Privacy policy

Pursuant to art. 13 and 14 of the EU Regulation 679/2016 (hereinafter also only “GDPR”), Lake Boat S.r.l. (hereinafter also only the “Company” or the “Data Controller”), as better identified below, as “Data Controller”, provides you with some information regarding the use of any personal data provided by users consulting and/or interacting with the web services accessible by electronic means starting from the address: www.lakeboatcomotour.com corresponding to the home page of the official website of Lake Boat S.r.l.

This information is provided only for the website in question and not for any other websites that may be consulted by the user through links and is intended for the users of this site. The Site may contain links to sites, services and other Internet resources referable to third parties. In this case, the Owner is in no way responsible for the contents, security and usability of such sites and resources; in particular, the Owner does not verify the policy, nor does it issue guarantees on the protection of privacy and personal data by said third parties.

By accessing and using the Website and Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

In compliance with data protection obligations, this Site respects and protects your privacy.

It is expressly forbidden for users to email special data as defined in Article 9 of EU Reg. 679/2016.

Table of Contents

1. Personal data controller
2. Personal data subject to processing
3. Purpose of processing
4. Legal basis
5. Method of processing personal data
6. Period of retention of personal data
7. Recipients of personal data
8. Possibility of transferring personal data to third countries
9. Right of Access to Personal Data and Methods of Complaint
10. Contact person for personal data protection
11. Amendments

1. Personal data controller

The owner of the personal data is:

LAKE BOAT S.R.L., with registered office in Luisago (CO), Via Gorizia 13, c.f./p.iva 0410318013, in the person of the legal representative pro tempore (email address: info@lakeboatcomotour.com).

The list of data processors and any authorised persons is kept at the registered office of the data controller and made available upon request by the data subject.

2. Personal data subject to processing

The company may collect the following categories of personal data for the purposes described in this statement:

• IP address of the user’s device, location of the user, unique identifiers of the user’s mobile device, length of stay on the Site, services used, links and messages activated, browser characteristics (type, language, plug-ins installed etc., cookies etc.);
• user’s identification data, personal data and contact details such as, for example, name, surname, address, location, telephone number, e-mail and other contact details;
• information contained in the submitted application, in order to opt for the dates of the requested service;
• information made known to you or published in a public place, on the social pages or websites of Lake Boat s.r.l;

3. Purpose of processing

Your personal data will be processed for the following purposes:

• navigation on this website:
• activity aimed at the operation of the site. In the course of normal operation, the system acquires certain personal data whose transmission is implicit in the use of Internet communication. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
• take the actions necessary for the conclusion or execution of the contract for the requested services and in particular to
• acquire information prior to the conclusion of the contract
• opting for the dates of the requested service
• receive notices regarding the dates opted for and the terms of payment for the requested service;
• examine, process and confirm requests made by the user;
• carrying out fulfilments related to the management of payments and related invoicing, order processing
• fulfilling tax obligations;
• contact the user in response to a request sent by means of the contact form or a request sent by e-mail, and in particular to:
• respond to requests for information received via the website
• send informative material or other communications
• inform you of changes to the site or updates to services;
• manage applications received through the e-mail address published on the Site and in particular for:
• personnel recruitment, analysis, evaluation and selection activities;
• archiving of CVs for future staff recruitment needs;
• forward commercial communications and newsletters at the express request of the addressee and in particular to:
• propose announcements of products, services and offers of the Controller via e-mail, mail and/or sms and/or telephone contacts and other digital communication channels
• propose announcements of products, services and offers of third parties (the Controller’s business partners) by e-mail, post and/or sms and/or telephone contacts and other communication channels;
• ascertain liability in the event of hypothetical computer crimes against the site;
• for legal, administrative and audit purposes;
• to assert or defend a right in judicial, extrajudicial or administrative proceedings;

4. Legal basis

Pursuant to Article 6 of EU Reg. 679/2016, the lawfulness conditions (legal basis) for the processing of your personal data are as follows:

• for the fulfilment of the activity aimed at responding to requests for information, for the forwarding of commercial communications and newsletters: consent of the website user, in compliance with Article 6(1)(a) GDPR;
• for processing relating to the performance of a contract: performance of the contract, in compliance with Article 6(b) GDPR;
• for ascertaining liability in the event of hypothetical computer crimes to the detriment of the site, for administrative or audit purposes, for browsing data as well as for asserting or defending a right in judicial, extrajudicial or administrative proceedings: legitimate interest of the data controller, in compliance with Article 6 letter f) GDPR;
• for the processing of personal data contained in curricula: to comply with pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR);
• as regards processing for legal purposes: legal obligation (Art. 6 par. 1 lett. c);
• in some cases, necessary for the performance of a task carried out in the public interest.

• The provision of such personal data is optional, but failure to provide it may result in the impossibility of obtaining what has been requested.

5. Modalities of personal data processing

In relation to the purposes described above, personal data are processed using manual, computerised and telematic tools, in any case, in such a way as to guarantee the security and confidentiality of the data. It may be collected, recorded, stored, organised, processed, profiled for organisational purposes, selected, extracted, compared, interconnected, communicated, blocked, deleted, destroyed.

