Privacy Policy

1. Who we are

Superyacht New Build (“we”, “us”, “our”) is a dedicated professional service of Mavi Marine. This policy explains how we process personal data when you visit superyachtnewbuild.com (the “Website”) or contact us about a project.

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, the Turkish Personal Data Protection Law No. 6698 (KVKK) and the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the data controller is:

Enquiries handled by our Dubai office are processed by MES MARINE L.L.C-FZ Dubai, Meydan Freezone Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. (info@mesmarinedubai.com).

2. Personal data we collect

• Information you give us — your name, e-mail address, telephone number, company and role, and details about your yacht, project or enquiry when you e-mail or call us.
• Analytics data (only with your consent) — pages visited, approximate location (country or city), device and browser type, referring website and interactions, collected through Google Analytics 4. Google Analytics 4 does not log or store IP addresses.
• Technical log data — our hosting provider automatically processes your IP address, the date and time of access, the requested page and your browser’s user agent in order to deliver and secure the Website.
• Consent record — your cookie choice and the date it was made, stored in your own browser.

We do not intentionally collect special categories of personal data. Please do not send us sensitive information that is not needed for your enquiry.

3. Why we use personal data and our legal bases

• Responding to enquiries and preparing proposals — steps taken at your request before entering into a contract and our legitimate interest in answering business enquiries (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
• Providing our project management and owner representative services and managing the client relationship — performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• Operating and securing the Website — our legitimate interest in a secure, working website (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• Website analytics — your consent, which you can withdraw at any time (GDPR Art. 6(1)(a); KVKK Art. 5(1)).
• Legal, accounting and tax obligations, and the establishment, exercise or defence of legal claims — legal obligation and legitimate interests (GDPR Art. 6(1)(c) and (f); KVKK Art. 5(2)(a), (ç) and (e)).

We do not sell personal data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing.

4. Cookies and analytics

We use strictly necessary browser storage to remember your cookie choice. Google Analytics cookies are set only after you click “Accept All” or enable analytics in the cookie preferences. Full details are in our Cookie Policy, and you can change your choice at any time via “Cookie Settings” in the footer.

5. Who we share personal data with

• Mavi Marine and the MES MARINE companies in Türkiye and the United Arab Emirates, where needed to handle your enquiry or deliver services;
• service providers acting on our instructions, such as website hosting, e-mail and IT providers, and Google Ireland Limited / Google LLC for analytics (only with your consent);
• professional advisers such as lawyers, auditors and insurers, where necessary;
• shipyards, surveyors or other project parties, only on your instruction or where necessary to deliver the services you have requested;
• courts, regulators and other authorities, where required by law.

6. International transfers

Personal data may be processed in Türkiye, the United Arab Emirates, the European Economic Area and the United States (Google). Where personal data is transferred to a country without an adequate level of protection, we rely on appropriate safeguards such as adequacy decisions (including the EU–U.S. Data Privacy Framework), standard contractual clauses, the transfer mechanisms set out in Article 9 of KVKK, or — where legally required — your explicit consent.

7. How long we keep personal data

• Enquiry correspondence that does not lead to an engagement: up to 3 years after our last contact.
• Client, contract and invoicing records: for the duration of the engagement and the statutory retention periods that follow (for example, up to 10 years under Turkish commercial and tax law).
• Analytics data: no longer than 14 months.
• Technical log data: for a short period, normally no longer than 90 days, unless needed to investigate a security incident.
• Your cookie choice: 12 months, after which we ask again.

8. Your rights

Depending on the law that applies to you, you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting earlier processing. Under Article 11 of KVKK you may also learn whether your personal data is processed, request information about the processing and its purpose, learn the third parties to whom it is transferred, request that third parties be notified of corrections or erasure, object to results produced exclusively by automated analysis, and claim compensation for damage caused by unlawful processing.

To exercise your rights, e-mail info@mesmarine.com.tr with the subject “Data Protection Request”. We will reply within one month (GDPR) or 30 days (KVKK) and may ask you to verify your identity. You also have the right to complain to a supervisory authority — for example the data protection authority in your EU/EEA country, the UK Information Commissioner’s Office, the Turkish Personal Data Protection Authority (KVKK) or the UAE Data Office.

9. Security

We use appropriate technical and organisational measures — including encrypted (HTTPS) connections and restricted access — to protect personal data. No method of transmission over the internet is completely secure, so please avoid sending confidential documents by unencrypted e-mail unless we have agreed this with you.

10. Children

The Website and our services are intended for business clients and are not directed at children under 18. We do not knowingly collect personal data from children.

11. Links to other websites

The Website links to our specialist sister services and to shipyards and design studios we have worked with. Those websites have their own privacy policies, which we do not control.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was last revised.

13. Contact

For any question about this policy or your personal data, please contact us: