1. Data Controller
The Data Controller is Blue Destination S.R.L., registered office at Viale dello Statuto 1, 04100 Latina (LT), Italy — Tax Code and VAT No. 03324250590.
For any matter regarding the processing of your personal data, contact: info@bluedestination.it.
2. Data we collect
| Category | Data |
|---|---|
| Identification & contact | First and last name, email address, phone number. |
| Booking data | Selected boat, dates, number of guests, notes/requests, additional services/menus. |
| Rental contract data | Residence address, tax code (codice fiscale), skipper choice, rental duration. |
| Documents | Identity document and boating licence (files uploaded by the customer to sign the contract). |
| Signature | Handwritten signature applied online to sign the contract. |
| Payment data | Payment outcome, transaction code and amount. Card details are handled directly by Nexi and are never collected or stored by us. |
| Technical data | IP address, admin-area access logs, technical cookies, date/time of consent. |
3. Purposes and legal bases
- Managing quotes, bookings and the rental contract — performance of a contract and pre-contractual measures (Art. 6.1.b GDPR).
- Legal obligations (tax, accounting, pleasure-craft navigation rules) (Art. 6.1.c GDPR).
- Service communications (confirmations, pre-boarding link, receipts) related to your booking (Art. 6.1.b GDPR).
- Website security and abuse/fraud prevention — legitimate interest of the Controller (Art. 6.1.f GDPR).
- Promotional communications — only with your free and revocable consent (Art. 6.1.a GDPR).
4. Processing methods and retention
Data is processed with IT tools and appropriate security measures (access control, encrypted connections, protection of uploaded documents which are not publicly accessible).
Data is kept only as long as necessary for the stated purposes: contractual and tax data for the period required by law (normally 10 years for accounting records); identity documents and boating licence for the time needed to manage the rental and related obligations; quote data for the time needed to handle the request.
5. Recipients
Within the purposes above, data may be shared with parties acting as processors or independent controllers:
- Nexi Payments S.p.A. — online card payment processing.
- Google Ireland Ltd. — maps (Google Maps) and reviews (Google Places) used on the website.
- Email / SMTP provider — sending transactional emails.
- Hosting provider — storage of data on the servers hosting the website.
- Competent authorities — where required by law.
Data is not disseminated or sold to third parties for purposes other than those stated. Where providers process data outside the European Union, this occurs under appropriate safeguards (e.g. EU standard contractual clauses).
6. Cookies
- Necessary technical cookies: session cookie (for the reserved area) and language-preference cookie. No consent required.
- Third-party services: loading Google maps and reviews may set Google cookies. You can manage preferences from your browser.
7. Your rights
As a data subject you have the right, under Arts. 15-22 GDPR, to obtain access, rectification, erasure, restriction, portability of your data, to object to processing, and to withdraw your consent at any time (without affecting the lawfulness of prior processing).
To exercise your rights, write to info@bluedestination.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
8. Minors
The services are not directed to children under 16. We do not knowingly collect minors' data without the consent of those holding parental responsibility.
Last updated: 29/06/2026. Any changes to this policy will be published on this page.