6. Personal data retention period

Your personal data will be processed:

• with regard to personal and contact data related to the conclusion of the contract: for the period strictly necessary to fulfil the contract and in any case no longer than 10 years from the fulfilment of the contractual obligations, unless the receipt of acts interrupting the statute of limitations or the existence of the prerequisites for the suspension of the statute of limitations; or, in any case, for the different period provided by law for the proof of the fulfilment of legal or tax obligations or the period necessary to allow the Company to possibly protect its rights in a judicial, administrative or anyhow before a Public Authority);
• as regards browsing data: for the period inherent to the browsing session;
• with regard to personal data and contact data issued on the occasion of the contact request: for the period of time necessary to fulfil the request forwarded and in any case no longer than 7 days from the contact request or, if earlier, until the revocation of consent by the data subject; with regard to personal data contained in curricula: for a period no longer than 45 days from the collection;
• as regards personal data processed with the consent of the data subject relating to the forwarding of commercial communications and the forwarding of newsletters: no later than 5 years from the acquisition of consent or, if earlier, no later than the revocation of consent by the data subject.

In any event, the data processed will be retained for the entire duration of any extrajudicial and/or judicial proceedings, until the time limit for judicial protection and/or appeals is exhausted. A check on the obsolescence of the retained data in relation to the purposes for which they were collected is carried out periodically and, once the aforementioned retention periods have expired, the data are deleted or anonymised

7. Recipients of personal data

Your personal data may be communicated to:

• persons authorised to process the data and persons responsible for processing pursuant to Article 28 GDPR;
• service providers that offer services on behalf of the Company;
• financial administrations, public authorities judicial authorities, law enforcement agencies;
• third parties exclusively for accounting, tax, legal, insurance purposes, or in the event of police checks or if required by law;

It should be noted, in particular, that such data will not be disseminated and will be processed by persons duly appointed to perform such tasks, who are constantly identified and/or appointed, duly instructed and made aware of the constraints imposed by law, as well as through the use of security measures designed to ensure the protection of its confidentiality and to avoid the risks of loss or destruction, unauthorised access, unauthorised processing or processing that does not comply with the purposes set out above

8. Possibility of transfer of personal data to third countries

Your personal data will not be transferred to third countries outside the European Union.

9. Right of Access to Personal Data and Methods of Complaint

Please note that, with reference to the personal data provided, you have the following rights under Articles 15 to 22 of the GDPR:

• withdraw consent to the processing of your Personal Information. Insofar as the legal basis for the processing of Personal Information is consent, you have the right to revoke such consent at any time. Revocation shall not affect the lawfulness of the processing carried out prior to the revocation;
• be subject to lawful, fair and transparent processing (Art. 6 GDPR);
• to obtain confirmation as to whether or not personal data is being processed and, if so, to obtain access to personal data – including a copy thereof – and communication of, inter alia, the following information: purpose of processing, categories of personal data processed, recipients to whom the data has been or will be disclosed, period of data retention, (right of access – Article 15 GDPR;
• obtain, without undue delay, the rectification of inaccurate personal data and/or the integration of incomplete personal data (right to rectification – Article 16 GDPR)
• obtain, without undue delay, the erasure of personal data (right to erasure – Article 17 GDPR);
• receive, in a structured, commonly used and machine-readable format, personal data where the processing is based on consent and is carried out by automated means (right to data portability – Article 20 GDPR);
• object to the processing at any time, for reasons related to their situation (right to object – Article 21 GDPR). If this right is exercised, the Company will refrain from further processing of personal data, provided that there are no compelling legitimate grounds for processing anyway;
• obtain restriction of processing (right to restriction of processing – Art. 18 GDPR);
• to assert one’s point of view with respect to automated decisions and in particular to demand a review of the decision by a human being (right not to be subjected to an automated individual decision – Art. 22 GDPR);
• to lodge a complaint with the Garante per la protezione dei dati personali, following the procedures and indications published on the Authority’s official website (Art. 77 GDPR) if he/she believes there is a problem in the way personal data are handled.

To exercise these rights, the user may contact the Company by e-mail at the above address or by sending an e-mail to info@lakeboatcomotour.com. When contacting the Data Controller, the user must be sure to include his/her name, email address, postal address and/or telephone number(s), as well as a copy of a valid document for identification purposes, in order to be sure that the Data Controller can handle your request correctly. The Company is obliged to provide a response within one month of the request; this period may be extended to three months in the event of particular complexity of the request.

10. Personal data protection contact person

The Company has appointed a personal data protection contact person, who can be contacted at the Data Controller’s address indicated above or by sending an e-mail to: info@lakeboatcomotour.com.

11. Changes

The Owner reserves the right to amend this Policy at any time at its sole discretion. You will not receive proactive communications from the Owner regarding any changes. An updated version of this Policy will be effective immediately upon posting of the new Policy, unless otherwise specified. Your continued use of the Site after the effective date of the updated Policy will constitute your consent to such changes. However, without your consent, the Controller will not use your Personal Information in a manner materially different from that stated at the time the Personal Information was collected.

Date of entry into force 01/02/2024