Privacy policy

This notice describes how the personal data of visitors to www.msboatexcursions.com is processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Data controller

The data controller is GIAMA S.r.l., registered at Via San Giuliano 16, 09129 Cagliari, VAT number 02758750927. For any request you can write to serra.marcello@yahoo.it or call 070 41257.

What data we collect

Browsing data. The servers hosting the site record, as any web server does, the technical data of the connection: IP address, browser type, date and time of the request. They serve to run the site and keep it secure, and are not used to identify visitors.

Data you give us. On the Contact page there is a form: the data you enter (name, email, phone if given, number of people, preferred date, type of tour and the text of your message) reaches us by email and nothing else. It does not end up in a database, it does not feed any newsletter and it is not passed to third parties: it serves only to reply to you and to organise the trip. The same applies to what you write to us on WhatsApp, by phone or by email.

The form delivers the message through Resend, the service that handles sending, with servers in the European Union (Ireland); from there the email arrives in the owner's mailbox, hosted by Aruba. Both process the content of the message for the sole purpose of delivering and storing it, as data processors. The legal basis is your request and the performance of pre-contractual measures (Art. 6.1.b GDPR), together with the consent you tick before sending. Emails received remain in the mailbox for as long as is needed to handle the request.

Statistics and advertising: Google's tools

The site uses Google Analytics 4 to understand how many people visit it and which pages they read, and may use Google Ads to measure the results of advertising campaigns and show adverts consistent with the pages visited. Both are loaded through Google Tag Manager and only if you consent in the banner shown on your first visit: the legal basis is your consent (Art. 6.1.a GDPR), which you can withdraw at any time from the Cookie preferences link at the foot of every page.

Even if you decline, your browser contacts Google's servers, which may receive measurements with no cookies and no identifiers (page, time of visit, browser, IP address) used only in aggregate form. How this works is explained in detail in the Cookie policy.

The provider is Google Ireland Limited, which may also transfer data to the United States on the basis of the Data Privacy Framework and the European Commission's standard contractual clauses. Data collected by Google Analytics is kept for the period set on the property (normally 14 months), advertising data according to Google's policies.

Beyond these tools, the site embeds no third-party content: the typefaces are hosted on our own servers, and there are no maps, videos or social widgets.

WhatsApp

The WhatsApp buttons on the site are plain links: they load no Meta code and transmit nothing until you use them. If you choose to write to us on WhatsApp, the conversation is also subject to the privacy notice of WhatsApp Ireland Ltd.

Legal basis and retention

• Running the site and keeping it secure: legitimate interest (Art. 6.1.f GDPR).
• Replying to your requests: responding to a request of yours and pre-contractual measures (Art. 6.1.b GDPR).
• Statistics and advertising through Google's tools: your consent (Art. 6.1.a GDPR), withdrawable at any time.
• Tax and accounting obligations in the event of a booking: legal obligation (Art. 6.1.c GDPR).

Communications received are kept for as long as is needed to handle the request and, where a contract follows, for the periods set by law.

Your rights

You may at any time request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interest, by writing to serra.marcello@yahoo.it. If you believe the processing infringes the GDPR you may contact the Italian Data Protection Authority.