Privacy policy

Last updated: October 2026

This English version is a translation for convenience. The German version is authoritative.

1. Controller

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is the operator of this website, which trades under the brand name “Yacht Broker House”:

Branna Marine Service Hamburg GmbH
Managing Director: Janett Inge Ruppenthal
Hans-Henny-Jahnn-Weg 53, c/o Rechtsanwalt Mortensen
22085 Hamburg
Germany

Phone: +49 176 73809015
Email: info@smbyacht.com
Website: www.smbyacht.com
By appointment

2. General information on data processing

The protection of your personal data is important to us. We process personal data exclusively in accordance with the applicable data protection provisions, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data is any information relating to an identified or identifiable natural person.

This website serves exclusively to provide information about our company and to enable you to contact us by telephone or email. Goods or services are not sold via this website.

3. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Str., 6023 Larnaca, Cyprus. The hosting provider supplies the technical infrastructure for operating this website.

When you access this website, the web server automatically collects so-called server log files. These include in particular:

• IP address of the requesting device,
• date and time of access,
• pages and files accessed,
• browser type and browser version,
• operating system used,
• referrer URL (if transmitted by the browser).

The data is processed to ensure the secure and stable operation of the website, to analyse errors and to defend against attacks on the IT systems.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely, stably and in working order.

Where the hosting provider processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

4. Contacting us

If you contact us by telephone, fax or email, we process the personal data you provide exclusively for the purpose of handling your inquiry and communicating with you.

The following personal data in particular may be processed:

• name,
• address (if provided),
• telephone and fax number,
• email address,
• content of your message,
• further information you provide voluntarily.

If you contact us in order to take steps prior to entering into a contract or in connection with an existing contractual relationship, the processing is based on Art. 6(1)(b) GDPR. In all other cases the processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in handling your inquiry properly and efficiently.

5. Offers and performance of contracts

Where an offer is prepared or a contract is concluded as a result of your inquiry, we process the personal data required for this purpose.

This includes in particular:

• name and address,
• contact details,
• offer and contract data,
• invoice and payment data,
• data relating to the performance of the contract and to warranty matters.

The processing is carried out to take steps prior to entering into a contract and to perform a contract pursuant to Art. 6(1)(b) GDPR. Where statutory retention or documentation obligations exist, the processing is additionally based on Art. 6(1)(c) GDPR.

6. Storage period

We store personal data only for as long as is necessary for the respective processing purposes or as statutory retention obligations require.

Personal data from contact inquiries is deleted as soon as the inquiry has been dealt with and no statutory retention obligations or other legitimate reasons prevent deletion.

If a contractual relationship arises from the inquiry, the personal data required for it is stored for the duration of the contract and in accordance with the statutory retention obligations.

Documents relevant under tax and commercial law are retained in accordance with the statutory retention obligations, in particular under the German Commercial Code (HGB) and the German Fiscal Code (AO), and are deleted once the respective statutory periods have expired, unless there are legal grounds for longer storage.

7. Recipients of personal data

Personal data is passed on only where this is necessary to take steps prior to entering into a contract, to perform a contract, on the basis of statutory obligations or to safeguard legitimate interests.

Recipients of personal data may in particular be:

• our hosting provider for the operation of this website,
• tax advisers or accounting service providers for the fulfilment of statutory obligations,
• owners, sellers and charter operators of the yacht you are interested in, and their representatives, where this is necessary to handle your inquiry or to perform a contract,
• authorities or other public bodies where there is a statutory obligation to do so.

Where external service providers process personal data on our behalf, this is done exclusively on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Personal data is not passed on for advertising or marketing purposes.

8. Rights of data subjects

Under the statutory provisions you have the right to:

• access pursuant to Art. 15 GDPR,
• rectification pursuant to Art. 16 GDPR,
• erasure pursuant to Art. 17 GDPR,
• restriction of processing pursuant to Art. 18 GDPR,
• data portability pursuant to Art. 20 GDPR,
• object to processing pursuant to Art. 21 GDPR,
• withdraw consent given, with effect for the future.

In addition, pursuant to Art. 77 GDPR you have the right to lodge a complaint with a competent data protection supervisory authority if you consider that the processing of your personal data infringes the General Data Protection Regulation.

The supervisory authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit), Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

9. Map display (OpenStreetMap)

Our website offers the option of displaying our location using a map service provided by OpenStreetMap (OSM).

The map is not loaded automatically. Before it is activated, no connection is established to the servers of the OpenStreetMap Foundation and no personal data is transmitted to the map service.

Only after you have activated the map by a deliberate action (for example via a two-click solution) is a connection established to the OpenStreetMap servers. In the process, your IP address and technically necessary connection data in particular may be transmitted.

The legal basis for the processing is Art. 6(1)(a) GDPR (consent), since the map is loaded only after you have expressly activated it.

The map service is provided by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

Further information on data processing can be found in the privacy policy of the OpenStreetMap Foundation: https://osmfoundation.org/wiki/Privacy_Policy

10. Cookies

This website uses only technically necessary cookies that are required for the secure and proper operation of the website. Analytics, tracking or marketing cookies are not used.

Technically necessary cookies are used on the basis of Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). The associated processing of personal data is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely and in working order.

User behaviour is not analysed and no tracking for advertising purposes takes place on this website.

11. Data security

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption (HTTPS).

We take appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect your personal data against loss, destruction, manipulation and against unauthorised access, unauthorised alteration or unauthorised disclosure. Our security measures are continuously adapted in line with technological developments.

12. Use of online platforms for listings

We use third-party online platforms and listing portals to publish offers and to initiate business relationships.

We publish offers via these platforms. If interested parties contact us via one of these platforms, we process the personal data they provide in order to handle the inquiry, to communicate with them and, where applicable, to prepare or perform a contract.

The processing is carried out to take steps prior to entering into a contract pursuant to Art. 6(1)(b) GDPR or, where no such steps are involved, on the basis of Art. 6(1)(f) GDPR on account of our legitimate interest in handling inquiries properly.

13. Changes to this privacy policy

We reserve the right to amend this privacy policy where this becomes necessary due to changes in statutory requirements, official requirements or technical changes. The version published on this website at the time of your visit applies.