSea takes no payment and no commission for voyages and is not a party to the arrangement between the skipper and the crew.
  • Skipper hire and skipper offers: when you reserve a skipper for the dates they are free, or accept a skipper's offer, you agree the price and pay the skipper directly. HollaSea takes no payment and no commission and is not a party to that agreement. We share contact details so that you can make the arrangements (see 6.2).
  • Skipper ads: charter companies can post ads looking for skippers, and skippers can apply. The company and the skipper agree the engagement directly.
  • HollaSea's own paid services: skipper membership, request fees, Featured placements and vouchers. They are described in our Terms of Use. Online payment for them is not available yet. Today they are activated with a voucher or by HollaSea.

3. Personal Data We Collect

3.1 Account and sign-in

  • Your email address, your password (we store only a secure hash, never the password itself) and your account type (crew, skipper or charter company). You can add a display name, and we create a username for you.
  • Your confirmation that you are at least 18 years old.
  • A confirmation link that we email to you to verify your email address.
  • If you sign up or sign in with Google: your name, email address and Google account ID, which Google sends us. We never receive your Google password.
  • If you turn on two-step login (for accounts that sign in with email and password): a one-time 6-digit code that we email to you. It is valid for 10 minutes and is cleared once it has been used.

3.2 Profile and contact details

  • Public profile: display name, username, profile photo, cover and gallery photos, bio, location, sailing zones, boat types, sailing style, languages, response time and the qualifications you declare (see 3.3).
  • Contact details: phone number, postal address and country. You must add your name, phone number, postal address and country before you apply to a voyage or to a skipper ad, post a voyage or a request, or request, hold or reserve a boat. We need them for these actions. For example, charter companies receive your phone number and postal address when you hold or reserve a boat, a company receives your phone number when you apply to its skipper ad, and your address appears on the invoice for a boat payment. Your phone number is not shown on your public profile, and your postal address is never shown publicly.
  • Charter company accounts: company name, VAT or registration number, country and phone number, plus the city, website, description and logo you add to the company profile. A company must add a company phone number and country before it can post a skipper ad.

3.3 Nautical qualifications and declarations

  • The certificates and licences you select on your profile (for example ICC, RYA or VHF/SRC). You declare these yourself. We do not ask for copies and we do not verify them.
  • For skippers: your declaration, when you register, that you hold the licence needed to navigate.
  • For skippers: your acceptance of the HollaSea Skipper Agreement, with the full legal name you type, the version of the agreement, the date and time, your IP address and your browser details.
  • When you request, hold or reserve a boat: your choice of who will skipper it ("Crewed" or "Bareboat"). When you pay: your confirmation that, unless you have agreed with a skipper who will come to check-in, you are responsible for bringing a skipper who holds the required licences.

3.4 Voyages, applications, requests, skipper bookings and skipper ads

  • Voyages you publish (route, dates, boat details, photos, costs and description), requests you post, and the dates you share as a skipper when you are free, with your price per day.
  • Applications to join a voyage: your experience level, departure city, message and any additional information you add. Health information is covered in 3.5.
  • Skipper bookings and offers, including the price and the messages in them.
  • Skipper ads that charter companies post, and applications to them, including the applicant's message.
  • Requests for a skipper linked to a boat you hold or reserve: the boat, the country, the dates, and your name, email address and phone number.

3.5 Health information (optional)

The voyage application form has an optional field called "Dietary / Medical Restrictions". Use it only if the skipper needs to know something for your safety on board, such as a serious allergy or a special diet. You can apply without filling it in.

Health information is a special category of personal data under the GDPR. We use it only with your explicit consent (Art. 9(2)(a) GDPR), which you give by choosing to write it in this field and sending your application. We use it for one purpose only: to show it to the skipper of that voyage, for your safety on board. We do not share it with anyone else. Apart from that skipper, only our authorised administrators can access it, and only when this is needed to run and protect the Platform.

You can withdraw your consent at any time by writing to office@hollasea.com, and we will delete the information. It is also deleted automatically when your account is deleted or anonymised. Withdrawing your consent does not affect our use of the information before you withdrew it.

