This policy describes how Di.Gi. Mooring S.r.l.s. processes the personal data of users who visit www.gommonifavignana.it and of anyone who contacts us to request information, rent an inflatable boat or book a berth, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended by Decree 101/2018.
1. Data Controller
The Data Controller is Di.Gi. Mooring S.r.l.s., with registered office at Via A. Damiani 7, 91023 Favignana (TP), Italia and operating base at Porto di Favignana, 91023 Favignana (TP), Italia, VAT/Tax ID 02485620815, REA TP-174564.
For any request regarding the processing of your personal data, you can contact us by email at francescogianquinto@libero.it, francescogianquinto91@gmail.com or by phone at +39 388 393 0470.
2. Data we collect
While browsing the site and using our forms we may collect the following categories of data:
- Contact details: first name, last name, email address, phone/WhatsApp number.
- Request details: arrival and departure dates, requested boat type, length (LOA), beam and draft for berth requests, and any additional notes.
- Browsing data: IP address, browser type, pages visited, date and time of access, collected in aggregate form through the standard server logs required to run the site.
3. Purposes and legal basis
Personal data is processed for the following purposes:
- Responding to information requests, quotes, boat rentals and berth bookings (legal basis: pre-contractual measures and contract performance, Art. 6.1.b GDPR).
- Complying with accounting, tax and legal obligations related to the service provided (legal basis: legal obligation, Art. 6.1.c GDPR).
- Ensuring the security and proper functioning of the site (legal basis: legitimate interest of the Data Controller, Art. 6.1.f GDPR).
4. How data is processed
Data is processed using IT tools, with logic strictly related to the purposes indicated, adopting technical and organisational security measures suitable to prevent loss, unlawful or improper use, and unauthorised access.
5. Data sharing and third-party providers
Data is never sold or disclosed to third parties for their own purposes. It may be shared with parties acting as data processors (Art. 28 GDPR), such as hosting, transactional email and database providers used to deliver the service, exclusively for the purposes described above.
The site does not use cookies or profiling tools for advertising purposes, and data is not shared with third parties for marketing purposes.
6. Data transfer outside the EU
Some technical providers used to deliver the service (e.g. hosting and email delivery) may process data outside the European Economic Area. In such cases, the transfer is based on Standard Contractual Clauses approved by the European Commission or adequacy decisions, ensuring an adequate level of protection.
7. Data retention
Data collected through contact forms is kept for as long as needed to handle the request and, if a contract is concluded, for the period required by applicable tax and civil law (typically 10 years for accounting records). Browsing data is kept for a limited period, generally no more than 7 days, unless needed to investigate computer crimes.
8. Your rights
You can exercise the following rights under Articles 15-22 GDPR by contacting us using the details in section 1:
- Right of access to your personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”), within the limits set by law.
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing.
- Right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Minors
The services offered on the site are intended for adults. We do not knowingly collect personal data from minors without the consent of a parent or legal guardian.
10. Changes to this policy
This policy may change over time, including due to regulatory developments. Please check this page periodically to stay informed.