Data Controller and Scope of This Privacy Policy
Data Controller
The Data Controller is F&B Yachting Sailing SRLs, with registered office at: Via della Pineta 19 - 16040 Leivi (GE) - Italy
Contact email: info@lesaline-chiavari.com
Telephone: +39 349 558 8683 / +39 348 768 0520
Scope of This Privacy Policy
This Privacy Policy applies to the processing of personal data relating to:
- Visitors to the website who browse its pages and complete contact or booking enquiry forms;
- Individuals who request information or quotations by email, telephone or online forms;
- Guests staying at Le Saline Apartment or making reservations through the channels indicated on the website (including third-party booking platforms, in relation to the data transmitted to the Data Controller).
This Privacy Policy does not apply to the processing of personal data carried out independently by third-party websites or platforms that may be accessed through links available on this website.
Types of Personal Data Processed and Purposes of Processing
In accordance with the principles of lawfulness, fairness and transparency, the Data Controller processes only the personal data necessary to achieve the purposes described below.
Categories of Personal Data Processed
- Contact details Name, surname, email address, telephone number and any other information voluntarily provided by the user through messages or online forms.
- Booking and stay information Arrival and departure dates, number of guests, preferences or special requests, and payment-related information strictly necessary for administrative and tax purposes. Full payment card details are generally processed directly by booking platforms or payment service providers.
- Browsing data Technical information relating to the use of the website, such as IP address, browser type, pages visited and access times. These data are collected automatically and used solely for statistical and security purposes.
- Cookies and similar technologies Information collected through technical cookies and, where consent has been provided, analytics or profiling cookies. Further details are available in the dedicated Cookie Policy.
Purposes of Processing
Personal data may be processed for the following purposes:
- Responding to requests for information received through the website, email or telephone;
- Managing quotations, bookings, amendments and cancellations;
- Complying with legal obligations relating to accommodation services (including reporting obligations to the competent authorities, tax and accounting requirements);
- Handling complaints, disputes or legal claims and protecting the rights of the Data Controller;
- Sending service communications relating to bookings or stays;
- Subject to the data subject’s consent, sending occasional informational or promotional communications relating to the Property, such as news, updates or special offers, in accordance with the preferences expressed.
Legal Bases for Processing and Nature of Data Provision
The processing of personal data by the Data Controller is based on the legal grounds provided by applicable data protection legislation.
Legal Bases for Processing
- Performance of pre-contractual measures and contractual obligations. Processing is necessary to manage information requests, quotations, bookings and the guest’s stay.
- Compliance with legal obligations. Processing is required to comply with tax, accounting and public security obligations applicable to accommodation providers.
- Legitimate interests of the Data Controller. Processing may be carried out for purposes such as website and IT system security, the protection of the Data Controller’s rights in the event of disputes, and the improvement of services and guest experience, provided that such interests do not override the fundamental rights and freedoms of the individuals concerned.
- Consent of the data subject. Where required, processing is based on the individual’s consent, for example for the sending of informational or promotional communications not directly related to a specific booking, or for the use of non-essential cookies.
Nature of Data Provision
Providing the personal data marked as mandatory in forms or communications is necessary in order to process enquiries correctly and to fulfil contractual and legal obligations. Without such information, the Data Controller may be unable to provide the requested services, respond to enquiries or complete a booking.
The provision of personal data for marketing purposes, or consent to the use of non-essential cookies, is entirely optional. Refusing such consent will not affect the ability to use the website or make a booking.
Methods of Processing, Data Retention and Security
Personal data are processed by the Data Controller in accordance with the principles of fairness, lawfulness, data minimisation and storage limitation. Processing is carried out primarily by electronic means and, where necessary, also in paper form.
Methods of Processing. Personal data are processed by individuals authorised by the Data Controller and, where appropriate, by external service providers formally appointed as data processors. Access to personal data is restricted to the information strictly necessary for carrying out activities related to the purposes described above.
Data Retention Periods
- Data relating to information requests: retained for the period strictly necessary to manage the enquiry and for a subsequent period not exceeding 12 months, unless further retention is required for the establishment, exercise or defence of legal claims.
