Legal

Privacy Policy

The Med Crew Yacht Academy is committed to protecting the personal data of every candidate, student, graduate and website visitor. This notice explains what we collect, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR).

Last updated · 14 July 2026

1. Who we are

"The Med Crew Yacht Academy" refers to The Med Crew Yacht Academy, headquartered at Mitrou 6, Peiraias Zea Marina, Athens, Greece, and The Med Crew Yacht Academy Ltd (registered in England & Wales, company number 17026676). For the purposes of GDPR, we act as the data controller of the personal information described below. You can reach our recruitment and privacy team at team@themedcrew.com.

2. Data we collect from candidates

When you submit a candidate profile through our recruitment page, we collect the information you provide in the intake form, including:

  • Identity & contact details: first and last name, email, phone number, nationality.
  • Career details: preferred department, position sought, years of experience, certifications, availability.
  • Free-text notes: references, itineraries, languages spoken and anything else you choose to add.
  • Your CV / résumé file (PDF or Word, up to 10 MB), stored securely in a private cloud bucket.
  • Your GDPR consent flag, the timestamp of that consent, and the URL of the privacy policy you accepted at submission time.

3. Lawful basis & how we use your data

We process candidate data on the basis of your explicit consent (Article 6(1)(a) GDPR), captured at the moment you tick the consent box and submit the recruitment intake form. We use your information solely to:

  • Review your suitability for yacht crew positions we are recruiting for.
  • Share your profile with vetted yacht owners, captains, management companies and partner agencies where it matches an open role.
  • Contact you about training, placement opportunities and follow-up interviews.
  • Maintain an internal audit trail of the consent you provided.

We do not sell your data, and we do not use it for automated decision-making or profiling that produces legal effects on you.

4. Storage, security & retention

Candidate submissions are stored in an EU-hosted database with row level security enabled; CV files are held in a private object storage bucket accessible only to authorised recruitment staff via short-lived signed URLs. Access is restricted, logged, and reviewed regularly.

We retain candidate records for a maximum of 24 months from the date of your last interaction with us, after which they are permanently deleted. You can request earlier deletion at any time.

5. Sharing with third parties

We only share your data with:

  • Yacht owners, captains and yacht management companies actively recruiting crew, where your profile is a genuine match.
  • Trusted infrastructure sub-processors that host our systems (database, storage and email) under GDPR-compliant data processing agreements.
  • Authorities, where we are legally required to do so.

6. International transfers

Yachting is a global industry. Where a placement involves sharing your profile with a recipient outside the European Economic Area, we rely on Standard Contractual Clauses or equivalent safeguards to ensure your data continues to be protected.

7. Your rights under GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion ("right to be forgotten") of your record and CV.
  • Restrict or object to processing.
  • Withdraw your consent at any time, without affecting the lawfulness of prior processing.
  • Lodge a complaint with the Hellenic Data Protection Authority or your local supervisory authority.

To exercise any of these rights, email team@themedcrew.com with the subject line "GDPR request". We will respond within 30 days.

8. Cookies & website analytics

Our website uses only the technical cookies strictly necessary to deliver the site and remember your preferences. Any future analytics or marketing cookies will be introduced with a separate consent banner.

9. Changes to this policy

We may update this privacy policy to reflect changes in our practices or the law. The "last updated" date at the top of this page always reflects the current version. Because we store the URL of the policy you accepted with each candidate submission, we can always show you the exact version you agreed to.