Legal
Last updated 27 July 2026
This policy explains what personal data Koshi Marine collects through koshimarine.com, why we collect it, who we share it with, how long we keep it and what you can do about it. We have tried to write it in plain language rather than legal boilerplate.
Koshi Marine designs and builds carbon fibre boats. We are the data controller for the personal data described here, which means we decide why and how it is processed.
| Legal entity | [FULL REGISTERED COMPANY NAME] |
| Registered address | [STREET, POSTCODE], Prizren, Republic of Kosovo |
| Business number (NUI) | [NUI] |
| info@koshimarine.com | |
| Phone | +383 49 973 407 |
We process personal data under Law No. 06/L-082 of the Republic of Kosovo on the Protection of Personal Data, which transposes the EU General Data Protection Regulation. Where we offer boats to, or monitor the behaviour of, people located in the European Economic Area or the United Kingdom, the GDPR and UK GDPR apply directly to that processing. References to Article numbers below are to the GDPR, and the equivalent provisions of the Kosovo law apply in parallel.
3.1 What you give us
Through the contact form: first name, last name, email address, phone or WhatsApp number, your message, and confirmation that you accepted this policy.
Through the dealer application form: company name, region or country, contact name, phone or WhatsApp number, indicated annual sales capacity, the marine brands you currently represent, your message, and confirmation that you accepted this policy.
Through direct contact: anything you choose to include when you email us, call us, message us on social media, or meet us at a boat show.
3.2 What is collected automatically
Technical data: IP address, browser type and version, operating system, device type, screen size, referring page, the pages you view, and the time and duration of your visit.
Cookies and similar technologies, described in section 6. Apart from the strictly necessary ones, none are set unless you allow them.
3.3 What we do not want
We do not knowingly collect special category data such as health, biometric, religious or political information. Please do not include anything of that nature in your messages to us.
| Purpose | Data used | Legal basis |
|---|---|---|
| Answer your enquiry, arrange a sea trial, send a technical pack or pricing | Contact form data, correspondence | Steps taken at your request before entering a contract, Art. 6(1)(b) |
| Assess and respond to a dealership application | Dealer form data, correspondence | Pre-contractual steps, Art. 6(1)(b), and our legitimate interest in building a dealer network, Art. 6(1)(f) |
| Deliver a boat, handle warranty and after-sales service | Contact and order details | Performance of a contract, Art. 6(1)(b) |
| Keep the site available, secure and free of spam and abuse | Technical data, server logs | Legitimate interest in the security and integrity of our systems, Art. 6(1)(f) |
| Understand how the site is used and improve it | Analytics cookies and the data they generate | Your consent, Art. 6(1)(a) |
| Measure advertising performance, build audiences, show relevant ads | Advertising cookies and identifiers | Your consent, Art. 6(1)(a) |
| Meet tax, accounting and other legal obligations | Correspondence and transaction records | Legal obligation, Art. 6(1)(c) |
Where we rely on your consent you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of what we did before you withdrew it. Where we rely on legitimate interest, you can object, and we will stop unless we have compelling grounds that override your interests.
We send marketing email only if you asked for it, or if you enquired about a boat and we are contacting you about something closely related. Every message carries an unsubscribe link, and you can also write to us. Declining marketing has no effect on your enquiry: we will still answer it properly.
On your first visit we show a consent banner, provided by Cookiebot. Until you make a choice, nothing beyond the strictly necessary is set. You can change your decision at any time using in the footer of any page.
| Category | What it does | Examples and lifespan |
|---|---|---|
| Strictly necessary | Remembers your cookie choice, protects the enquiry forms against automated spam, and keeps the connection secure. Cannot be switched off, and needs no consent. | CookieConsent (Cookiebot), 12 months.