3.6 Boat bookings, payments and invoices

  • Booking details: the boat, the charter company, the dates, the prices, the payment plan, the payment deadline, whether you want a skipper, and the status of your request, hold or reservation.
  • Your name, email address, phone number, postal address and country, which we need for the booking and the invoice.
  • Card payments: you enter your card details directly in Stripe's secure payment form. We never see or store your card number. We receive only a payment reference, the amount and the payment status.
  • Bank transfers: the payment details that appear on our bank statement, for example the payer's name, the amount and the payment reference.
  • Refunds by bank transfer: the bank account details you confirm to us for the refund.
  • The invoices we issue for your payments.

3.7 Messages, reports and reviews

  • Messages you send in voyage group chats, request and offer conversations, and skipper booking conversations. Section 5 describes the secure record we keep of them.
  • Reports you send with "Report this conversation" in a chat, and the reason you give.
  • Reviews you write or receive, including review photos. Only crew accepted on a voyage can review its skipper, and only after the voyage has ended. A boat can be reviewed only after a completed charter.

3.8 HollaSea paid services

  • Your membership plan and its start and end dates, the voucher codes you redeem, the request fees recorded for your requests, and any Featured placement of your voyages.
  • Online payment for these services is not available yet. Today they are activated with a voucher or by HollaSea, so we collect no payment data for them. Before online payment starts, we will update this policy.

3.9 Records of your acceptances and choices

When you accept something on the Platform, we keep a record of it as proof. This covers:

  • the box you tick when you create an account, by which you accept the Terms of Use and confirm that you have read this Privacy Policy;
  • your acceptance of the Skipper Agreement;
  • the confirmations you give before you pay for a boat;
  • your choice in the cookie banner.

For each record we store the wording of the box you ticked or the choice you made, the date of the version of our legal pages in force at that moment and a digital fingerprint (hash) of that version, the date and time, your IP address (including an address forwarded by a proxy, if any), your browser details and language, the address of the request, a technical identifier of your browser session (stored only as a hash) and your account, if you are signed in. We also store details that belong to the action, such as the amount and payment method for a boat payment, or the full legal name you type for the Skipper Agreement.

Ticking the box when you create an account does not mean that our use of your data is based on your consent. The legal bases are listed in section 4.

3.10 Technical and security data

  • Your IP address, browser and device type, and the date and time of sign-ins, sign-outs and other account events (see section 5).
  • Failed sign-in attempts: the email address entered and the IP address. We use them to block password-guessing.
  • A "Keep me logged in" code, if you stay signed in on a device (see section 8).
  • Boat requests: each time you send a request for a boat, we record your account, the boat, your IP address and the time, so that we can limit the number of requests and prevent abuse.
  • Chat notifications: if you turn them on for a device, the notification address that your browser gives us (a "push subscription") and your browser details. While you have a chat open, we note which chat it is, so that we do not send you a notification about messages you are already reading.
  • Analytics: if you click "Accept all" in the cookie banner, usage data collected by Google Analytics (see section 8).

3.11 Other information you send us

  • Contact form and emails: your name, email address, subject and message.
  • Feedback: your rating, the type of feedback, your message, the page you were on, your device, screen size and browser, and a screenshot if you choose to attach one.
  • Newsletter: your email address.
  • Search alerts: your email address and the search you want to follow (for example destination and dates). You can subscribe without an account.
  • Reports of illegal content sent by email: your name, your email address and the content of your report.
  • Favourites and compare lists: favourites are saved in your account or, if you are not signed in, only in your browser. Compare lists are saved only in your browser.

3.12 Data we receive from others

  • From Google, if you sign in with Google: your name, email address and Google account ID.
  • From charter companies, through their booking systems: the status of your hold or reservation, for example its expiry date and whether it is confirmed.
  • From Stripe: the payment reference, the amount and the status of your card payment.
  • From other members: reviews about you, messages sent to you, reports about a conversation you are in, and the applications, offers and bookings they send you.

3.13 What we do not collect

  • We do not ask for passport or ID card details. If a charter company needs identity documents for your charter, you give them directly to that company.
  • We do not see or store your card number.
  • Please do not share sensitive information in messages or on your profile, such as ID numbers, bank card details, or health information outside the optional field described in 3.5.

