Privacy policy

PRIVACY POLICY PURSUANT TO ART. 13 OF THE EUROPEAN REGULATION 679/16 (GDPR)
FOR THE PROCESSING OF PERSONAL DATA

In compliance with European Regulation 679/16 (GDPR) and subsequent amendments, we provide you with the necessary information regarding the processing of personal data you provide. This information is not valid for other websites that may be consulted via links on the websites under the owner’s domain, who is not responsible in any way for third-party websites. This is an information notice provided pursuant to Article 13 of the European Regulation on the protection of personal data.

  1. The “DATA CONTROLLER” is Raspagliesi Enrico – VAT IT03398160832 – Tax Code RSPNRC58T12G371J, email: info@charterboattaormina.com, Tel.: +393286751858;
  2. The processing will be carried out both manually and using computer and telematic tools, in compliance with current regulations and principles of fairness, lawfulness, transparency, relevance, completeness, non-excessiveness, accuracy, and according to organizational and processing logic strictly related to the purposes pursued, ensuring the security, integrity, and confidentiality of the processed data, in compliance with the organizational, physical, and logical measures required by current provisions.
  3. For the purposes set out in this policy, only non-sensitive personal data will be processed. Specific notices may be provided on the Website pages concerning particular services or data processing provided by the User or the Data Subject, and appropriate consent will be collected in such cases where necessary.

Purpose of Processing

  1. Allow navigation on this website and the technical management of its connections. The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data that is implicitly transmitted when using Internet communication protocols. These data are not collected to be associated with identified data subjects. They are used only for statistical information (thus anonymous) and to verify the proper functioning of the Site.
  2. Possible contact requests by the interested party, to respond to them, and to follow up on requests for assistance and customer/user needs. Only the data provided by the interested party in relation to the services offered by the Data Controller will be processed for this purpose.

The requested data for the indicated purposes are necessary to allow navigation on the site, respond to contact requests, and/or booking requests. Failure to provide them may make it impossible to navigate the site, obtain responses to queries, and receive requested services.

The legal basis and lawfulness of processing can be identified in contractual or pre-contractual obligations related to providing a service or responding to requests from the interested party (Art. 6 letter b)).

The provided data will be retained for the time technically necessary for the purposes described in point a, while browsing data will be stored only for the technical time necessary to establish the connection. Contact data will be retained for the period necessary to manage the requests of the interested party.

It is noted that provided data may be processed for the protection of the Data Controller’s legitimate interests and legal defense. The principles of necessity, proportionality, and non-excessiveness will also be applied, and retention will be aligned with what has been previously stated.

Contacting the User

The User, by filling in the contact form with their data, consents to its use to respond to information requests, quotes, or any other kind of request indicated in the form’s header.

Purchases on the Site

Your personal data will be processed to allow you to make purchases through the Site and correctly manage all operations necessary for the conclusion and execution of the sales contract. If required by applicable regulations, data may also be used to fulfill tax and accounting obligations. In this regard, communications related to your order (e.g., excursion status updates) may be sent via automated tools such as SMS or WhatsApp.

The legal basis for this processing is the fulfillment of the contract entered into with the user and compliance with any legal obligations.

Regardless of your explicit consent, the Data Controller may use the email address provided at the time of purchase to send promotional communications about products or services similar to those already purchased, in accordance with Article 130 of the Privacy Code (so-called “soft-spam”). The user will always have the option to oppose this processing by following the procedures outlined in this policy.

The legal basis for this activity is the legitimate interest of the Data Controller, as such communication is considered in line with the user’s expectations. However, the Data Controller does not use user data to send reminder emails regarding the purchase of specific products or services.

Disclosure, Possible Recipients, or Categories of Recipients of Data

No data will be disclosed in any way.

The provided data will be processed exclusively by authorized personnel under the Data Controller’s supervision and by data processors contractually bound to the Data Controller (Art. 28 of Regulation 2016/679), such as IT service providers, telecommunications network managers, professionals, consultants, or service providers. Data will only be shared when strictly necessary for technical or professional reasons, preferably in an anonymized format where possible.

Data will be processed within the EU.

An updated list of all Data Processors’ identifying details can be requested from the Data Controller at any time.

Data may also be communicated to third parties (Public Entities, Police Forces, Judicial Authorities, etc.) exclusively to comply with legal, regulatory, or community law obligations.

Data Subject Rights (Articles 15, 16, 17, 18, 19, 20, 21, and 77 of the GDPR)

You have the right to know the recipients of any data communications, access your personal data, request rectification, deletion (including the right to be forgotten), restriction of processing, data portability, and object at any time to the processing of your personal data.

Additionally, you have the right to withdraw your consent to data processing at any time without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7, paragraph 3 of the GDPR). Pursuant to Art. 77 of the Regulation, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State where you usually reside, work, or where the alleged violation occurred. In Italy, this corresponds to the Data Protection Authority (www.garanteprivacy.it).

You can exercise these rights by contacting the Data Controller using the contact details provided in this Privacy Policy.

This Privacy Policy was drafted on 01/03/2025.

The Data Controller: Raspagliesi Enrico