Draft requiring verification before final publication: confirm the controller's legal identity and address, the external services actually used, and retention periods.
Data controller
Chiave del Mare – Tour Operator; contact person provided: Kiko. Privacy email: chiavedelmare79@gmail.com. The controller's full legal identity and address still need confirmation.
Personal data collected
When you contact us about excursions or bookings, we may receive your name, contact details, message, dates and preferences voluntarily provided. Technical information such as IP address, device data and cookies may be processed when you browse the website.
Purposes and legal bases
We use data to respond to enquiries and arrange requested services (pre-contractual steps or contract), comply with legal obligations and protect the website against abuse (legitimate interests, subject to assessment). Non-essential cookies and analytics requiring consent are used only when applicable and after your choice.
Processing, recipients and international transfers
Appropriate technical and organisational safeguards apply. Necessary hosting, email, website and service providers may process data according to their roles. Any transfers outside the European Economic Area require verification of the applicable safeguards.
Retention
Data is retained as long as needed to handle enquiries and services and, where applicable, for statutory periods. Specific retention periods must be confirmed by the controller before final publication.
Cookies and third-party services
Please consult our Complianz-managed Cookie Policy for cookie categories, purposes, durations and preference controls. Analytics, embedded content and other external services must be checked against the actual website configuration.
Your rights
Where provided by the GDPR, you may request access, rectification, erasure, restriction, portability or object to processing, and withdraw consent without affecting earlier lawful processing. Contact chiavedelmare79@gmail.com or lodge a complaint with the competent supervisory authority.
Updates
This notice may change if processing activities or services change. Draft last reviewed: 20 October 2026.