Legal
Privacy Policy
OKnautic.com · Last updated: 13 July 2026
1. Who we are
OKnautic.com (the "Platform") is operated by Yacht Team DOO, a company registered in Montenegro, registration number 5-1142697, registered office: Bonići 1, 85320 Tivat, Montenegro (the "Company", "we").
Yacht Team DOO is established in Montenegro and is subject to applicable Montenegrin data protection law. The EU General Data Protection Regulation ("GDPR") may additionally apply to certain processing activities where its territorial scope requirements are met, in particular where we offer our services to users in the European Union.
Privacy contact: privacy@oknautic.com
2. What data we collect
- Account data (Buyers): name, email, phone, password (hashed).
- Account data (Sellers): company and legal name, registration/tax identifiers, bank details, store address(es), logo, representative contact details.
- RFQ data: requested products, quantity and options, delivery location, requested delivery date/time, comments.
- Communications: Platform chat messages between Buyers and Sellers; Personal Assistance requests (name, email, topic, message).
- Newsletter: email address, if you opt in.
- Technical data: IP address, browser/device information, usage and security logs.
- Local storage: an anonymous shopping cart is stored only in your browser (localStorage) and reaches our systems only when you sign in.
3. Purposes and legal bases
We do not rely on consent for processing that is necessary to provide the service. The legal bases are:
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of a contract / steps prior to entering into a contract |
| Distributing your RFQ to matching Sellers and delivering their Offers to you (the core function of the Platform) | Performance of a contract |
| Chat between Buyer and Seller in connection with an RFQ | Performance of a contract |
| Transactional notifications (new offers, RFQ status, order confirmations, account security, password reset) | Performance of a contract — these are service messages, not marketing |
| Marketing newsletter | Consent (separate, optional opt-in; withdraw at any time via unsubscribe link) |
| Seller verification, fraud and abuse prevention, security logging | Legitimate interest |
| Accounting, tax and other legal obligations | Legal obligation |
4. Sharing your RFQ with Sellers
Distributing RFQs is the core function of the Platform, and we apply data minimisation:
- When you submit an RFQ, matching independent Sellers see the requested product, quantity and options, the requested delivery date/time, and the delivery area (city / marina / region). Your full name, email, phone number and exact delivery address are not shown at this stage.
- When you start a chat with a Seller, your name becomes visible to that Seller.
- When you confirm a Seller's Offer, that Seller receives the details needed to perform the transaction, including your contact details and the exact delivery address.
You will see a notice to this effect before submitting an RFQ. Please do not include unnecessary personal or sensitive information in RFQ comments or chat.
Sellers are independent businesses and act as independent data controllers for the data they receive; their further processing is governed by their own privacy practices and by contractual data-use obligations in our Seller Terms.
5. Other recipients
Service providers (processors): hosting and database infrastructure and email delivery providers engaged under data processing agreements.
Authorities, where disclosure is required by law.
We do not sell personal data and do not use it for third-party advertising.
6. International transfers
Where personal data is transferred to a country that does not benefit from an applicable adequacy decision, we use appropriate safeguards as required by applicable data protection law, which may include the European Commission's Standard Contractual Clauses and supplementary technical and organisational measures, where applicable. Details of hosting locations and subprocessors are available on request via the privacy contact above.
7. How long we keep data
- Account data — until account closure, plus a limited period necessary for handling claims, fraud prevention and legal compliance.
- RFQs, Offers and chat history — for the duration of the RFQ process and thereafter as necessary for dispute resolution and the establishment or defence of legal claims within applicable limitation periods.
- Newsletter subscription — until you unsubscribe.
- Security and technical logs — up to 12 months, unless a longer period is necessary to investigate a security incident or comply with a legal obligation.
8. Your rights
Subject to applicable law, you may: access your data and obtain a copy; rectify inaccurate data; request erasure; restrict or object to processing; request portability; and withdraw consent at any time where processing is based on consent (without affecting prior processing). Contact privacy@oknautic.com.
You may lodge a complaint with the Montenegrin Agency for Personal Data Protection and Free Access to Information (AZLP); EU users may also complain to their local supervisory authority.
9. Cookies
The Platform currently uses only strictly necessary cookies and browser storage required for sign-in sessions and the shopping cart. If analytics or other non-essential cookies are introduced, a cookie banner and a separate Cookie Policy will be added.
10. Security
We apply appropriate technical and organisational measures: encryption in transit, access controls, row-level access restrictions in our database, hashed password storage. Please use a strong, unique password.
11. Children
The Platform is intended for business users and adults. We do not knowingly collect data from persons under 18.
12. Changes
We may update this policy; the current version is always available on this page, and material changes will be announced on the Platform or by email.