Introduction
This privacy policy applies to the website deadeimari.it (Site) owned by Dea dei Mari srl, with registered office at via dei Colli, 9, 19121 La Spezia SP, Italy, registered with the La Spezia Chamber of Commerce, VAT no. 01236370118, share capital €30,000.00 fully paid (Data Controller), acting as Data Controller pursuant to the GDPR.
Purchases on the Site
Subject to your provision of data, your personal data will be processed to allow you to make purchases on the Site.
Marketing
Subject to your consent, the Data Controller may process the personal data you provide in order to send you advertising material and/or newsletters about its own or third-party services.
Soft spamming
For the direct sale of the services offered through the Site, the Data Controller may use the email address you provided in the context of a purchase on the Site, even without your consent, provided that it concerns a service similar to the one previously purchased (so-called soft spamming). You may nevertheless object to this processing at any time by notifying the Data Controller.
Availability requests and contact
When you fill in the “Check availability” form or write to us through the Site, the Data Controller processes the data you enter (name, email, telephone if provided, dates, number of people, boat, departure base and any message) solely to reply to your request and prepare a charter proposal. The legal basis is the performance of pre-contractual measures taken at your request. The form sends the request by email to the Data Controller and a confirmation to the address you provide; to send these emails the Data Controller uses an email service provider (Resend), acting as data processor. The data are kept for as long as necessary to handle the request and any charter contract.
WhatsApp and telephone
If you contact us via WhatsApp or by telephone, the Data Controller processes your number and the content of the conversation to reply to your request. WhatsApp is a service of WhatsApp Ireland Limited, which processes data according to its own privacy policy.
Cookies, statistics and advertising
The Site uses technical cookies necessary for it to work and, only with your consent given through the cookie banner (managed with CookieYes), third-party tools for statistics and advertising: Google Analytics 4, to measure use of the Site in aggregate form, and Google Ads, to measure the effectiveness of campaigns, including calls made from the Site. These services are provided by Google Ireland Limited and may involve the transfer of data to the United States on the basis of the safeguards provided for by the GDPR (e.g. the EU-U.S. Data Privacy Framework). The Site uses Google’s Consent Mode: without your consent these tools do not store cookies. You can change or withdraw your consent at any time from the Cookie policy, where you will also find the up-to-date list of cookies.
Browsing data
During normal operation, the IT systems running the Site collect certain technical data (e.g. IP address, browser type, pages visited, date and time of the request) needed for the Site to work and to keep it secure. The legal basis is the Data Controller’s legitimate interest in ensuring the security and proper functioning of the Site.
***
In compliance with the GDPR, we hereby inform you that the Data Controller will process your personal data under the following conditions.
Art. 1. Purposes and legal basis of processing. Mandatory or optional provision of data. Consequences of refusal.
Personal data are processed for the following purposes:
a. to comply with obligations arising from applicable laws or regulations, in particular in administrative, accounting and public security matters. The legal basis for processing is the Data Controller’s need to carry out pre-contractual measures taken at the data subject’s request or to comply with a legal obligation;
b. in the case of an online purchase order, to allow the conclusion of the purchase contract and the correct execution of the related operations (and, where required by sector regulations, to fulfil tax obligations). The legal basis for processing is the Data Controller’s obligation to perform the contract with the data subject or to comply with legal obligations;
c. limited to the email address you provided in the context of a purchase through the Site, to allow the Data Controller to directly offer similar services (so-called soft spamming), provided that you do not object to such processing as set out in this policy. The legal basis for processing is the Data Controller’s legitimate interest in sending this type of communication. This legitimate interest may be considered equivalent to the data subject’s interest in receiving “soft-spam” communications;
d. subject to your consent, to send newsletters, carry out market research, including surveys of user satisfaction, and send advertising material about the services of the Data Controller and/or third parties, by means such as email, fax, SMS, MMS and traditional methods (post and/or telephone) (marketing purposes). The legal basis for processing is the data subject’s consent;
e. to respond to your requests through the customer care service. Provision of data is optional, but if you refuse, the Data Controller will be unable to answer your questions through this service. The legal basis for processing is the Data Controller’s legitimate interest in following up on user requests. This legitimate interest is equivalent to the user’s interest in receiving a reply to communications sent to the Data Controller;
f. to respond to your requests by email or telephone. Provision of data is optional, but if you refuse, the Data Controller will be unable to answer your requests. The legal basis for processing is the Data Controller’s legitimate interest in responding to user requests. This legitimate interest is equivalent to the user’s interest in receiving a reply to communications sent to the Data Controller.
