This policy explains how personal data is handled when you visit lacivertmarine.com.tr or contact us about yacht brokerage services offered under the Lacivert Marine brand.
It is written to meet the requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR, Türkiye’s Law No. 6698 on the Protection of Personal Data (KVKK) and the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), to the extent each law applies to you.
1. Who is responsible for your data
Lacivert Marine is a trademark of MES Marine. The data controller is MES MARINE Yatçılık San. ve Tic. A.Ş.; for enquiries handled by our Dubai office, MES MARINE L.L.C-FZ Dubai acts as controller.
When you engage our broker in a transaction carried out through Denison Yachting, Denison Yachting may process your data as a separate controller under its own privacy notice.
2. Personal data we collect
- Enquiry data you send by email, phone or messaging apps: your name, email address, phone number, company, the content of your message and any details you share about yachts you wish to buy or sell.
- Client and transaction data, if an engagement follows: identity and ownership documents, correspondence, offers, contracts and payment-related information needed to complete a transaction, including anti-money-laundering and know-your-customer checks.
- Technical data recorded automatically by our hosting provider when you visit the website: IP address, date and time, requested page, browser and device type, and referring address.
- Analytics data, only if you consent: pseudonymous usage information collected by Google Analytics 4, such as pages viewed, approximate location, device and browser details and interactions.
The website has no contact forms or user accounts. Please do not send us special categories of personal data (for example, health information) unless we ask for it for a specific legal reason.
3. Why we use your data and our legal bases
- Answering enquiries and preparing proposals: steps taken at your request before a contract and our legitimate interest in responding (GDPR/UK GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
- Providing brokerage and advisory services and managing transactions: performance of a contract (Art. 6(1)(b); KVKK Art. 5(2)(c)).
- Meeting legal obligations such as accounting, tax, anti-money-laundering and regulatory requirements (Art. 6(1)(c); KVKK Art. 5(2)(ç)).
- Running and securing the website through server logs (Art. 6(1)(f); KVKK Art. 5(2)(f)).
- Website analytics: your consent (Art. 6(1)(a); explicit consent under KVKK Art. 5(1)), which you can withdraw at any time.
- Establishing, exercising or defending legal claims (Art. 6(1)(f); KVKK Art. 5(2)(e)).
Under the UAE PDPL we rely on your consent, the performance of a contract, compliance with legal obligations or other grounds permitted by the law.
4. Cookies
We use one strictly necessary storage item to remember your cookie choice, and Google Analytics cookies only if you accept analytics. Details are in our Cookie Policy. You can change your choice at any time via “Cookie Settings” in the footer.
5. Who we share data with
- Our group companies, MES MARINE Yatçılık San. ve Tic. A.Ş. and MES MARINE L.L.C-FZ Dubai, where needed to handle your enquiry.
- Denison Yachting, when your enquiry or transaction is handled through our broker’s role at Denison Yachting.
- Service providers acting on our instructions: website hosting (Hostinger), email and IT providers, and Google (analytics, only with your consent).
- Parties involved in a transaction, on your instruction: the other party, co-brokers, independent surveyors, lawyers, escrow agents and flag or registry authorities.
- Professional advisers and public authorities, where required by law.
We do not sell personal data.
6. International transfers
We operate from Türkiye and the U.A.E. and work with international partners, so your data may be transferred to other countries, including Türkiye, the U.A.E., the European Economic Area, Monaco, the United Kingdom and the United States (for example, Google). Where required, we use adequacy decisions, standard contractual clauses (including the standard contracts under Article 9 of KVKK), your explicit consent where permitted, or other transfer mechanisms recognised by the GDPR, UK GDPR, KVKK and the UAE PDPL.
7. How long we keep data
- Enquiries that do not lead to an engagement: up to 3 years after our last contact.
- Client and transaction records: for the periods required by law, generally 10 years (for example, under the Turkish Commercial Code and Tax Procedure Law).
- Server logs: up to 2 years, for security and legal compliance.
- Google Analytics data: 14 months.
- Your cookie choice (lacivert_consent): 12 months.
After these periods, data is deleted, destroyed or anonymised.
8. Your rights
GDPR and UK GDPR
You can ask for access to, correction or erasure of your data, restriction of processing and data portability; object to processing based on legitimate interests; withdraw consent at any time without affecting earlier processing; and not be subject to decisions based solely on automated processing.
KVKK (Article 11)
- learn whether your personal data is processed and request information about it;
- learn the purpose of processing and whether data is used for that purpose;
- know the third parties in Türkiye or abroad to whom data is transferred;
- request correction of incomplete or inaccurate data, and erasure or destruction under Article 7, and ask that these actions be notified to the recipients;
- object to a result against you arising from analysis exclusively by automated systems;
- claim compensation for damage caused by unlawful processing.
UAE PDPL
You can request information about and access to your data, its transfer, correction or erasure, restriction or stopping of processing, and object to automated processing, as provided by the PDPL.
How to exercise your rights
Email info@mesmarine.com.tr or write to our Antalya address. KVKK applications can also be made in writing or by registered electronic mail (KEP), in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. We reply within 30 days.
You may also complain to a supervisory authority: in Türkiye, the Personal Data Protection Authority (KVKK); in the EU, the authority of your country; in the UK, the Information Commissioner’s Office (ICO); and in the U.A.E., the UAE Data Office.
9. Security
We use appropriate technical and organisational measures, including HTTPS encryption, access controls and need-to-know access. No internet transmission is completely secure, so please agree a secure channel with us before sending sensitive documents.
10. Children
The website and our services are intended for adults. We do not knowingly collect personal data from anyone under 18.
11. Links to other websites
The website links to other websites, including our group’s websites and Denison Yachting. Their privacy practices are their own; please read their policies.
12. Changes to this policy
We may update this policy from time to time. The “Last updated” date above shows the current version.
13. Contact
For any privacy question, email info@mesmarine.com.tr or use the addresses in section 1.