PRIVACY POLICY

1. DATA CONTROLLER

2. PURPOSE AND LEGAL BASIS OF DATA PROCESSING

Your personal data are processed for the following purposes:

3. TYPES OF PERSONAL DATA COLLECTED

During the booking process, the following personal data are collected:

• First and last name
• Email address
• Phone number
• Date of birth
• Country of birth
• Type of identification document
• Identification document number
• Boat license number (if required)

Data collected through cookies and tracking technologies:

• IP address (anonymized)
• Browser and device information
• Visited pages and time spent
• Navigation path on the website
• Referrer (source site)

4. METHODS OF DATA COLLECTION

Personal data are collected directly from the data subject through:

• Online booking forms on the website
• Direct input by the user during the registration process
• Cookie and tracking technologies (with prior consent)

5. DATA RECIPIENTS

Your personal data may be disclosed to:

• Competent authorities for compliance with legal obligations
• Technical service providers for website and database management (with appropriate security guarantees)
• Google LLC for web analytics services through Google Analytics (with the guarantees provided by standard contractual clauses)
• Authorized persons working under the direct authority of the Controller

Data will never be disclosed to third parties for commercial or marketing purposes without your explicit consent.

6. INTERNATIONAL DATA TRANSFERS

Your personal data are stored on servers located in:

• DigitalOcean in Frankfurt (Germany), within the European Union
• Google LLC (United States) for Google Analytics services, with the guarantees provided by standard contractual clauses approved by the European Commission

All transfers are made in compliance with the protection standards established by the GDPR.

7. DATA RETENTION PERIOD

Personal data will be kept for the time necessary to achieve the purposes for which they were collected:

• Contract data: Data relating to bookings and the rental contract will be kept for the entire duration of the contractual relationship and subsequently for the period prescribed by tax and civil legislation (usually 10 years)
• Data for legal obligations: Data required by maritime safety legislation will be kept for the legally prescribed periods
• Data for analysis: Data collected through Google Analytics will be kept for a maximum period of 26 months, unless otherwise configured
• Right to erasure: The data subject may request the deletion of their data at any time, subject to legal provisions requiring retention

8. RIGHTS OF THE DATA SUBJECT

As a data subject, you have the right to:

9. AUTOMATED DECISION-MAKING

The Controller does not use automated decision-making processes, including profiling, that produce legal effects or similarly significantly affect the data subject.

10. COOKIES AND SIMILAR TECHNOLOGIES

The website uses only technical cookies necessary for the functioning of the website:

Disabling cookies: Disabling technical cookies may compromise the proper functioning of the site. Disabling analysis cookies does not affect navigation.

11. RIGHT TO COMPLAIN

The data subject has the right to lodge a complaint with the competent supervisory authority (Information Commissioner's Office - www.ico.org.uk) if they consider that the processing of their personal data violates EU Regulation 2016/679.

12. CONTACT FOR EXERCISING RIGHTS

For any questions regarding the processing of your personal data or to exercise the rights provided for by the GDPR, you can contact:

13. UPDATES

This privacy policy may be updated periodically. The most recent version will always be available on the website with the date of the last update.