Privacy & Policy

Dear User,
with this information notice we provide you with the information required by the privacy legislation (in particular, art. 13 of the General Data Protection Regulation, the so-called GDPR) to explain to you what processing of personal data is carried out by consulting this site or otherwise using our services.
The policy refers only to this site, the address of which is www.limoncellocharters.com (hereinafter also “Site”): if you reach other sites via links here, you must refer to their respective policies.
Who is the data controller? (Art. 13(1)(a))
The data controller is Limoncello Charters SRL(“Data Controller”).
How can you contact the data controller? (Art. 13, par. 1, lett. b)
You can contact the data controller:
via mail, at the address indicated in the previous paragraph;
by e-mail: info@limoncellocharters.com
telefonicamente: +393391688639;
What are the purposes and legal basis of data processing? (Art. 13, par. 1, lett. c)
The processing of your data is carried out for several purposes, for example, to improve our services, to keep you updated on our products, to send you newsletters and to allow you to browse our website.

Operation of the pages of the Websites and provision of related services (for example: responding to any contact requests via the forms on the Websites, purchasing products and services and checking that they are working properly).
The computer systems and software procedures used to operate the Sites acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected in order to be associated with identified interested parties, but which, by its very nature, could, through processing and association with data held by the Co-owners or third parties, make it possible to identify users of the Sites.
This processing purpose is legitimized by the performance of a contract to which you are a party or of pre-contractual measures taken at your request, pursuant to Article 6(1)(b) of the GDPR.
Generic marketing activities: by way of example sending – by automated means of contact (e-mail) – promotional and commercial communications by way of example but not limited to reporting on company events or webinars or whitepapers. This purpose of processing is legitimized by the legitimate interest of the Data Controllers (pursuant to Article 6(1)(f) of the GDPR).

Communication of the data to third parties belonging to the following product categories: Services, manufacturing, commerce, public administration, for their marketing purposes by sending by automated contact methods (including SMS and e-mail) and traditional methods (including telephone calls with operator), promotional and commercial communications related to its products and services, reporting of company events, carrying out market studies, statistical analysis.
This purpose of processing is legitimized by your optional, free and revocable consent at any time (pursuant to Art. 6(1)(a) of the GDPR).
Marketing by in favor of third parties (without data communication) belonging to the following product categories: Services (including ICT/digital), manufacturing, commerce, public administration: sending – by automated contact methods (such as SMS and e-mail) and traditional methods (such as telephone calls with operator) – promotional and commercial communications, advertising material related to offers of services/products, reporting of company events, as well as carrying out market studies and statistical analysis by the Contractors on behalf of third parties. This purpose of processing is legitimized by your optional, free and revocable consent at any time (pursuant to Art. 6, par. 1, letter a) of the GDPR)

Profiling activities: analysis of Your preferences, habits, behaviors, interests inferred, for example, from online clicks on articles/sections of the website, in order to send You personalized commercial communications/ carry out targeted promotional actions, business intelligence.
The processing of your personal data for profiling purposes will take place, in case of consent, with data processing tools that, following cross-referencing, will create your commercial and behavioral profile on the web. This data processing tool will relate the data collected during your browsing on the Site through the use of first- and third-party profiling cookies accepted by you with the data collected through the completion of the online form. In addition, such data and/or information, will be associated with any and/or further data and/or information already in our possession as a result of your joining our services. This purpose of processing is legitimized by your optional, free and revocable consent at any time (pursuant to Art. 6(1)(a) of the GDPR).
Sending newsletters: if requested by you with registration for such service. This processing purpose is legitimized by the performance of a contract to which you are a party or of pre-contractual measures taken at your request, pursuant to Art. 6(1)(b) of the GDPR.

Contact us: if requested by you by filling out the form will be processed by Limoncello Charters SRL to respond to your requests for information about products/services. This purpose of processing is legitimized by the performance of a contract to which you are a party or pre-contractual measures taken at your request, pursuant to Article 6(1)(b) of the GDPR.
Legal obligations: fulfillment of obligations under regulations and applicable national and supranational legislation. This processing purpose is legitimized by the need to fulfill a legal obligation under Art. 6(1)(c) of the GDPR.
What data do we collect (Art. 13(1)(c))
We collect different categories of personal data, depending on the purpose of processing. Website navigation/operation data. The computer, telematic systems and software procedures responsible for the operation of the Website acquire in the course of their normal operation certain data whose transmission is implicit in the use of web communication protocols. This category of data includes, for example, IP addresses, the date and time of access, the pages visited (URI/URL), the numerical code indicating the status of the response given by the server, the method used in submitting the request to the server, the names of the devices used to connect to the site and other parameters relating to the user’s operating system and computer environment.