Provision of data for the purposes under point b) is purely optional. However, since such processing is necessary to register on the Site and to make a purchase on the Site, any refusal to provide the data will make it impossible to register on the Site and to make such purchase through the Site.
Consent to the processing of your data for marketing purposes is purely optional. Failure to give consent will only have the consequences described below.
Failure to consent to processing for marketing purposes will mean that you cannot receive advertising material about the services of the Data Controller and/or third parties, and that the Data Controller cannot carry out market research, including surveys of user satisfaction, or send you newsletters.
Notwithstanding the above, the Data Controller may in any case use your personal data solely to comply properly with the obligations laid down by applicable laws and with the obligations arising from the contractual relationships between you and the Data Controller.
Please note that you may also object to the processing of your personal data via the link at the bottom of any promotional email sent by the Data Controller. An objection expressed in this way also extends to communications sent by post.
Special categories of data or judicial data
The Data Controller does not process special categories of data or judicial data.
Art. 2. Processing methods
Your personal data will be processed mainly by electronic or otherwise automated means, using methods and tools suitable to guarantee their security and confidentiality in compliance with the GDPR.
The information collected and the processing methods will be relevant and not excessive in relation to the type of services provided. The data will also be managed and protected in environments to which access is constantly monitored.
Art. 3. Communication and disclosure of data
Your data may be communicated:
- to all parties (including public authorities) that have access to personal data by virtue of legislative or administrative provisions
- to banks and companies that manage national or international payment networks through which online payments for products purchased through the Site are made
- to companies, consultants or professionals who may be engaged for the installation, maintenance, updating and, in general, management of the hardware and software of the Data Controller or used by it to provide its services
- to external companies engaged to send advertising communications on behalf of the Data Controller
- to employees and/or collaborators of the Data Controller
- to the company engaged to provide customer care
- to all public and/or private parties, natural and/or legal persons (legal, administrative and tax advisory firms, judicial offices, chambers of commerce, labour offices, etc.), where communication is necessary or useful for the correct fulfilment of legal obligations.
Your data will not be disclosed, except in anonymous and aggregate form, for statistical or research purposes.
Art. 4. Data Controller
The Data Controller can be contacted at:
Dea dei Mari srl via dei Colli, 9, 19121 La Spezia SP, Italy
Phone: +39 327 171 0988
Email: [email protected]
Through the contact form on the Site.
Art. 5. Retention of personal data
Personal data will be retained and processed for marketing purposes for a period of 36 months. At the end of this period, the Data Controller may ask the user to renew consent to the processing of their data for these purposes or make the data anonymous and keep it only for statistical or historical purposes.
For all other purposes set out in this privacy policy, personal data will be retained only for as long as necessary to ensure the proper provision of the services offered.
Art. 6. Rights of the data subject
Pursuant to Art. 13 of the Privacy Regulation, the Data Controller informs you that you have the right to:
- ask the Data Controller for access to, rectification or erasure of your personal data, or restriction of processing concerning you, or to object to their processing, as well as the right to data portability
- withdraw consent at any time without affecting the lawfulness of processing based on consent given before its withdrawal
- lodge a complaint with a supervisory authority (e.g. the Italian Data Protection Authority, Garante per la protezione dei dati personali).
The above rights may be exercised by sending a request, without formalities, to the Data Controller at the contact details indicated above.
Art. 7. Changes
The Data Controller reserves the right to amend this policy at any time, giving appropriate notice to users of the Site and in any case guaranteeing adequate and similar protection of personal data. To view any changes, you are invited to consult this policy regularly.
This translation is provided for convenience; in case of discrepancy, the Italian version prevails.
Last updated: 19 October 2026