Privacy Policy

This page explains what happens to your data when you visit or use this site. Efoil Samui is responsible for the business shown on this site; Frederik Goldbach (kitesurfing.me) is responsible for hosting and technical operation — see the Legal Notice for the full split.

Just visiting this page

Server logs (IP address, browser, referrer, timestamp) are recorded briefly to run and secure the site, via Vercel Inc. (USA) — transfer covered by the EU-US Data Privacy Framework and EU Standard Contractual Clauses. Retention: 14 days.

This site sets no cookies. There is no analytics or advertising tracking, so no consent banner is needed.

Fonts are bundled with the site itself, not loaded from a third-party font service — visiting this page does not send your data to a font provider.

Outbound links (WhatsApp, Instagram, Google Maps)

This site's WhatsApp, Instagram and Google Maps links only open when you click them — nothing is sent automatically. Once you do, you leave this site and the linked provider (Meta for WhatsApp/Instagram, Google for Maps) processes your data under its own privacy terms.

Chat assistant (AI)

The chat window on this site answers with an AI model. When you type a message, your message and the visible chat are sent to Microsoft Azure OpenAI, run in the EU (Sweden), to write the answer; Microsoft does not use them to train its models and may keep them for up to 30 days within the EU only to detect abuse. Buttons in the chat (course finder, prices, free times, your booking) are answered by this site itself and are not sent to the AI.

Chats are stored on Supabase in the EU (Frankfurt, Germany) so the school can answer open questions and improve the assistant, and are deleted after 90 days. Please don't type sensitive information (health, payment details) into the chat.

If you have already booked and opened your personal booking link on this device, the chat can show your booking. It reads the strictly necessary cookie the booking page set for exactly that purpose; your booking details are not sent to the AI.

Legal basis: answering your questions and preparing a booking (Art. 6(1)(b) GDPR) and our legitimate interest in a helpful, safe assistant (Art. 6(1)(f) GDPR).

Where your data is stored

Application data (booking requests, if this school takes them) is stored on Supabase, hosted in the EU (Frankfurt, Germany).

Your rights

You have the right to access, correct, delete, restrict or port your data, to object to its processing, and to withdraw any consent you've given. To exercise any of these, use the contact details in the Legal Notice. You also have the right to lodge a complaint with a data protection supervisory authority.

Changes to this policy

This policy may be updated as the site changes. The current version always lives at this URL.

Ready to get on the water with Efoil Samui?

Tell us your dates and your level, and we'll put together the right course for you.