Privacy Policy

This privacy notice is provided pursuant to Regulation (EU) 2016/679 (hereinafter “GDPR”) and applicable national legislation on the protection of personal data.

1. Data Controller

The Data Controller of personal data is: Velar Yacht
Email: info@velaryacht.it

2. Types of Data Collected

Through the forms available on the website, the Controller collects and processes the following categories of personal data:

• Identification and contact details: name, surname, email address, phone number.
• Information related to the request: content of the message sent, departure and arrival dates indicated by the user.

Providing such data is optional; however, refusal to provide them will make it impossible to process the submitted request.

3. Purpose and Legal Basis of Processing

The personal data provided will be processed by the Controller for the following purposes: a) Management of information and quotation requests: data are used to respond to contact requests, provide information about the services offered, and prepare personalized quotations.

• Legal basis: performance of pre-contractual measures adopted at the request of the data subject (Art. 6(1)(b) GDPR).

b) Possible management of bookings and fulfillment of contractual or legal obligations: in the event of a subsequent conclusion of a contract.

• Legal basis: performance of a contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR).

c) Protection of the Controller’s rights: for possible judicial or extrajudicial defense of its rights.

• Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).

4. Methods of Processing and Data Retention

The processing of personal data will be carried out using manual, IT, and telematic tools, with logic strictly related to the stated purposes and in compliance with the security measures required by applicable law. Data will be retained for no longer than is necessary for the purposes for which they are collected, and in any case:

• for the management of requests and quotations, data will be retained for a maximum of 12 months from receipt of the request;
• if a contractual relationship is established, data will be retained for the duration of the contract and for an additional 10 years, in compliance with tax and civil law obligations;
• for the protection of the Controller’s rights, data will be retained until the statute of limitations for the related rights expires.

5. Recipients of Personal Data

Personal data may be communicated to third parties that provide services instrumental to the purposes mentioned above (such as IT service providers, consultants, hosting providers), duly appointed as Data Processors pursuant to Art. 28 GDPR. Data will not be disclosed or transferred to non-EU countries, except in cases required by law.

6. Data Subject Rights

As a data subject, the user may exercise at any time the rights recognized by Articles 15–22 of the GDPR, in particular:

• Access: obtain confirmation of the existence of personal data concerning them and receive a copy of such data;
• Rectification: request the correction of inaccurate data or the completion of incomplete data;
• Erasure: request the deletion of personal data in the cases provided for by Art. 17 GDPR;
• Restriction: request restriction of processing in the cases provided for by Art. 18 GDPR;
• Portability: receive personal data in a structured, commonly used, and machine-readable format, and request the transfer of such data to another controller where technically feasible;
• Objection: object, in whole or in part, to the processing of personal data for reasons related to their particular situation;
• Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

The user may exercise these rights by sending a communication to the Controller at the contact details provided above. If the user believes that the processing of their personal data violates applicable law, they have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. Changes to this Privacy Policy

The Controller reserves the right to update this privacy policy at any time. Any changes will be promptly published on the website. Users are therefore invited to periodically consult this section.