Privacy Policy of www.gabrisboatportofino.com
This Website collects some Personal Data from its Users.
The processing is carried out in compliance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection laws.
Last update: 11 October 2025
Data Controller
Gabriele Gronchi
Address: Via Fontana 25, 16038 Santa Margherita Ligure (GE), Italy
VAT No.: 02926430998 – Tax Code: GRNGRL83B17I225P
PEC (certified email): gronchigabriele@pec.it
Contact Email for privacy matters: info@gabrisboatportofino.it
Types of Data Collected
Depending on how the User interacts with the Website, the Controller may process:
- Data voluntarily provided by the User: name, surname, email address, phone number, message content, booking details, billing data if applicable.
- Browsing/usage data: IP address, device identifiers, browser and system characteristics, date and time of requests, pages visited, time spent on each page, scrolling/click actions, referrer.
- Cookies and Tracking Tools (see “Cookies and similar technologies”).
- Communication/support data (if activated): WhatsApp Business, Facebook/Instagram Direct, Messenger, with related metadata (sender, timestamp, profile image, etc.).
Providing personal data marked as mandatory in contact/booking forms is necessary to receive a reply or complete a booking request.
Purposes and Legal Basis of Processing
Personal Data is processed for the following purposes:
| Purpose | Data processed | Legal basis |
|---|---|---|
| Responding to enquiries / booking requests | Contact details, message content | Performance of pre-contractual measures or a contract – Art. 6.1.b GDPR |
| Managing bookings and customer support | Personal and contact data, booking/billing information | Contract (6.1.b) and legal obligations (6.1.c) |
| Legal, accounting and fiscal compliance | Invoicing, fiscal records | Legal obligation – Art. 6.1.c |
| Website security and anti-abuse (logs, firewalls, spam protection) | Browsing logs, IP, technical data | Legitimate interest to ensure Site security – Art. 6.1.f |
| Statistics and site improvement (e.g. Google Analytics 4, anonymized IP) | Usage data | Consent via cookie banner (6.1.a) or legitimate interest only if strictly anonymized and compliant |
| Marketing and remarketing campaigns (Meta Pixel, Facebook Ads, newsletter – if activated) | Browsing data, identifiers, email address | Consent – Art. 6.1.a |
Processing Methods and Security
Processing is carried out using electronic tools and organizational measures strictly related to the purposes stated above and in compliance with GDPR principles (data minimization, integrity, confidentiality, limited retention).
Access to data is restricted to authorized personnel and, if necessary, to Data Processors (external providers) formally appointed pursuant to Article 28 GDPR.
Categories of Recipients (if activated on the Site)
- Hosting and server infrastructure providers
- Email services and anti-spam tools
- Contact form and anti-abuse systems (e.g. reCAPTCHA/hCaptcha)
- Analytics platforms (e.g. Google Analytics 4)
- Tag management tools (e.g. Google Tag Manager)
- Marketing/remarketing tools (e.g. Meta/Facebook Pixel, Custom Audiences)
- Communication tools (WhatsApp Business API, Messenger)
- Map, fonts and video services (Google Maps, Google Fonts, YouTube embed)
The updated list of processors can be requested at: info@gabrisboatportofino.it
Data Transfers Outside the EU/EEA
Some providers may process Data in countries outside the European Economic Area.
In such cases, the Controller ensures the presence of adequate safeguards (e.g. EU Standard Contractual Clauses, adequacy decisions or additional protective measures), in accordance with GDPR Articles 44–49.
Further information is available upon request.
Data Retention Period
| Type of Data | Retention period |
|---|---|
| Contact/booking enquiries | Up to 24 months from last interaction (unless longer retention is necessary for legal defense) |
| Contractual/billing data | As required by law (e.g. 10 years for civil/fiscal records) |
| Security/technical logs | Up to 12 months, unless an incident requires a longer retention |
| Marketing data (newsletter / remarketing) | Until consent is withdrawn or after a reasonable inactivity period (e.g. 24 months) |
Once expired, Personal Data will be deleted or irreversibly anonymized.
User Rights (GDPR)
Users have the right to:
- Access their personal data;
- Request rectification or update of inaccurate data;
- Request erasure (“right to be forgotten”);
- Request restriction of processing;
- Object to processing based on legitimate interest;
- Request data portability;
- Revoke consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal);
- Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Requests can be sent to: info@gabrisboatportofino.it or gronchigabriele@pec.it
Cookies and Similar Technologies
This Website uses technical cookies necessary for its operation and, only with User consent, analytics and marketing cookies (if activated) such as Google Analytics 4 and Meta Pixel.
Consent can be managed or withdrawn at any time through the Cookie Settings panel available on the Site.
For full details on cookie types, providers and retention, please refer to the Cookie Policy.
Commercial Communications
Marketing messages (e.g. via email, SMS, WhatsApp) are sent only with prior consent or, where allowed, under soft opt-in conditions for similar services already purchased.
The User can opt-out at any time via direct unsubscribe link or by writing to the Controller.
Minors
The services offered by this Website are intended for adults.
If the Controller becomes aware that data relating to minors under 14 has been unintentionally collected, such data will be promptly deleted upon request.
Nature of Provision
Providing personal data necessary for responding to enquiries or handling bookings is required; failure to provide it may prevent the Website from delivering the service.
Providing data for analytics and marketing is optional and subject to user consent.
Automated Decision-Making
The Controller does not carry out processing based solely on automated decision-making that produces legal effects concerning the User.
Changes to This Policy
The Controller reserves the right to update this Privacy Policy at any time. Updates will be published on this page and, where technically possible, notified through the Website. Users are invited to check this section regularly.
OPTIONAL: Third-Party Services Extended Section
(Include only if actually active on the Site — I can tailor it exactly if you confirm your plugins)
- Google Tag Manager (Google Ireland): tag management. Data: identifiers, usage data. Legal basis: consent for non-essential tags.
- Google Analytics 4 (anonymized IP): audience measurement. Legal basis: consent. Opt-out via cookie panel.
- Google reCAPTCHA / hCaptcha: anti-spam / form protection. Legal basis: legitimate interest (security) and/or consent depending on configuration.
- Meta Pixel / Facebook Custom Audiences: remarketing (if active). Legal basis: consent (marketing).
- WhatsApp Business / Messenger widget: customer communication. Legal basis: contract or consent.
- Google Maps / YouTube / Google Fonts embeds: interactive content. Legal basis: consent for non-essential embedding.