4. Why We Use Your Data and Our Legal Bases

  • To provide the Platform and the services you ask for. Legal basis: performance of a contract with you (Art. 6(1)(b) GDPR). This covers creating and managing your account; showing your profile; publishing voyages, requests and skipper ads; handling applications, skipper bookings and offers; delivering your messages; passing holds and reservations to charter companies; taking payments for boat reservations; activating your membership, vouchers and other paid services; and sending you emails and notifications about your activity. Skippers also receive emails about new applications and new opportunities, which they can switch off in Settings → Notifications. If you do not give the contact details listed in 3.2, we cannot carry out the actions that need them.
  • To meet our legal obligations. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR). This covers issuing invoices, keeping accounting and tax records as required by Romanian law, handling reports of illegal content under the EU Digital Services Act, and answering lawful requests from authorities.
  • To keep your account secure. Legal basis: our legitimate interest in protecting accounts (Art. 6(1)(f) GDPR). This covers two-step login, limits on failed sign-ins, "Keep me logged in", limits on boat requests and detecting misuse.
  • To keep HollaSea safe. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in preventing fraud and illegal activity, protecting our members, and being able to establish, exercise or defend legal claims. This covers the record of messages and account activity described in section 5, flagging certain words for review by a person, handling reports, and restricting or suspending accounts that break our rules. When an authority lawfully requires us to disclose a record, that disclosure is based on our legal obligation (Art. 6(1)(c) GDPR).
  • To keep proof of your acceptances and choices (see 3.9). Legal basis: our legitimate interest in being able to prove them and to establish, exercise or defend legal claims (Art. 6(1)(f) GDPR), and our duty to be able to show that you gave your consent where we rely on it (Art. 7(1) GDPR).
  • To help crew find skippers. Complete skipper profiles may be shown in search engines such as Google. Legal basis: our legitimate interest in helping skippers be found. Skippers can switch this off in Settings → Privacy & data.
  • To display our pages. We load fonts, the map on boat pages, and some images and icons from other providers (see 6.3). They receive your IP address. Legal basis: our legitimate interest in showing our pages correctly.
  • To answer your messages and improve the Platform. This covers messages you send through the contact form or by email, and the feedback you send us. Legal basis: our legitimate interest.
  • With your consent (Art. 6(1)(a) GDPR): Google Analytics cookies, the newsletter, search alerts and chat notifications in your browser. You can withdraw your consent at any time (see section 10).
  • With your explicit consent (Art. 9(2)(a) GDPR): health information you choose to add to a voyage application (see 3.5).

Where we rely on our legitimate interests, you have the right to object (see section 10).

5. Messages and Account Activity Records

To keep HollaSea safe, prevent fraud and illegal activity, and protect our members and our company in case of disputes, we keep a secure record of:

  • Messages sent through HollaSea: voyage group chats, request and offer conversations, and skipper booking conversations. For each message we store the date and time, the full text, the IP address and the type of device or browser used. We also store the sender and the recipients, with their account details (such as name, username, email address and account type) as they were at that moment.
  • Account activity: registration; sign-ins, including automatic and Google sign-ins, with IP address and device type; sign-outs; password changes and resets; changes to your profile details, such as your name, phone number or address, with the old and new values; account deletion requests; account deletion; reports; and actions taken by our team, such as a change of account type, a suspension and its reason, or the end of a suspension.

These records are kept in our database and in a second, protected copy that is not accessible from the internet. They are sealed, so any later change to them can be detected.

Who can see them. Only HollaSea administrators. We do not read conversations routinely. A conversation may be reviewed in three cases:

  • a member reports it with "Report this conversation";
  • a message contains words often linked to illegal activity or to scams, for example a request to pay outside HollaSea. A flag only sends the message to a person for review. Nothing is removed automatically. Paying a skipper directly for a voyage spot or for skipper hire is normal on HollaSea (see section 2), and a flag does not mean that you did anything wrong;
  • we receive a lawful request.

Sharing with authorities. We disclose these records only when the law requires it (for example, at the request of the police, a prosecutor or a court), when they are needed to establish, exercise or defend legal claims, or when this is needed to protect someone's life or safety (see 6.4).

How long we keep them. Three (3) years from the date of each record. After that they are deleted automatically. If you delete your account, your profile is anonymised straight away, but these records are kept for the same 3 years, because they may be needed to establish, exercise or defend legal claims. The same applies to messages you exchanged with a member who later deletes their account.

The conversations themselves. This secure record is separate from the conversations you see on the Platform. Messages stay in the conversation, visible to its participants, for as long as the conversation exists on the Platform. If the author of a message deletes their account, the message stays and is shown as sent by "Deleted user".

