Privacy policy
This information is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and describes how the personal data of users who visit www.privatecruiseslakecomo.com (hereinafter “Site”) are processed.
- 1. Data controller
- 2. Types of data collected
- 3. Purpose of processing
- 4. Legal basis for processing
- 5. Method of treatment
- 6. Nature of provision of data
- 7. Data recipients
- 8. Transfer of data to countries outside the EU
- 9. Retention period
- 10. Rights of the data subject
- 11. Right of complaint
- 12. Changes to this policy
1. Data controller
The data controller is:
- Italica Trasporti Navali Como S.r.l.
- VAT ID: 13340320962
- Via Ferdinando Bocconi, 4 20136 Milano
- itnac@pec.it
2. Types of data collected
By browsing the site, the following data may be collected:
- Navigation technical data: While browsing the Site, some of the user’s personal data are automatically collected through technical tools and cookies, including:
- IP address
- Type of browser and device used
- Operating system
- Pages visited and time spent
- Geographic origin (at the general area level)
- Technical traffic information
This data is collected through Matomo, a web analytics platform installed on servers operated directly by the Data Controller, and is not anonymized. The full IP address is then processed, making the data potentially traceable to the user.
- Data provided voluntarily: The optional, explicit and voluntary sending of data through contact forms or emailing involves the subsequent acquisition of these data (e.g. name, email address, phone number), which are necessary to respond to requests.
3. Purpose of processing
Personal data are processed for the following purposes:
- Site navigation and operation: ensure proper content delivery and security of the Site.
- Statistical analysis and service improvement: collect aggregate and statistical data on the use of the Site, through the Matomo platform installed on servers owned by the Data Controller. In this context, IP addresses are not anonymized and may constitute personal data under the GDPR. Tracking occurs only with the explicit consent of the user via the cookie banner.
- Response to requests: responding to inquiries received through contact forms or via email.
4. Legal basis for processing
The legal bases are:
- Execution of a contract or pre-contractual measures (Art. 6.1.b GDPR): to respond to requests sent voluntarily by the user.
- Legitimate interest of the Owner (Art. 6.1.f GDPR): to ensure the security of the Site and prevent misuse.
- Data Subject Consent (Art. 6.1.a GDPR): for the use of cookies and analytics tools such as Matomo that track identifiable data (e.g., full IP).
5. Method of treatment
Processing is carried out by electronic means and in automated form. Appropriate security measures are taken to protect the data from unauthorized access, alteration, disclosure or destruction.
6. Nature of provision of data
The provision of data is:
- Required for navigation and to respond to requests.
- Optional for other purposes (e.g., statistics), where consent required.
7. Data recipients
Data are not disclosed to third parties or transferred outside the European Economic Area (EEA).
Matomo is hosted on servers owned or under the direct control of the Data Controller.
8. Transfer of data to countries outside the EU
Data collected are not transferred outside the European Union.
9. Retention period
- Data collected through Matomo are retained for up to 13 months.
- Data submitted through contact forms are kept for as long as necessary to process the request, and then deleted, unless required by law.
10. Rights of the data subject
You have the right to:
- Access your data (art. 15)
- Rectify it (art. 16)
- Delete it (art. 17)
- Restrict its processing (art. 18)
- Object to its processing (art. 21)
- Receive your data in a structured format (art. 20)
To exercise your rights you can write to: info@itnac.it
11. Right of complaint
You have the right to complain to the Data Protection Authority (www.garanteprivacy.it) if you believe that the processing of your data violates the GDPR.
12. Changes to this policy
The Owner reserves the right to update this privacy policy at any time. Changes will be posted on this page indicating the date of update.