Effective: 29 October 2026
1. Who is responsible for your data?
The controller for F7sailing and the services described here is Outcome Magyarország Zrt.
Registered office: 2636 Tésa, Ady Endre utca 11., Hungary
Hungarian tax number: 14220823-2-13
Contact: Miklós Herendi
Email: miklos.herendi@outcome.hu
Telephone: +36 20 436 3340
Website: f7sailing.com
This notice covers website use, visitor accounts, registration discount emails, social sign-in, travel enquiries and data processing related to our Tally questionnaires. We provide further information during the booking process about additional information needed to arrange a trip.
2. Registration and your discount code
When you register, we process your email address, optional first name, technical account references, chosen language and the technical information needed to create and operate your account. We use this information for registration, sign-in, password setup and recovery, and to send your registration discount code and necessary account messages. Passwords are protected by WordPress password handling; we do not send your password by email.
The legal basis is providing the account service and discount you request, and taking the necessary steps at your request: GDPR Article 6(1)(b). Registration does not subscribe you to a newsletter. You can view trip pages and use the questionnaires as a guest.
3. Sign in with Google or Facebook
Social sign-in is optional and available only when the relevant provider is enabled. Based on the access you approve, the provider may share your name, email address, profile picture and provider account identifier. We use these for sign-in, creating or linking your F7sailing account and managing that account. We do not receive your Google or Facebook password.
Google sign-in uses basic account information; we do not request access to your Gmail messages, contacts or Google Drive files. We do not sell the Google information received for sign-in or use it for advertising profiling. You can revoke F7sailing’s access in the provider’s account settings and separately request deletion of your F7sailing account. F7sailing’s account processing relies on GDPR Article 6(1)(b). The provider describes its own processing in its privacy notice.
4. Questionnaires and travel enquiries
Our Tally questionnaires process your answers about travel preferences, travelling companions, shared life onboard and comfort at sea, together with any contact information you provide. The questionnaire link also passes the selected trip, source page and language references. When you are signed in, we may pass a random F7sailing account reference to Tally to associate your responses with your account. We do not include your email address or password in the questionnaire URL.
We use the answers to discuss suitable trips and arrangements and to contact you as requested. Processing necessary to prepare travel arrangements and respond to your request relies on GDPR Article 6(1)(b). The questionnaire does not make solely automated decisions producing legal or similarly significant effects; we use the answers for personal discussion.
5. Technical information, cookies and security
Hosting and security providers may process technical information such as IP addresses, browser details, timestamps and sign-in logs. F7sailing processes information necessary for security and abuse prevention under GDPR Article 6(1)(f). Our legitimate interest is protecting visitor accounts, the website and personal information.
We use cookies needed for sign-in and language choices, and session storage to remember that you dismissed the registration invitation. You can remove cookies and website data in your browser; this may affect sign-in and whether the invitation appears again. The WordPress.com / Jetpack provider notice linked below explains additional technologies used by those services. Technologies requiring consent must be managed consistently with the website’s actual configuration.
6. Who can access the information?
Authorised people involved in travel enquiries and website operation, and providers needed to deliver the service, may process the information. WordPress.com / Automattic supplies hosting and certain technical services. Tally BV, Belgium, supplies the questionnaire service and processes form responses on behalf of the form creator. Google and Facebook, where enabled, supply their respective sign-in services.
Tally states that its form data is stored in Europe. Other providers may process information outside the European Economic Area. Such transfers require an applicable adequacy decision or another appropriate GDPR safeguard, such as standard contractual clauses. You can contact us for further information about the transfer arrangements applicable to the service.
7. How long do we retain information?
We keep account information while your account exists; you may request account deletion at any time. Enquiries and questionnaire responses that do not lead to a booking are retained for up to 12 months after the last substantive contact, then deleted or anonymised unless another justified purpose or obligation requires retention. Where a booking is made, we provide further information about the necessary processing during the booking process.
Legal obligations or specific legal claims may justify retaining limited information for longer. Providers’ backups are subject to their contractual backup and deletion cycles.
8. Your rights and how to contact us
You may request access, correction, erasure or restriction of processing, and data portability where the GDPR conditions apply. You may object to processing based on legitimate interests for reasons relating to your particular situation. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Send requests to miklos.herendi@outcome.hu. Where needed, we may request proportionate information to verify your identity. Under the GDPR, we normally respond within one month. You may complain to the Hungarian National Authority for Data Protection and Freedom of Information or another competent supervisory authority, and seek a judicial remedy.
9. Provider privacy information
Google · Meta / Facebook · WordPress.com / Automattic · Tally · Tally: form data and GDPR