Privacy Policy of pasqualinocoast.it
Last updated: May 29, 2025
This Privacy Policy describes the methods of managing the website https://www.pasqualinocoast.it/ with regard to the processing of personal data of users who browse and interact with it.
This information notice is provided in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection legislation.
1. Data Controller
The Data Controller of personal data is:
Relais Von Gunderrode
Via Luigi De Maio 38, 80067 Sorrento (NA), Italy
Email: andrea.azzaritifumaroli@pec.it
VAT No.: 05146141212
2. Personal Data Collected
The Controller collects various types of personal data depending on how the user interacts with the website:
Browsing Data:
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals but, by its nature, could allow users to be identified through processing and association with data held by third parties. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters related to the user’s operating system and IT environment. These data are used solely to obtain anonymous statistical information on site usage and to ensure its proper functioning, and are deleted immediately after processing.
Data voluntarily provided by the user:
Through contact/information request forms: Name, Surname, Email address, Phone number, Message.
Through booking forms (if present): In addition to the above, the following may also be requested: Date of birth, Payment data (e.g., credit card number – managed by external payment providers and not stored directly by the Controller), Booking details (e.g., type of boat, dates, number of people, special requests).
For newsletter subscription (if available): Email address.
Data collected via cookies:
The website uses cookies and similar technologies. For more information, please refer to our specific Cookie Policy.
3. Purposes and Legal Bases of Processing
Personal data are processed for the following purposes and on the following legal bases:
Service delivery and request management
(Legal basis: Performance of a contract or pre-contractual measures)Responding to information, quote, and availability requests
Managing bookings and boat rental services
Providing customer support
Improvement of user experience and site functionality
(Legal basis: Legitimate interest of the Controller)Anonymous statistical analysis of site usage (e.g., most visited pages, time spent)
Ensuring proper operation of the site
Compliance with legal obligations
(Legal basis: Legal obligation)Complying with tax, accounting, and other applicable legal requirements
Responding to requests from competent authorities
Sending marketing communications
(Legal basis: Consent of the data subject – if applicable)Sending newsletters, promotional offers, and commercial communications related to the Controller’s services, only with the user’s explicit consent
4. Data Processing Methods
The processing of personal data is carried out using manual, IT, and telematic tools, with logic strictly related to the purposes indicated above and in a manner that ensures the security and confidentiality of the data, in compliance with applicable regulations. The Controller adopts appropriate technical and organizational security measures to prevent data loss, unlawful or improper use, and unauthorized access.
5. Recipients of Personal Data
The personal data collected may be disclosed to:
Internal staff of the Controller authorized to process the data (e.g., administrative, commercial, marketing, IT staff)
Service providers acting as Data Processors on behalf of the Controller (e.g., IT service providers, hosting services, email marketing platforms, payment providers). These providers are bound by specific contracts that require compliance with data protection regulations
Judicial or administrative authorities, public entities, if required by law or a legitimate order
Business partners, only if necessary for the provision of the service requested by the user (e.g., in the case of tourist packages including third-party services), and in any case only with the user’s consent or based on an appropriate legal basis
6. Data Transfers Outside the EU
The management and storage of personal data will take place on servers located within the European Union. If it becomes necessary to transfer personal data to countries outside the European Union, the Controller undertakes to ensure that the transfer complies with the provisions of the GDPR (e.g., through standard contractual clauses, adequacy decisions, or with the user’s explicit consent).
7. Data Retention Period
Personal data will be kept only for the time strictly necessary to achieve the purposes for which they were collected, and in any case no longer than the period required by applicable laws (e.g., 10 years for tax and accounting purposes). For contact/quote requests, data will be retained for the time needed to process the request and a short subsequent period for any follow-up. For marketing purposes, data will be retained until the user withdraws their consent.
8. Data Subject Rights
As a data subject, you have the following rights under the GDPR:
Right of access (Art. 15): Obtain confirmation as to whether or not personal data concerning you is being processed and, if so, access to the data and related information
Right to rectification (Art. 16): Obtain the rectification of inaccurate personal data without undue delay
Right to erasure (“right to be forgotten”) (Art. 17): Obtain the erasure of personal data concerning you without undue delay, under certain conditions
Right to restriction of processing (Art. 18): Obtain restriction of processing under certain circumstances
Right to data portability (Art. 20): Receive the personal data you have provided in a structured, commonly used, and machine-readable format, and transmit those data to another controller without hindrance
Right to object (Art. 21): Object at any time, on grounds relating to your particular situation, to the processing of your personal data
Right to withdraw consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
Right to lodge a complaint: Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11 – 00187 Rome – https://www.garanteprivacy.it/
To exercise your rights, you may contact the Data Controller using the contact details provided in Section 1 of this Policy.
9. Changes to this Privacy Policy
The Data Controller reserves the right to amend this Privacy Policy at any time, providing notice to users on this page. Users are therefore advised to consult this page regularly, referring to the date of the latest modification indicated above.