Legal basis. Our legitimate interest (Art. 6(1)(f) GDPR) in keeping the Platform safe, preventing fraud and being able to establish, exercise or defend legal claims. When an authority lawfully requires us to disclose a record, that disclosure is based on our legal obligation (Art. 6(1)(c) GDPR). You can object to this processing (see section 10). We will consider your objection, but we may keep the records where we have compelling legitimate grounds or need them for legal claims.

6. Who Can See Your Data and Who We Share It With

We never sell your personal data. We share it only as described below.

6.1 Other members and visitors

  • Other users of the Platform can see your public profile (see 3.2).
  • Complete skipper profiles may also appear in search engines such as Google, unless the skipper switches this off in Settings → Privacy & data.
  • Visitors who are not signed in see only limited information. In most places they see a member's username instead of their display name. On voyage pages they see only the skipper's initials.
  • Reviews are shown on the profile or boat they refer to.
  • Messages in a conversation can be seen by the participants of that conversation.

6.2 People and companies you deal with through HollaSea

  • Skippers of voyages: when you apply to join a voyage, the skipper sees your application, including any health information you chose to add (see 3.5), and your profile.
  • Clients and crew: a skipper's phone number and email address are shared with you when the skipper confirms your skipper booking, when you accept the skipper's offer on your request, or when the skipper sends you an offer after you asked for a skipper for a boat you hold or reserved.
  • Skippers told about a boat that needs a skipper: if you ask for a skipper when you hold or reserve a boat, skippers who are free in that area are told the boat, the country and the dates. They do not receive your contact details.
  • Charter companies that post skipper ads: when you apply to an ad, the company receives your name, email address, phone number, your message and a link to your profile.
  • Charter companies offering boats: when you hold or reserve a boat, we send your first and last name, email address, phone number and postal address to the charter company that offers the boat, through its booking system. The charter company may then email you directly about your hold or reservation. A simple request for an offer does not send your personal data to the charter company.

These skippers and companies decide how they use the data they receive and are responsible for that use. Many skippers are private individuals, so share with them only what is needed for the voyage or the booking.

6.3 Service providers

  • Stripe processes card payments and any other payment method shown in its payment form. Stripe also processes some data as a separate controller, for example for fraud prevention and its own legal obligations. See the Stripe Privacy Policy.
  • SmartBill (Romania) is our invoicing software. It receives your name, postal address, country, email address, phone number and the invoice details.
  • Resend (United States) sends our emails, such as account, booking and notification emails. It receives your email address, your name and the content of the email.
  • Google provides Sign in with Google (if you use it), Google Analytics (only if you click "Accept all"), Google Fonts (used on our pages) and Google Maps (the map on boat pages). When your browser loads fonts or the map, Google receives your IP address and browser details. See the Google Privacy Policy.
  • Browser push services (Google, Mozilla, Apple or Microsoft, depending on your browser) deliver chat notifications, but only if you turn them on. The notification is encrypted so that only your browser can read it. It contains the sender's name or the voyage route, a short preview of the message and a link.
  • Content providers: some images are loaded from Unsplash, some icons from cdnjs (Cloudflare), and boat photos from the servers of the charter companies' booking systems. They receive your IP address and browser details when your browser loads this content.
  • Our hosting provider stores the Platform and its database.
  • Professional advisers, such as accountants and lawyers, when needed. They are bound by confidentiality.

6.4 Authorities and legal claims

We share personal data with public authorities, courts or law enforcement when the law requires it, when it is needed to establish, exercise or defend legal claims, or when it is needed to protect someone's life or safety.

7. Transfers Outside the European Economic Area

Some of our service providers are based in the United States or may access data from there. These include Google, Stripe, Resend, the browser push services, Unsplash and Cloudflare (cdnjs). For these transfers we rely on the EU-U.S. Data Privacy Framework, for providers certified under it, and/or on the Standard Contractual Clauses approved by the European Commission.

If the boat you hold or reserve, or its charter company, is outside the European Economic Area (EEA), we send the details listed in 6.2 to that charter company because this is necessary to carry out the booking you asked for (Art. 49(1)(b) GDPR).

You can ask us for more information about these safeguards at office@hollasea.com.

8. Cookies and Similar Technologies

We use a small number of cookies and similar technologies. The full list, with their durations, is in our Cookie Policy.

