Impact-Site-Verification: e89fb8cb-1ba0-4bde-a5f2-e0d40d46940d

Ultimate Boating Privacy policy

Privacy policy

In force as at the date shown at the foot of the page.

This policy describes how Ultimate Boating collects and processes the personal data of its users, in compliance with Regulation (EU) 2016/679 of 27 April 2016 ("GDPR") and the amended Law No. 78-17 of 6 January 1978, known as the "Informatique et Libertés" Act.

Data controller

The data controller is Sébastien Sauteraud, sole trader (entrepreneur individuel, EI) trading under the name "RDI", established in Romans-sur-Isère (26) (SIREN 801 105 180). No data protection officer (DPO) has been appointed to date; for any question relating to your data, you may write to [email protected].

At this stage, the website is open to the general public and strictly free of charge: it requires neither an account nor payment. The processing operations relating to the professional area (account, billing, establishment listings) described below are implemented only upon activation of that area; they are presented in the interest of transparency.

Data collected

Depending on how you use the Service, the following data may be collected:

  • Account data: identity, email address, password (kept in encrypted form) and preferences.
  • Billing and payment data: payments are handled by Stripe; the Service does not store bank card numbers, but retains billing information and subscription history.
  • Professional listing data: company name, contact details, logo and description of the establishment provided by Pro subscribers.
  • Audience-measurement data: pages viewed, connection data and technical information (IP address, device and browser type).

Purposes and legal bases

  • Provision of the Service and management of the user account: performance of the contract (Article 6.1.b of the GDPR).
  • Management of subscriptions, billing and payments: performance of the contract and compliance with legal and accounting obligations (Articles 6.1.b and 6.1.c).
  • Display and management of professional listings on the map: performance of the contract entered into by the Pro subscriber.
  • Audience measurement and improvement of the Service: legitimate interest (Article 6.1.f), by means of a cookie-free, anonymised solution.
  • Response to contact and support requests: legitimate interest of the data controller (Article 6.1.f).
  • Compliance with legal obligations: legal obligation (Article 6.1.c).

Recipients and processors

The data is intended for the authorised departments of the data controller. It may be disclosed to processors acting on its behalf, within the meaning of Article 28 of the GDPR, in particular:

  • the website host: IONOS SARL (7 place de la Gare, 57200 Sarreguemines, France);
  • audience measurement: Matomo, self-hosted by the publisher on its own server (stats.ultimate-boating.com), with no transmission to a third party;
  • Stripe, for payment processing — only upon activation of the professional area;
  • Google (Firebase / Firestore / Cloud Storage), for authentication and hosting of account data and professional listings — only upon activation of the professional area.

Each processor provides sufficient guarantees as to the implementation of appropriate technical and organisational measures. The data is neither sold nor rented to third parties.

Transfers outside the European Union

Audience measurement (Matomo) is self-hosted in France and involves no transfer outside the European Union. However, upon activation of the professional area, certain processors (in particular Stripe and Google) may process data in the United States. Such transfers are then governed by appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR — the European Commission's standard contractual clauses and, where applicable, certification under the EU-US Data Privacy Framework.

Retention periods

  • Account data (professional area): for the entire duration of the contractual relationship, then archived for up to three (3) years after the closure of the account.
  • Billing data: retained for ten (10) years under accounting obligations (Article L123-22 of the Code de commerce).
  • Contact requests: three (3) years from the last contact.
  • Audience-measurement data: as Matomo is configured without cookies and with IP-address anonymisation, no directly identifying data is retained; aggregated statistics are retained for a maximum of twenty-five (25) months, in accordance with the CNIL's recommendations.

Your rights

In accordance with the applicable regulations, you have the right to access, rectify, erase, restrict the processing of, object to and port your data, as well as the right to set out directives concerning what happens to it after your death.

You may exercise these rights by sending your request to [email protected], or by post to the publisher's registered address. Proof of identity may be requested in the event of reasonable doubt as to the identity of the applicant. A response will be provided within one month, which may be extended under the conditions provided for by the GDPR.

Cookies and trackers

The website places no tracking cookies and uses no advertising trackers. Audience measurement relies on Matomo, configured in "cookie-free" mode, respecting the "Do Not Track" signal and with IP-address anonymisation. This mechanism, strictly anonymous and proportionate, falls under the consent exemption provided for by the CNIL's guidelines on audience measurement: no cookie banner is therefore required, and you have no action to take. Only cookies strictly necessary for the operation of the website may be used, which are likewise exempt from consent.

Affiliate links

Certain pages contain affiliate links (identified by the rel="sponsored" attribute): if you make a purchase after following one of these links, the publisher may receive a commission, at no extra cost to you. As an Amazon Associate, the publisher earns from qualifying purchases. These links influence neither the characteristics displayed nor the comparator scores, which remain neutral and based solely on technical data.

Lodging a complaint with the CNIL

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at www.cnil.fr.

Last updated: 26 July 2026