Privacy Policy
Last updated: February 2026
Data Controller
The Data Controller is Ischia Luxury Charter Di Renato Baruffo, VAT No. 11010181219, PEC email: rebaru91@pec.it.
For any request regarding the processing of your personal data, you can contact us at the email address indicated above.
Types of Data Collected
The website collects the following personal data exclusively through the booking form: full name, preferred date, selected tour type, and number of people.
This data is not stored on any server. It is transmitted directly to WhatsApp or used to compose a pre-filled email via a mailto: link for handling the booking request.
Purpose of Data Processing
Personal data collected is processed exclusively for handling boat tour booking requests via WhatsApp or email (mailto:).
Legal Basis for Processing
The processing of personal data is based on the execution of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR) and on the consent of the data subject (Art. 6(1)(a) GDPR).
Data Processing Methods
Data entered in the booking form is used solely to compose a pre-filled WhatsApp message or a pre-filled email via mailto: link. No data is saved, recorded, or stored on the website's servers.
Processing is carried out using electronic and telematic tools, with logic strictly related to the stated purposes.
Disclosure of Data to Third Parties
Personal data may be communicated to the following third parties:
WhatsApp (Meta Platforms, Inc.) - for sending the booking message. Privacy policy: https://www.whatsapp.com/legal/privacy-policy
Google Maps (Google LLC) - the website embeds a map via iframe. Google may collect data according to its own privacy policy. Privacy policy: https://policies.google.com/privacy
Transfer of Data Outside the EU
The third-party services used (WhatsApp/Meta and Google) are based in the United States. Data transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission and the EU-US Data Privacy Framework.
Data Retention
The website does not retain any personal data. Data entered in the booking form exists only in the browser's temporary memory (React state) and is transmitted to WhatsApp or to the user's email client upon submission.
Rights of the Data Subject
Under Articles 15-22 of the GDPR, the data subject has the right to: access their personal data, obtain rectification or erasure, restrict processing, object to processing, and request data portability.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali - www.garanteprivacy.it).
Third-Party Services
Google Maps: the website uses Google Maps via iframe to show the departure port location. The use of Google Maps is subject to Google's Privacy Policy (https://policies.google.com/privacy).
WhatsApp: the website uses direct WhatsApp links for booking communications. The use of WhatsApp is subject to Meta's Privacy Policy (https://www.whatsapp.com/legal/privacy-policy).
Email (mailto:): the website offers the option to send a booking request via mailto: link. Form data is passed to the user's email client; no data passes through the website's servers.
Changes to This Policy
The Data Controller reserves the right to make changes to this privacy policy at any time. Changes will be published on this page with an indication of the last update date.