Privacy Policy
1. Data Controller
The Data Controller is:
2. Scope of Disclosure
This disclosure describes how the personal data of users who visit the algheroloungeboat.com website and use the services available online are processed, including contact forms, availability requests, quote requests, booking tools, WhatsApp contacts, and site navigation.
3. Types of Data Processed
The Controller may process the following categories of personal data of users:
- Identification and contact data: first name, last name, email address, and phone number;
- Booking and billing data: date and time of the experience, number and age group of passengers, any special notes/requests entered by the user, billing address, and transaction details;
- Payment data: credit card details and transaction processing are handled securely and encrypted via the external payment provider Stripe (the Controller does not store or have access to full payment card details);
- Technical navigation data: IP address, browser type and browser agent, date/time of access, system logs;
- Anonymous statistical data: aggregate metrics on site visits provided by Umami Analytics in cookie-free mode.
4. Purposes and Legal Bases
Data are processed for:
- Request management: To respond to your questions and verify availability (Base: Pre-contractual measures).
- Bookings: To confirm and provide the service (Base: Contract execution).
- Legal obligations: For tax and regulatory compliance (Base: Legal obligation).
- Security: To protect the site and the Controller's rights (Base: Legitimate interest).
5. Data Retention
Data are kept for the time strictly necessary:
- Unconverted requests: 12 months.
- Tax/contractual documentation: 10 years.
6. Rights of the Data Subject
Under the GDPR, you have the right to access your data, request its rectification, erasure, or limitation. You may also object to the processing or withdraw consent at any time.
To exercise your rights, you can contact us via the form on the homepage or contact section.