Privacy Policy

This notice is provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (as amended) to anyone interacting with the website nautiluxyachting.it and with the services offered by Nautilux Srl.

1. Data Controller

The Data Controller is Nautilux Srl, registered office in Sardinia, Italy. VAT no.: 03080010907.
Contact email: info@nautiluxyachting.it.

2. Data we collect

Through the quote-request form on the website we collect the following data, voluntarily provided by the user:

• First and last name
• Email address
• Phone / WhatsApp number
• Preferred date for the experience
• Number of guests
• Type of experience requested
• Any additional message or notes

Technical browsing data (IP address, browser type, pages visited) may also be collected automatically via cookies, as described in our Cookie Policy.

3. Purpose of processing

Personal data is processed exclusively for the following purposes:

• Replying to quote requests and information enquiries;
• Managing the contractual relationship and organising the booked experience;
• Fulfilling legal, accounting and tax obligations;
• Improving the website browsing experience (with consent).

The collected data is never sold, transferred or shared with third parties for commercial purposes and is used exclusively for the activity of Nautilux Srl.

4. Legal basis

Processing is based on the explicit consent of the data subject (Art. 6.1.a GDPR), on the need to take pre-contractual and contractual measures (Art. 6.1.b GDPR) and on the Controller's legitimate interest in properly handling received requests (Art. 6.1.f GDPR).

5. Storage methods and retention

Data is processed using electronic tools, stored on secure servers within the European Union and protected by appropriate technical and organisational measures. It is kept only as long as strictly necessary for the stated purposes and, in any case, no longer than the terms set by law (e.g. tax obligations: 10 years).

6. Data recipients

Data may be processed by authorised Nautilux Srl personnel and by external providers (e.g. hosting, email, payment services) appointed as Data Processors pursuant to Art. 28 GDPR. No data will be sold or transferred to third parties for marketing purposes.

7. Transfer outside the EU

Data is hosted on infrastructure located in the European Union. Any transfers outside the EU take place only to countries that ensure an adequate level of protection or under appropriate safeguards (Standard Contractual Clauses).

8. Your rights

You may exercise at any time the rights provided by Articles 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise your rights, write to info@nautiluxyachting.it.

9. Updates

This notice may be updated over time. Please review it periodically. The date of the latest revision is shown at the top of the page.