Privacy Policy

1. Data Controller

2. Data Collected

We collect the following personal data:

• Full name
• Email address
• Phone number
• ID document (for driver verification)
• Date of birth
• Payment data (processed by PCI-DSS certified third party)
• GPS geolocation data: position, route and speed of the boat recorded in real time by the onboard tracker, processed only for the duration of the rental

3. Purpose of Processing

• Management of booking and rental agreement
• Communications related to the booked service
• Compliance with legal and tax obligations
• Sending promotional communications (only with explicit consent)
• Service improvement and anonymized statistical analysis
• Navigation safety and protection of company assets via the onboard GPS tracker

4. Legal Basis

• Consent: for newsletter subscription and promotional communications
• Contract execution: for booking and rental management
• Legal obligation: for tax and regulatory compliance
• Legitimate interest: navigation safety and asset protection via GPS geolocation of the boat

5. Data Retention

Personal data is retained for a maximum of 24 months from the date of the last rental. Data required for tax compliance is retained for the period specified by applicable law (10 years). Newsletter data is deleted upon consent withdrawal. GPS geolocation data is recorded only for the duration of the rental and deleted or overwritten after the boat is duly returned, except in cases of theft, accidents or legal disputes.

6. Data Subject Rights

In compliance with EU Regulation 2016/679 (GDPR), you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Deletion of data (right to be forgotten)
• Data portability in structured format
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), pursuant to Art. 77 GDPR

To exercise your rights, contact the Data Controller at the email address shown in section 1.

7. Cookie Policy

The site uses technical cookies required for operation and anonymised analytics cookies. Profiling cookies are only activated with the user's explicit consent. Some personal data is processed by third-party providers acting as data processors: Stripe Payments Europe Ltd. (payments and identity verification), Resend Inc. (transactional email), Vercel Inc. (site hosting), Neon Inc. (database), CARTO (interactive map, loaded only at the user's request). Some of these providers are based in the United States: transfers rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

8. Data Protection Officer Contact