Privacy Policy
Last updated: 16 October 2026
1. Who we are
The data controller is Ditta Individuale Balla Gabriella, trading as Il Viandante Sail (“we”), VAT no. IT03070730993, Via Punte Rosse 39/b, 07024 La Maddalena (SS), Italy.
Email: ilviandante222@gmail.com · Phone/WhatsApp: +36209654210.
Website: https://ilviandantesail.com
This policy explains how we use your personal data when you visit our website, book a trip with us or take part in a trip, in line with Regulation (EU) 2016/679 (GDPR) and Italian law.
2. What data we collect, why, and on what legal basis
Booking data. Name, email, phone number, number of guests, date and type of trip, billing details and payment information (we do not see or store your full card number: it is handled by our payment provider). We use it to manage your booking, take payment, contact you, issue invoices and run the trip. Legal basis: performance of the contract; legal obligations (tax and accounting).
Allergies, intolerances and health information. If you tell us about allergies, food intolerances or health conditions relevant to your safety, we use this information only to prepare suitable meals and keep you safe during the trip. This is health data, a special category of data. Legal basis: your explicit consent. Giving this information is optional, but without it we cannot adapt the menu or take it into account. You can withdraw your consent at any time.
Messages and requests. Messages you send by email, WhatsApp, phone or contact form. Legal basis: pre-contractual steps at your request; our legitimate interest in answering you.
Website usage data. IP address, device and browser data, pages visited. We use analytics (Google Analytics, through MonsterInsights) to understand how the site is used. Legal basis: your consent, given through the cookie banner.
Advertising measurement. If you accept marketing cookies, tools such as the Meta (Facebook/Instagram) pixel, installed with PixelYourSite, may measure the effect of our advertising. Legal basis: your consent.
Photos and videos. We may take photos and videos during trips. We publish images in which you can be recognised on our website or social media only with your agreement; tell us before departure if you do not want to appear in them. Legal basis: your consent.
Security. Technical data needed to protect the website and prevent abuse. Legal basis: our legitimate interest.
3. Bookings made through other platforms
If you book through a third-party platform (for example GetYourGuide), that platform processes your data under its own privacy policy. It sends us the data needed to run your trip, which we use as an independent controller for that purpose and as described in this policy.
4. Who receives your data
We share data only when needed, with:
- our website hosting provider [indicare il nome dell’hosting];
- payment providers: WooPayments (WooCommerce) and its payment partners;
- email and messaging services we use to communicate with you (for example Google Gmail and WhatsApp);
- analytics and advertising services described above (Google, Meta), only if you consent;
- Google Maps, YouTube and the Google reviews widget, which are embedded in our pages and may set cookies when you accept them;
- our accountant and professional advisers;
- public authorities, when the law requires it.
These providers act as processors on our instructions or as independent controllers, depending on the service. We do not sell your data.
5. Transfers outside the European Economic Area
Some providers (for example Google and Meta) may process data outside the EEA, including in the United States. When this happens, it takes place under safeguards recognised by the GDPR, such as an adequacy decision (including the EU-US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses.
6. How long we keep your data
- Booking and invoicing data: for the period required by Italian tax and accounting law (up to 10 years).
- Allergy and health information: deleted within 30 days after the trip.
- Messages and enquiries: for up to 24 months after our last contact.
- Analytics and advertising data: according to the settings of each tool, and until you withdraw consent.
- Photos and videos: until you ask us to remove them.
7. Cookies
We use cookies and similar tools. Technical cookies are always active; analytics and marketing cookies are used only after you accept them. See our [Cookie Policy] for details and to change your choices at any time.
8. Your rights
You can ask us, free of charge, to:
- access your data and get a copy;
- correct inaccurate data;
- delete your data;
- limit how we use it;
- receive it in a portable format;
- object to processing based on our legitimate interest;
- withdraw your consent at any time, without affecting what was done before.
To exercise your rights, write to ilviandante222@gmail.com. We reply within one month. You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority in your country of residence.
9. Providing your data
For bookings, providing booking data is necessary: without it we cannot confirm or run your trip. Providing health information and agreeing to cookies or to the use of photos is always optional.
10. Children
Our website is meant for adults. If you book for children, you tell us their names, ages and any allergies as a parent or guardian, and you confirm you have the authority to do so.
11. Security
We use reasonable technical and organisational measures to protect your data. No online service can be completely secure, so we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy. The date at the top shows the latest version.
