This document aims to inform Users about the Personal Data collected by the website bluwavexcursions.it (hereinafter “Website”) and the use of Cookies, in compliance with Regulation (EU) 2016/679 (GDPR), the ePrivacy Directive, and the provisions of the relevant Data Protection Authorities.
Data Controller
Nome e Cognome del Titolare P.IVA: 000000000 Data Controller Email Address: info@bluwavexcursions.it
PART I: PRIVACY POLICY
1. Types of Data Collected and Purposes
The Data Controller collects the User’s Personal Data for the following purposes:
-
Request Fulfillment and Bookings: Through the Contact Form and the Booking Form, the User voluntarily provides Data such as First Name, Last Name, Email Address, Phone Number, and excursion details. This data is necessary to respond to inquiries, provide quotes, and manage boat tour bookings.
-
Legal basis: Execution of a contract or pre-contractual measures.
-
-
Statistics and Service Improvement: We collect aggregated data on website visits via Google Analytics.
-
Legal basis: User’s consent (via Cookie Banner).
-
-
Marketing and Retargeting: We use Google Ads and Facebook Pixel to show relevant ads to users who have previously visited our site.
-
Legal basis: User’s explicit consent (via Cookie Banner).
-
2. Methods, Location of Processing, and Data Transfer
Data processing is carried out using IT tools, with logic strictly related to the purposes indicated, and adopting adequate security measures to prevent unauthorized access.
Data is processed at the Data Controller’s operating offices. Some data (e.g., data collected by Google or Meta) may be transferred to servers located in the United States. This transfer takes place in compliance with the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of data protection.
3. Retention Period
Data is kept for the time strictly necessary to achieve the specific purposes:
-
Data for bookings/contracts: Kept for the time necessary to provide the service and to comply with tax and legal obligations (usually 10 years).
-
Marketing/profiling data: Kept until the User revokes their consent.
4. User Rights (Arts. 15-22 GDPR)
The User has the right to: obtain confirmation of the existence of Data, know its content, verify its accuracy, request its integration, updating, rectification, erasure (right to be forgotten), portability, restriction of processing, as well as to object to processing and withdraw consent at any time. The User can also lodge a complaint with the Data Protection Authority. To exercise these rights, the User can write to the Data Controller’s email address.
PART II: COOKIE POLICY
This Website uses Cookies and other Tracking Tools. Cookies are small text files that websites save on the User’s device to improve navigation, collect statistics, or profile the User for advertising purposes.
1. Types of Cookies used on this Website
A. Technical and Strictly Necessary Cookies
These are essential for the proper functioning of the Website (e.g., saving cookie consent preferences, site security, user session). They do not require User consent and cannot be disabled.
B. Analytical Cookies (Google Analytics)
We use Google Analytics (provided by Google Ireland Limited) to analyze site traffic. We collect data such as IP address, browser type, and pages visited. Although Google Analytics 4 (the current version) anonymizes IP addresses by default, this tool may cross-reference data with other Google services. Therefore, the installation of these cookies is subject to the User’s prior consent.
C. Profiling and Marketing Cookies
These cookies are used to track visitors across the Website to display advertisements that are relevant and engaging for the individual User. They are installed only after the User has given explicit consent.
-
Facebook Pixel (Meta Platforms Ireland Limited): Connects actions performed on this Website with the Meta advertising network (Facebook and Instagram), allowing us to measure ad effectiveness and create custom audiences.
-
Google Ads / Conversion Tracking (Google Ireland Limited): Connects visits and actions on our Website with advertisements displayed on the Google network.
2. Embedded Content and Social Widgets
Some pages of the Website include elements provided by third parties that may install their own cookies:
-
Social Widgets (Instagram, Facebook, TripAdvisor): Buttons or links that allow interaction with our social pages directly from the Website. The management of the information collected by these third parties is governed by their respective privacy policies.
-
YouTube Videos (Google Ireland Limited): We show embedded videos directly from YouTube. YouTube may collect traffic data on users who view the video.
3. Cookie Consent Management and Revocation
Upon first access to the Website, the User is shown a banner containing a brief privacy notice and a preference management panel. The User can:
-
Accept all cookies.
-
Reject all non-essential cookies (by clicking the appropriate “Reject” button or closing the banner).
-
Select in detail which categories of cookies to accept.
Consent Revocation: The User can change their preferences or revoke consent at any time by clicking on the “Cookie Settings” icon or link in the footer (bottom of the page) of this Website. The User can also manage cookie preferences directly from their web browser settings.
Last Updated: March 15, 2026
