Privacy Policy

1. Data Controller

The data controller is Puglia Yacht Charter, a brand operated by OÜ Codex Ingenium Holding (registration number 3307658), with registered address at Tartu mnt 67/1-13b, Tallinn, Estonia. Operational base: Polignano a Mare (BA), Italy.

Email: [email protected]

WhatsApp: +39 320 498 0903

2. Personal Data We Collect

We collect the following personal data when you interact with our services:

• Contact information: name, email address, telephone number
• Booking details: preferred dates, number of guests, special requests
• Communication data: messages sent via the contact form, WhatsApp, or email
• Technical data: IP address, browser type, device information, pages visited

3. Purpose and Legal Basis

We process your personal data for the following purposes:

• Responding to enquiries and managing bookings — Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
• Sending service-related communications — Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
• Marketing communications (only with your explicit consent) — Legal basis: consent (Art. 6(1)(a) GDPR)
• Website analytics and advertising optimisation — Legal basis: consent (Art. 6(1)(a) GDPR)
• Compliance with legal obligations — Legal basis: legal obligation (Art. 6(1)(c) GDPR)

4. Cookies and Tracking Technologies

Our website uses the following cookies and tracking technologies:

Google Analytics (Google LLC)

We use Google Analytics to analyse website traffic and understand how visitors interact with our site. Google Analytics collects data such as pages visited, time on site, and referral sources. Data is processed by Google LLC in the United States.

Google Ads (Google LLC)

We use Google Ads conversion tracking (gtag.js) to measure the effectiveness of our advertising campaigns. This technology places cookies to track actions taken after clicking on our advertisements.

Meta Pixel (Meta Platforms, Inc.)

We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising on Facebook and Instagram, and to create custom audiences for remarketing purposes. The Meta Pixel collects data about your browsing behaviour on our website.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

5. International Data Transfers

Some of our third-party service providers, including Google LLC and Meta Platforms, Inc., are based in the United States. Data transfers to the United States are carried out in accordance with the EU-US Data Privacy Framework or, where applicable, Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of data protection as required by the GDPR.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Booking and enquiry data: retained for 24 months after the last interaction, or longer if required by law
• Marketing data: retained until you withdraw your consent
• Analytics data: retained for 14 months (Google Analytics default)
• Accounting and fiscal records: retained for 10 years as required by Italian law

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — You may request a copy of the personal data we hold about you
• Right to rectification (Art. 16 GDPR) — You may request correction of inaccurate personal data
• Right to erasure (Art. 17 GDPR) — You may request deletion of your personal data
• Right to restriction of processing (Art. 18 GDPR) — You may request that we limit the processing of your data
• Right to data portability (Art. 20 GDPR) — You may request your data in a structured, commonly used, machine-readable format
• Right to object (Art. 21 GDPR) — You may object to the processing of your data based on legitimate interest
• Right to withdraw consent (Art. 7 GDPR) — Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data transmissions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date. We encourage you to review this policy periodically.

Last updated: 4 April 2026