- Data relating to bookings and stays: retained for the duration of the contractual relationship and subsequently for the periods required under applicable civil, tax and accounting legislation.
- Data processed for marketing purposes (where applicable): retained until consent is withdrawn and, in any event, only for a limited and proportionate period.
- Browsing data and cookies: retained in accordance with the provisions set out in the dedicated Cookie Policy.
Security Measures
The Data Controller implements appropriate technical and organisational measures to protect personal data against loss, unlawful use or unauthorised access. Such measures may include backup procedures, authentication systems and access restrictions.
These safeguards are reviewed and updated periodically, taking into account technological developments and the level of risk associated with the processing activities.
Disclosure and International Transfer of Personal Data
Personal data collected by the Data Controller are not disclosed to the public. However, they may be shared with specific recipients where necessary for the purposes described in this Privacy Policy and in compliance with applicable data protection legislation.
Categories of Recipients
- Employees, collaborators and service providers engaged by the Data Controller in connection with website management, booking administration, and accounting or tax compliance activities (for example, accountants, tax advisers and IT service providers). Where required by law, such parties are appointed as data processors.
- Public authorities, government bodies or other competent authorities where disclosure is required by law, including obligations relating to public security, taxation or other regulatory requirements.
- Online booking platforms and payment service providers, which may act as independent data controllers or data processors in accordance with their own privacy policies and applicable legal obligations.
Transfers of Personal Data Outside the European Union
To the extent possible, the Data Controller seeks to ensure that personal data are processed within the European Economic Area (EEA).
However, certain technical or organisational requirements may make it necessary for personal data to be transferred to countries outside the European Union or the EEA, for example in connection with hosting services, booking platforms or other IT tools.
Where such transfers occur, they will be carried out in compliance with applicable data protection laws and appropriate safeguards will be implemented, including, where necessary, the adoption of Standard Contractual Clauses or other recognised legal transfer mechanisms.
Further information regarding the categories of data processors used by the Data Controller and any transfers of personal data outside the European Union may be requested by contacting the Data Controller using the contact details provided in this Privacy Policy.
Data Subject Rights
Individuals have the right to exercise, at any time, the rights granted under applicable data protection legislation.
Main Rights of Data Subjects
Individuals have the right to:
- Obtain access to their personal data and receive information about the processing activities being carried out;
- Request the rectification of inaccurate personal data or the completion of incomplete data;
- Request the erasure of their personal data (“right to be forgotten”) in the circumstances provided for by law;
- Request the restriction of processing where the relevant legal conditions are met;
- Object to the processing of personal data based on the Data Controller’s legitimate interests;
- Exercise the right to data portability, where applicable, by receiving their personal data in a structured, commonly used and machine-readable format and transmitting those data to another data controller;
- Withdraw any consent previously given at any time, without affecting the lawfulness of processing carried out before such withdrawal.
Exercising Your Rights
To exercise any of the rights described above, individuals may contact the Data Controller by email at info@lesaline-chiavari.com or by telephone using the contact details provided in this Privacy Policy, specifying “Data Protection Request” in the subject line of the communication.
Individuals also have the right to lodge a complaint with the competent supervisory authority responsible for data protection, in accordance with the procedures set out on the authority’s official website, without prejudice to any other administrative or judicial remedy available under applicable law.
Cookie e altri strumenti di tracciamento
The Le Saline Apartment website uses technical cookies and, subject to the user's consent, may also use additional cookies or tracking technologies for statistical purposes or, where applicable, to personalise the browsing experience.
Technical cookies are necessary for the proper functioning of the website and do not require the user's consent. Any analytics or profiling cookies, whether first-party or third-party, are activated only with the user's explicit consent, which may be granted or withdrawn at any time through the available preference management tools.
For more detailed information about the types of cookies used, their duration, and how to manage or withdraw consent, users are invited to consult the website’s Cookie Policy, which forms an integral part of this Privacy Policy.
Any updates relating to cookies or other tracking technologies will be published in the Cookie Policy and, where required, through the consent management tools available on the website.