The Data Controller is Bertoldi Boats S.r.l., based in Sirmione (BS), Piazzale Europa No. 14, Tax ID and VAT number 03504290986, certified email: [email protected].
Privacy policy
Data Controller
Types of Data Processed
The Data Controller will process your personal data of a common nature (first name, last name, tax code, email address, phone number) in accordance with the principles of relevance, non-excessiveness, minimization, and accuracy.
Purpose of Processing
The website provides informational and promotional content, as well as access to a reserved area for bookings and the Club130 blog subscription section.
The processing of personal data is therefore aimed at achieving the following purposes:
a. registration on the Website and access to services reserved for registered users;
b. in the case of an online booking, to allow the conclusion of the purchase contract and the correct execution of related operations;
c. limited to your email address, and only for occasional communications sent exclusively through the address you provided during a purchase via the Website, to allow the direct offer of similar products by the Company (so-called soft spamming);
d. with your prior consent, for the sending of newsletters and for conducting market research, including assessing user satisfaction, and for sending advertising materials relating to products of the Company and/or third parties via email (marketing purposes);
e. if the chat service is active, to allow the activation of the service through which you can contact and be contacted by the Company, with your prior consent, during your browsing of the Website. Provision of data is optional, but refusal to provide your personal data will make it impossible for the Company to contact you via chat;
f. to manage any requests received through the customer care service via email, telephone, or WhatsApp messaging. Provision of data is optional, but refusal will make it impossible for the Company to respond to your requests via this service;
g. to comply with legal or regulatory obligations, in particular in administrative and accounting matters;
h. for statistical purposes or market research.
Legal Basis for Processing
For purposes under points a and b, the legal basis is the performance of a contract to which the data subject is a party or the implementation of pre-contractual measures requested by the data subject, including on behalf of third parties (e.g., gifts, gift cards, etc.).
For purpose c, the legal basis is the legitimate interest of the Company in sending informational material.
For purpose d, the legal basis is the data subject’s consent, expressed through a specific acceptance checkbox during registration on the e-commerce platform of the Website. Lack of consent for marketing purposes will not prevent normal browsing or other services, but will prevent the receipt of promotional material and the participation in market research or newsletters.
For purposes e and f, the legal basis is the performance of a contract to which the data subject is a party, the implementation of pre-contractual measures requested by the data subject, or the legitimate interest of the Company in performing these activities.
For purpose g, the legal basis is compliance with a legal obligation to which the Data Controller is subject.
For purpose h, the legal basis is the data subject’s consent expressed through a specific acceptance of the cookie policy upon accessing the Website.
Methods of Processing
Your personal data will be processed with the help of electronic means in accordance with Article 32 of EU Regulation 679/2016. The IT systems and software procedures supporting this website automatically acquire some personal data during normal operation, the transmission of which is implicit in the use of Internet communication protocols.
This category includes IP addresses, browser type, operating system, domain name, referring and exit pages, pages visited within the site, access times, internal path analysis, and other parameters relating to the user’s operating system and IT environment. Such technical data are collected and used exclusively in aggregated and anonymized form for statistical analysis to improve the structure and content of the Website.
The Data Controller will directly acquire data you provide in the “BOOKINGS,” “CLUB130,” and “CONTACTS” sections, which will be used for the purposes described above. Information will always be collected in compliance with the principles of relevance and non-excessiveness with respect to the services provided.
Communication and Disclosure of Data
Personal data collected will not be disclosed.
However, data may be communicated to third parties appointed as external data processors, or to business partners whose role is necessary to carry out company activities, when required by law or administrative provisions.
Some personal data may be disclosed for statistical and market research purposes in anonymous and aggregated form.
Payment data you provide for purchases will not be processed or stored by the Data Controller, as they will be redirected to third-party payment platforms acting as independent data controllers.
Transfer of Data Outside the European Union
Your navigation data may be processed both inside and outside the European Union by external data processors in compliance with adequate security measures as required by EU Regulation 679/2016.
Retention of Personal Data
Data provided for purposes under points a, b, e, f, and g will be retained for the duration of your user registration and, in any case, no longer than the period required by law for accounting records. Data provided for purposes under points c, d, and h will be retained until withdrawal of consent and, in any case, only for the time strictly necessary for the intended purpose. In case of deletion of your user profile, your data will be deleted within 90 days from the request.
Rights of the Data Subject
You may exercise your rights at any time as provided under Articles 15 to 22 of EU Regulation 2016/679 (GDPR).
You may also file a complaint with the competent supervisory authority, contacting the Italian Data Protection Authority directly.
These rights may also be exercised following the deletion instructions in the Cookie Policy, or by writing to the certified email address provided above.
