Legal Notice
Privacy Policy
Pursuant to Art. 13 of EU Regulation 2016/679 (GDPR)
This document describes how Kayak Delivery collects, uses and protects the personal data of users who visit kayakdelivery.it or make a booking.
1. Data Controller
Kayak Delivery
Operational base: Olbia (OT), Sardinia, Italy
Email: info@kayakdelivery.it
Phone: +39 351 368 3068
VAT: registration in progress
For any questions regarding the processing of personal data, please contact us at the email address above.
2. Personal Data Collected
2.1 Data provided by the user
We collect the following data when you fill in the booking or contact form:
- First and last name
- Email address
- Phone number
- Date and time of booking
- Type of watercraft requested
- Delivery beach
- Additional notes (if entered)
2.2 Automatically collected data
During site browsing, the following data may be collected automatically:
- IP address (anonymised)
- Browser type and operating system
- Pages visited and duration of visit
3. Purposes and Legal Basis of Processing
Your personal data is processed for the following purposes:
- Booking management — processing and confirming your kayak rental request. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Operational communications — sending you booking confirmation and service updates. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Responding to contact requests — replying to messages sent via the contact form. Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).
- Legal compliance — complying with applicable legal obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
4. Recipients of Data
Personal data may be shared with the following categories of recipients:
- Activepieces (activepieces.com) — automation platform used to send booking confirmation emails. Data is transmitted via HTTPS webhook.
- Hostinger — hosting provider that hosts the site and the bookings database. Servers located in the European Union.
- Google — typographic fonts are loaded from Google Fonts (fonts.googleapis.com). An IP address transfer to Google servers may occur.
Data is not sold, transferred or shared with third parties for marketing purposes without your consent.
5. International Transfers
Activepieces may process data on servers located outside the European Union. In such cases, the transfer takes place in compliance with the safeguards provided by the GDPR (Standard Contractual Clauses adopted by the European Commission pursuant to Art. 46 GDPR).
6. Retention Period
Data collected through the booking form is retained for a maximum period of 12 months from the booking date, unless different legal obligations apply.
Data from contact requests is retained for 6 months from the date of receipt.
7. Your Rights
Under Arts. 15–22 of the GDPR, you have the right to:
- Access — obtain confirmation that data concerning you is being processed and receive a copy.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure ("right to be forgotten") — have your data deleted, within the limits provided by law.
- Restriction — request the suspension of processing in certain cases.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdrawal of consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
- Complaint — lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the supervisory authority in your country of residence.
To exercise your rights, write to info@kayakdelivery.it. We will respond within 30 days.
8. Cookies
The site uses strictly necessary technical cookies for its operation. For detailed information on the cookies used and consent management, please read our Cookie Policy.
9. Data Security
We adopt appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss or destruction. The site uses encrypted HTTPS (TLS) connection. Booking data is stored in a database protected by access credentials.
10. Changes to this Privacy Policy
This policy may be updated periodically. The date of the last update is shown at the top of the page. In the event of material changes, we will inform you via a prominent notice on the site.