The data controller is POWERBOAT DI FRATELLI PORTO S.N.C. DI PIERO PORTO & C., VAT and tax number 10133531219, registered office at Rione Umberto I, 14, 80075 Forio (NA), Italy. For the Ischia Boat Rental website and personal data enquiries: powerboatischia@gmail.com, +39 331 306 5247.
The data we use
The form collects your name, email, phone number, experience, boat, date, number of guests and departure port. It may also include destination, navigation mode and your selection summary. An identifier is assigned to the enquiry. Do not provide identity documents, health information, card numbers or other guests’ personal details. No online payments are collected. An enquiry may also include your preferred departure time, which the team will check and confirm.
Purposes and legal bases
We answer enquiries, check availability and arrange the service at your request, on the basis of pre-contractual steps and, once confirmed, performance of a contract (GDPR Article 6(1)(b)). Any tax and accounting obligations are based on law (Article 6(1)(c)). Preventing misuse relies on our legitimate interest in security (Article 6(1)(f)), balanced against users’ rights. The form does not subscribe you to newsletters and does not involve profiling or automated decisions.
Required and optional information
Required fields are needed to process your enquiry. Without them the form cannot be submitted; you may contact us directly to agree on the information needed. You provide the information yourself. Submission is an enquiry, not a confirmed booking. Advertising consent is not required to answer your message.
Providers, recipients and external links
The infrastructure uses Cloudflare for the website and form endpoint; email delivery is designed to use Google Apps Script/Gmail. Information is intended for the staff handling enquiries and the providers needed for the service, in their respective privacy roles. WhatsApp, Instagram, Facebook and Tripadvisor open only when you choose their links and their notices apply. The form’s WhatsApp link may include your completed details in a prepared message, which you can edit before sending. We do not sell the information collected by the form.
Data retention
Enquiries, quotes and bookings remain in the private management archive for consultation, service management and historical review, without automatic deletion after inactivity. The controller must periodically review the need for retention and delete or anonymise data no longer needed, including following data-subject requests, subject to legal duties and protection of rights. Accounting records are kept for 10 years unless the law requires longer. Email and external archives are managed separately.
International transfers
Cloudflare and Google may process data outside the European Economic Area. For their locations, processing places and information on transfer safeguards, consult the provider notices linked below or contact the controller. Any transfers require the mechanisms provided under GDPR Articles 44–49, such as adequacy decisions or standard contractual clauses, where applicable.
Your rights
You may request access, correction, erasure, restriction and, where applicable, portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Write to powerboatischia@gmail.com. We normally respond within one month, subject to GDPR extensions. We may request only the information needed to verify your identity. You may complain to the Italian data protection authority (garanteprivacy.it) or the competent authority in your country.
Optional website statistics
Only with consent, we measure page views and estimate pages visible in the last 5 minutes. A random identifier stays in page memory, with no analytics cookies or recognition between visits. Our statistics store contains no IP addresses, paths, URL parameters, referrers or enquiry data. Cloudflare receives technical requests and hosts the counts. Daily totals are kept for up to 400 days; temporary identifiers are deleted within 3 days of their last signal. Withdraw in Privacy preferences to stop collection; existing aggregate totals remain. Multiple tabs can overestimate visitors; refusals, blockers and some automated activity can affect counts. Statistics include the approximate connection country provided by Cloudflare, aggregated by day. This is not nationality and may be affected by VPNs or mobile networks.
