Privacy Policy

Effective Date: 2026

This Privacy Policy explains how Bosun (“we”, “us”, “our”) collects, uses, stores, and protects personal information when you use our application, website, and related services.

We are committed to protecting your privacy and processing personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Data Controller

The data controller responsible for your personal data is:

Impluto
Sole Trader
Marina Gouvia
Corfu 49100
Greece

Tax Identification Number (AFM): 070900972

Website:
https://bosun.gr

Email:
admin@bosun.gr

2. About Bosun

Bosun is a yacht management application that allows users to organise yacht-related information, including technical records, documents, maintenance information, inventory, calendars, and operational notes.

To provide these services, we may process personal information relating to users and information entered into the application.

3. Personal Data We Collect

Depending on how you use Bosun, we may collect the following categories of personal data:

Account Information

When you create an account, we may collect:

• Name;
• Email address;
• Login credentials;
• Account identification information;
• Subscription information.

Yacht Information

Users may choose to store information relating to their yachts, including:

• Yacht name;
• Yacht specifications;
• Technical information;
• Maintenance records;
• Inventory lists;
• Manuals and documents;
• Images;
• Notes and reminders;
• Other information entered by the user.

This information may include personal information if users choose to include it.

Payment and Subscription Information

For paid subscriptions, we may process:

• Subscription status;
• Payment records;
• Billing information;
• Transaction references.

Payment card details are not stored by Bosun where payments are processed through third-party payment providers.

Technical Information

We may automatically collect certain technical information, including:

• Device information;
• Operating system;
• Application version;
• Log information;
• Security and performance data;
• IP address where technically required.

4. How We Use Your Personal Data

We use personal data for the following purposes:

Providing the Service

To:

• Create and manage user accounts;
• Provide access to Bosun features;
• Store and display yacht information;
• Maintain user preferences;
• Provide customer support.

Subscription Management

To:

• Activate subscriptions;
• Manage payments;
• Confirm subscription status;
• Provide invoices or payment records where required.

Improving Bosun

To:

• Maintain and improve the application;
• Fix technical problems;
• Develop new features;
• Monitor service performance.

Security and Legal Compliance

To:

• Protect user accounts;
• Prevent misuse or fraud;
• Comply with legal obligations;
• Respond to lawful requests from authorities.

5. Legal Basis for Processing

Under GDPR, we process personal data based on the following legal grounds:

Performance of Contract

Processing is necessary to provide Bosun services requested by you, including account creation and subscription management.

Legitimate Interests

We may process data where necessary for our legitimate interests, such as:

• Improving the Service;
• Maintaining security;
• Preventing abuse;
• Managing our business operations.

Legal Obligations

We may process data where required by law, including accounting and tax obligations.

Consent

Where required, we will request your consent before processing certain information.

You may withdraw consent at any time where processing is based on consent.

6. User-Provided Content

You remain responsible for the information you upload to Bosun.

You should ensure that:

• You have the right to upload documents and information;
• Uploaded information does not violate the rights of third parties;
• You do not upload information that you are not authorised to store.

Bosun does not claim ownership of your yacht information or documents.

7. Sharing of Personal Data

We do not sell, rent, or trade personal data.

We may share information only when necessary to provide the Service, including with trusted service providers such as:

• Hosting providers;
• Cloud storage providers;
• Email service providers;
• Payment providers;
• Technical service providers.

These providers process information only according to our instructions and appropriate security requirements.

Where required by law, we may also disclose information to competent authorities.

8. International Data Transfers

Your personal data may be processed by service providers located outside Greece or the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we ensure appropriate safeguards are implemented in accordance with GDPR requirements.

9. Data Security

We take reasonable technical and organisational measures to protect personal data, including measures designed to prevent:

• Unauthorised access;
• Loss of information;
• Misuse of accounts;
• Unauthorised disclosure.

However, no internet-based service can guarantee complete security.

Users are responsible for protecting their account credentials and should use strong passwords and appropriate security practices.

10. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

Generally:

• Account information is retained while your account remains active;
• Yacht information is retained while required to provide the Service;
• Subscription and payment records are retained according to applicable tax and legal requirements.

When information is no longer required, it will be deleted or anonymised where appropriate.

11. Your Rights Under GDPR

Depending on applicable law, you have the right to:

• Access your personal data;
• Request correction of inaccurate information;
• Request deletion of your personal data;
• Request restriction of processing;
• Object to certain processing activities;
• Request portability of your data;
• Withdraw consent where processing is based on consent.

To exercise your rights, contact:

admin@bosun.gr

We may request verification of your identity before processing requests.

12. Account Deletion

You may request deletion of your Bosun account and associated personal data by contacting:

admin@bosun.gr

Some information may need to be retained where required by law or where legitimate business reasons apply.

13. Cookies and Similar Technologies

The Bosun website may use cookies or similar technologies to:

• Enable website functionality;
• Improve user experience;
• Understand website usage;
• Maintain security.

You can manage cookie preferences through your browser settings.

Details of specific cookies used will be provided where applicable.

14. Third-Party Services

Bosun may use third-party services to operate and improve the Service.

Current third-party providers may include:

• Hosting provider: [Insert Provider]
• Database provider: [Insert Provider]
• Analytics provider: [Insert Provider]
• Payment provider: [Insert Provider]
• Email provider: [Insert Provider]

Each provider processes information according to its own privacy practices and applicable agreements.

15. Children’s Privacy

Bosun is not intended for children under the age of 16.

We do not knowingly collect personal data from children without appropriate consent.

If you believe that a child has provided personal data, please contact us.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to the Service;
• Legal requirements;
• Changes in our data processing practices.

The updated version will be published on:

https://bosun.gr

The effective date will be updated accordingly.

17. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

Impluto
Marina Gouvia
Corfu 49100
Greece

AFM: 070900972

Email: admin@bosun.gr

Website: https://bosun.gr

18. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent data protection authority.

For Greece:

Hellenic Data Protection Authority (HDPA)
Website: https://www.dpa.gr

© 2026 Impluto. All rights reserved.