  • PHPSESSID (strictly necessary, deleted when you close your browser): keeps the Platform working and keeps you signed in during your visit.
  • hs_remember (30 days; each time it signs you back in, it is replaced by a new one for another 30 days): keeps you signed in on that device, so that you do not have to log in again. It is set when you log in with "Keep me logged in" ticked (the box is ticked by default; untick it if you do not want to stay signed in), when you sign in with Google, and when you confirm your email address after registering. It is deleted when you log out.
  • skipar_unlocked (30 days): set only if you open a private preview link while the Platform is closed to the public. Ordinary visitors never receive it.
  • Google Analytics cookies (_ga and _ga_ followed by a code): set only after you click "Accept all". They help us understand how the Platform is used. They last up to 2 years, which is Google's standard duration.
  • Stripe cookies: Stripe may set its own cookies, but only when you choose to pay by card and its card form loads. They are necessary to process the payment you asked for and to prevent fraud.
  • Google Maps: the map on boat pages may set Google's own cookies. We do not control them.
  • Browser storage (not cookies): your cookie choice (hs_cookie_consent), your favourites if you are not signed in, your compare list, and your chat notification settings on that device. This information stays in your browser.

HollaSea does not set advertising or marketing cookies and does not use tracking pixels. Stripe's and Google's own cookies are described in our Cookie Policy.

You can change your choice at any time with the "Cookie preferences" link at the bottom of every page. If you choose "Necessary only", the Google Analytics cookies are removed and Google Analytics is no longer loaded.

9. How Long We Keep Your Data

9.1 Your account

We keep your account for as long as it exists. You can delete it at any time in Settings → Privacy & data. If you do not sign in for 2 years (or never sign in during the 2 years after you register), our daily automatic job anonymises your account.

If you have an upcoming boat booking or voyage, as skipper or as accepted crew, you cannot delete your account yourself. You can send us a deletion request from the same page instead, and we will answer within one month.

When your account is deleted or anonymised, we:

  • remove your email address and password, so the account can no longer be used, and remove the link to your Google account;
  • change your name to "Deleted user" and remove your username, bio, phone number, location, postal address, sailing zones, boat types, sailing style, languages and qualifications;
  • take your profile, cover and gallery photos off your profile, so they are no longer shown;
  • delete the health information in your voyage applications;
  • end "Keep me logged in" on all your devices and turn off chat notifications.

9.2 What stays after your account is deleted

  • Content that other members took part in: voyages, applications, requests, reviews, bookings and messages in conversations. It stays on the Platform without your name and appears as "Deleted user". You can ask us to remove specific content.
  • A few general profile settings, such as your country and response time.
  • Photo files: they are no longer shown on the Platform, but the files stay on our server. You can ask us to delete them.
  • Charter company accounts: the company profile (company name, VAT or registration number, phone number, city, website, description and logo). You can ask us to remove it.
  • Records we must or may keep: invoices, payment and booking records, records of your acceptances (including the Skipper Agreement), and the secure record of messages and account activity. They are kept for the periods in 9.3.
  • Newsletter and search alert subscriptions, contact form messages and feedback: these are not removed when your account is deleted. They are kept for the periods in 9.3.

9.3 Retention periods

  • Messages in conversations: for as long as the conversation exists on the Platform (see section 5).
  • Secure record of messages and account activity: 3 years from each record, then deleted automatically (see section 5).
  • Health information in voyage applications: until you ask us to delete it, or until your account is deleted or anonymised, whichever comes first.
  • Invoices and payment records: for the period required by Romanian accounting and tax law.
  • Boat booking records, including any request for a skipper linked to a booking: for as long as needed to complete the booking and deal with any claim about it and, where they support an invoice or a payment, for the period required by Romanian accounting and tax law.
  • Records of paid services (membership periods, vouchers, request fees and Featured placements): for as long as your account exists and, after that, for as long as needed to deal with any claim about them or as required by accounting and tax law.
  • Records of your acceptances and choices (see 3.9), including the Skipper Agreement: for as long as we may need them to prove your acceptance or consent and to establish, exercise or defend legal claims.
  • Reports and messages flagged for review: for as long as needed to handle them and to establish, exercise or defend legal claims.
  • Failed sign-in attempts: kept for security, to detect and block password-guessing. Attempts linked to an email address are cleared when that account next signs in successfully.
  • Boat request records (account, boat, IP address and time): kept for security, to limit requests and prevent abuse.
  • Two-step login codes: valid for 10 minutes and cleared once used.
  • Newsletter: until you unsubscribe by writing to office@hollasea.com.
  • Search alerts: until you unsubscribe, with the link in each alert email or by writing to office@hollasea.com.
  • Chat notifications on a device: until you turn them off on that device, log out in that browser, or your account is deleted.
  • Contact form messages, emails and feedback (including screenshots): for as long as needed to handle them and any follow-up.
  • Google Analytics data (only if you clicked "Accept all"): Google keeps the detailed data for up to 14 months, the retention period set in our Google Analytics account.
  • Cookies and browser storage: see section 8 and our Cookie Policy.

