1. Introduction

The owners of the Karel Dream Sea inflatable boat, who provide an occasional boat rental service with skipper, are committed to protecting the Personal Data entrusted to them.

Personal data are processed in compliance with Regulation (EU) 2016/679 (GDPR), according to principles of lawfulness, fairness, transparency, and data minimization.

This Privacy Policy explains who we are, what data we collect, why we process them, and how they are protected.


2. Data Controller

Your personal data are processed by the Data Controllers:

Alessio De Vita and Gianluca De Vita
Email: info@kareldreamsea.it


3. What Data We Collect

We may collect and process the following personal data:

  • Identification data (name, surname)
  • Contact data (email address, phone number)
  • Booking information and service details
  • Payment information (processed through third-party providers)
  • Communications sent by email or contact forms
  • Technical data such as IP address, browser type, device information, and website usage data

Only data strictly necessary for the provision of services are collected.


4. Purposes of Processing

Personal data are processed exclusively for the following purposes:

  • Responding to information requests
  • Creating and managing reservations
  • Managing and executing the occasional boat rental contract
  • Customer assistance and service communications
  • Compliance with legal, tax, and accounting obligations
  • Fraud prevention, anti-money laundering, and security checks
  • Management of disputes or legal claims

Failure to provide the required data may make it impossible to provide the requested services.

Your personal data will not be used for marketing, profiling, or automated decision-making.


5. Legal Basis for Processing

Personal data are processed on the following legal bases:

  • Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
  • Compliance with legal obligations (Art. 6(1)(c) GDPR)
  • Legitimate interest in managing and protecting the service (Art. 6(1)(f) GDPR)
  • Consent, where required (Art. 6(1)(a) GDPR)

6. How We Process and Protect Your Data

Personal data are processed using paper and electronic systems, with appropriate technical and organizational measures to ensure security, confidentiality, and protection against unauthorized access, loss, or disclosure.


7. Data Retention

Personal data are retained only for the time necessary to fulfill the purposes described above.

Retention periods:

Customers and suppliers: 5–10 years

Legal references:

  • Article 2948 Italian Civil Code
  • Article 22 Presidential Decree No. 600/1973

8. Data Sharing and Third Parties

Personal data may be processed through the following service providers:

SuperSaaS B.V.
Vijzelstraat 68, 1017 HL Amsterdam, Netherlands
(booking management and partial payment processing)

PayPal
(payment processing services)

Data may also be disclosed, where required by law, to:

  • Public authorities
  • Supervisory bodies
  • Tax or legal advisors
  • Judicial authorities in case of disputes

Personal data will never be publicly disclosed or sold.


9. International Data Transfers

For the purposes described, personal data may be transferred within or outside the European Economic Area. Such transfers will take place only where adequate protection measures are in place, in accordance with GDPR requirements.


10. Website Data and Cookies

When visiting the website, technical information such as IP address, browser type, and access data may be automatically collected for security and operational purposes.

The website uses technical and functional cookies necessary for its operation.

For detailed information, please refer to the Cookie Policy available on this website.


11. Your Rights

You have the right at any time to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Request restriction of processing
  • Object to processing based on legitimate interest
  • Request data portability, where applicable
  • Withdraw consent at any time (where processing is based on consent)

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Requests can be sent to:
info@kareldreamsea.it


12. Automated Decision-Making

Your personal data are not subject to automated decision-making or profiling.


13. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Email: info@kareldreamsea.it
Website: https://www.kareldreamsea.com