1. Data controller
The data controller is Mana Boat S.r.l., registered office at Polveriera degli Spiriti, 36 – 81055 Santa Maria Capua Vetere (CE), Italy. For any privacy matter you can write to natacha@manaboat.it or call +39 333 534 0067.
2. Types of data processed
We process the data you provide directly by filling in the site forms (charter quote request, car rental request, contact form) or by contacting us: full name, email, phone number, any messages, and travel preferences (dates, number of guests, boat, itinerary, services). When a charter is confirmed we also process the data of the guests on board and, for payments, the data required for the transaction (handled directly by the payment provider). Access to the reserved broker area uses a technical session cookie (see Cookie Policy).
3. Purposes and legal bases
Your data is processed to: (a) respond to quote, information and booking requests — legal basis: pre-contractual measures and contract (art. 6.1.b GDPR); (b) manage the contractual relationship and legal obligations, including tax and administrative ones (art. 6.1.b and 6.1.c GDPR); (c) protect our rights and prevent abuse — legitimate interest (art. 6.1.f GDPR). We do not carry out automated marketing or profiling.
4. Processing methods and recipients
Data is processed with electronic tools and appropriate security measures. To deliver the service we rely on providers acting as data processors (art. 28 GDPR):
- Supabase — database hosting and file storage;
- Vercel — hosting and delivery of the site and application;
- Resend — sending transactional emails (confirmations and notifications);
- Stripe — online payment processing;
- Google Maps — map display, loaded only after your explicit click.
Data is neither disclosed nor sold to third parties for commercial purposes.
5. Transfers outside the EU
Some providers may process data outside the European Economic Area. In such cases the transfer takes place on the basis of appropriate safeguards under the GDPR (adequacy decisions or the EU Commission's Standard Contractual Clauses).
6. Retention period
We keep data for as long as necessary to handle the request and the contractual relationship, and thereafter for the period required by law (in particular tax and accounting obligations, generally 10 years). Quote requests not followed by a booking are kept only for as long as strictly necessary to follow up and in any case no longer than 24 months.
7. Your rights
Under art. 15-22 GDPR you have the right to access your data, request its rectification or erasure, restriction of or objection to processing, and data portability. You can exercise these rights by writing to natacha@manaboat.it.
8. Complaint to the supervisory authority
If you believe the processing infringes the law, you have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your EU country of residence.
9. Changes
This notice may be updated. The current version is always published on this page with the relevant last-updated date.