10. Your Rights Under GDPR

10.1 Your rights

You have the following rights over your personal data:

  • Right of access: ask for a copy of the personal data we hold about you.
  • Right to rectification: correct inaccurate or outdated data. You can edit most of it yourself in Settings.
  • Right to erasure ("right to be forgotten"): ask us to delete your data, unless we have to keep it. Examples are invoices, and the records in section 5 that are needed for legal claims.
  • Right to restriction: ask us to limit how we use your data in certain cases.
  • Right to data portability: receive the data you gave us in a structured, machine-readable format.
  • Right to withdraw consent: where we rely on your consent, you can withdraw it at any time. This covers analytics cookies, the newsletter, search alerts, chat notifications and health information. Withdrawing consent does not affect what we did before you withdrew it.
  • Right to lodge a complaint with a supervisory authority (see 10.4).

10.2 Your right to object

You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (section 4). This includes showing your skipper profile in search engines. We will then stop, unless we have compelling legitimate grounds or need the data for legal claims. You can always object to direct marketing, and we will then stop it.

10.3 How to use your rights

  • In Settings → Privacy & data you can download a copy of the main data linked to your account (your profile, voyages, applications, requests, bookings, reviews and favourites), stop your skipper profile from being shown in search engines, and delete your account.
  • In Settings → Notifications you can manage chat notifications on each device and, if you are a skipper, the emails about new applications and new opportunities.
  • You can change your cookie choice with the "Cookie preferences" link at the bottom of every page.
  • For anything else, including a complete copy of your data (for example your messages, payment records and records of your acceptances), write to office@hollasea.com.

We answer within one month. For complex requests we can extend this by two more months, and we will tell you if we do. We may ask you to confirm your identity, for example by writing to us from the email address of your account. Using your rights is free of charge.

10.4 Complaints

You can lodge a complaint with the Romanian supervisory authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), B-dul G-ral Gheorghe Magheru 28-30, Sector 1, București, Romania, www.dataprotection.ro. You can also complain to the data protection authority of the EU country where you live or work. We would appreciate the chance to address your concern first.

11. Automated Decisions

We do not make decisions that have legal or similarly significant effects on you based only on automated processing. Words that flag a message only send it to a person for review. When you pay by card, Stripe may run automated fraud checks under its own privacy policy.

12. Security

We protect your data with the following measures:

  • encrypted connections (HTTPS);
  • passwords stored only as secure hashes;
  • optional two-step login with an email code;
  • limits on repeated failed sign-ins;
  • access to administration tools limited to authorised staff;
  • a sealed, protected copy of the records described in section 5;
  • card payments handled only by Stripe.

No online service can be completely secure, so please use a strong, unique password and keep it private. If a personal data breach is likely to put you at high risk, we will inform you without undue delay.

13. Age Limit

HollaSea is only for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe that a minor has created an account, please tell us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy when our services or the law change. We will publish the new version on this page with a new "Last updated" date. If a change affects you, we will tell registered members by email and with a notice on the Platform at least 15 days before it takes effect. A change may take effect sooner only when this is needed for legal or security reasons. If you do not agree with a change, you can close your account before it takes effect. If we want to use your data for a new purpose that needs your consent, we will ask for it first.

15. Contact Us

For any question about this Privacy Policy or your personal data, contact HOLLASEA S.R.L., Șoseaua Pipera nr. 61, Bl. 2, Sc. 1, Et. 1, Ap. 14, Sector 2, 020111 București, Romania.

  • Email: office@hollasea.com
  • Phone: +40 756 978 654