Netlify spam-protection storage, session. |
| Analytics | Google Analytics 4. Shows which pages are read, how visitors move through the site, and which models attract attention, so we can improve what we publish. | _ga up to 2 years, _ga_<id> up to 2 years |
| Marketing | Google Ads and Meta. Measures which advertising produces real enquiries, and allows us to show relevant ads to people who have already visited the site. | _gcl_au about 90 days, _fbp about 90 days,
_fbc about 90 days |
Cookiebot records your choice and the time you made it, so that both you and we have a reference for what was agreed. This record is kept for 12 months.
We use Google Consent Mode v2. Until you give consent, Google tags either do not load at all or load without cookies and without any user identifier. Advertising click identifiers are redacted until you allow marketing cookies.
Videos on this site do not load until you press play, and they are served from youtube-nocookie.com, which does not set tracking cookies before playback begins.
Typefaces are served by Google Fonts, which receives your IP address in order to deliver the font files. This happens because the font is needed to render the page.
We do not sell personal data and we do not share it for anyone else's independent marketing. We do share it with the following, each under a data processing agreement or, where marked, as an independent controller for its own purposes:
| Recipient | Why | Where |
|---|---|---|
| Netlify, Inc. | Website hosting and form processing. Your enquiry passes through Netlify before it reaches us. | United States |
| Google Ireland Ltd. and Google LLC | Analytics, Tag Manager, Ads measurement, Fonts. Joint or independent controller for parts of this. | Ireland and United States |
| Usercentrics A/S (Cookiebot) | Showing the consent banner and keeping a record of your cookie choice | Denmark, European Union |
| Meta Platforms Ireland Ltd. | Advertising measurement, only if you allowed marketing cookies. Joint controller for the measurement. | Ireland and United States |
| [EMAIL PROVIDER, e.g. Google Workspace] | Receiving and answering your message | [REGION] |
| Appointed dealers and distributors | Only where your enquiry concerns their territory and only with your knowledge, so they can serve you locally. | Varies |
| Accountants, auditors, lawyers, and public authorities | Where the law requires it or to establish or defend a legal claim | Kosovo and EU |
Some of the providers above are established in the United States. Under Article 45 of the Kosovo Law on the Protection of Personal Data, transfers may be made to countries and organisations that offer an adequate level of protection. Where adequacy does not apply, we rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, on the EU-US Data Privacy Framework. Write to us if you would like a copy of the safeguards in place for a particular transfer.
| Record | Retention |
|---|---|
| Enquiries that do not lead to a sale | 24 months from our last contact with you, then deleted |
| Dealer applications, unsuccessful | 24 months from the decision |
| Dealer and customer relationships | Duration of the relationship, then [6] years for legal and warranty purposes |
| Invoices and accounting records | As required by Kosovo tax and accounting law |
| Server and security logs | Up to 12 months |
| Analytics and advertising data | As stated in section 6, and no longer than 14 months in Google Analytics |
| Your cookie choice, logged by Cookiebot | 12 months, after which we ask again |
The site is served exclusively over HTTPS with HTTP Strict Transport Security, so everything you submit is encrypted in transit. Access to enquiries is limited to the people at Koshi Marine who need it to do their job. No system is perfectly secure, but if a breach occurs that is likely to result in a risk to your rights we will notify the Information and Privacy Agency within 72 hours, and we will tell you directly where the risk is high.
You have the right to:
To exercise any of these, email info@koshimarine.com. We answer within one month, and we will tell you if we need longer because the request is complex. There is no charge unless a request is manifestly unfounded or excessive.
If you are unhappy with our answer, you can complain to the Information and Privacy Agency of the Republic of Kosovo. If you are in the EEA or the United Kingdom, you may instead complain to the supervisory authority where you live or work.
This site is intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, write to us and we will delete it.
We update this page when our practices change. The date at the top always reflects the current version. If a change is significant we will say so on the site, and where the law requires it we will ask for your consent again.
[FULL REGISTERED COMPANY NAME]
[STREET, POSTCODE], Prizren, Republic of Kosovo
info@koshimarine.com
+383 49 973 407
[If you appoint a Data Protection Officer or an EU representative under Art. 27 GDPR, add their name and contact details here]