Data voluntarily provided. Some sections of the Website require certain personal data, such as but not limited to: first name, last name, contact information, city and/or country of residence, username and password.
Location data. The Website may collect, following your specific authorization, location data (approximate) provided by your IP address.
Content Sharing Data via Social Networks. The Website may include plugins and/or buttons in order to enable content sharing on Social Networks (e.g., Facebook, Twitter, LinkedIn, YouTube, Instagram) used by you.
What is the retention period for personal data? (Art. 13(2)(a))
We keep your data for a period of time that varies according to the purpose of the processing.
Operation of the Websites pages and provision of related services. We keep your personal data for the time necessary for the provision of the services referred to in the digital channels; in the case of the purchase of products or services, the data will be kept for an additional 10 years after the conclusion of the same, in accordance with the relevant legal requirements.
Marketing activities. Personal and contact data are retained until your opt-out, while data relating to the details of promotional and commercial activities carried out will be retained for 10 years from the collection of each data.

Marketing by in favor of third parties. Your data will be processed until you revoke the consent given. Revocation of consent does not affect the lawfulness of the processing based on the consent before revocation.
Profiling activities. Your data will be processed until you revoke the consent given. Revocation of consent does not affect the lawfulness of processing based on consent prior to revocation.
Sending newsletters Master and contact details will be retained until you opt-out, while shared communication details will be retained for 10 years after the collection of each data.
Contact Us. Personal data are retained to respond to your requests for product/service information and after the request has been processed, for the ordinary statute of limitations period of 10 years.
Legal Obligations. Personal data shall be retained for 10 years, or such further period as may be prescribed by law.
After the aforementioned retention periods have expired, the Data will be destroyed or anonymized, consistent with the technical procedures for deletion and backup and with the accountability requirements on the part of the Data Holders.

In particular, following your objection to the processing and/or your possible withdrawal of consent, Limoncello CHarters SRL will continue to process your Data in order to be able to have evidence that you should no longer be sent informative and promotional marketing material (directly and/or on behalf of third parties), that profiling activities should no longer be conducted and/or that your data should no longer be communicated to third parties. Please note that consent is free, optional and revocable. Therefore, where only one consent is requested under any form, where it is given by you, it will be understood to be specific to that purpose and no other purpose that provides the legal basis for consent. It is, therefore, understood that any purpose that you may find described in this notice for which consent is required will be pursued only and only if such consent is requested of you.
Who, if any, are the recipients or categories of recipients of personal data? (Art. 13(1)(e))
Your data may be processed by employees of Atex Penisola Sorrentina.
Your data may be processed by employees of the business functions of the Joint Data Controllers and/or the Data Processors deputed to the pursuit of the purposes indicated above, who have been expressly authorized to process the data and who have received appropriate operational instructions.

Is the data processed outside the territory of the E.U.? (Art. 13(1)(f))
The data processed by the Data Controller reside in servers located within the territory of Italy.
However, some providers of cookie services are also based in countries outside Europe, particularly in the United States, as also specifically indicated in our Cookie Policy.
In these cases, personal data also reside in servers located in the United States, but always in compliance with the provisions of articles 45 et seq. of the GDPR. Therefore, all necessary precautions will be taken in order to ensure the fullest protection of personal data by basing such transfer: a) on adequacy decisions of the third country recipients expressed by the European Commission; b) on adequate safeguards expressed by the third party recipient pursuant to Article 46 of the Regulation.
Cookie Policy
What functions do cookies perform?
Cookies make it possible to store information about a user’s visits to a website and are a very useful technology because, for example, they enable websites to function, making them more efficient, and provide useful information to website operators.

Cookies make it possible to store information about a user’s visits to a Web site and are a very useful technology, as they enable, for example, the operation of Web sites, making them more efficient, and provide useful information to site operators. Without cookies, or other assimilated technologies, websites would have no way of “remembering” information about visitors, such as how many items the user has placed in their shopping cart or whether or not they have logged in.
Cookies can be classified according to:
duration: session or persistent cookies
origin: first-party or third-party cookies;
purpose: technical, analytical or profiling cookies.
Cookies that expire at the end of a browser session (normally when a user closes their browser) are referred to as session cookies and are useful, for example, to store a user’s purchase order or for security purposes, such as when accessing their internet banking or webmail account. Cookies that, on the other hand, are stored for a longer period of time (between sessions) are called persistent cookies and are useful, for example, to remember user preferences or to serve targeted advertising.

The definition of first-party or third-party refers to the website or domain that installs the cookie. First-party cookies are installed directly by the website that the user is visiting, while third-party cookies are installed by a domain different from the one the user is visiting, for example in the case where the website incorporates elements from other sites, such as images, social media plugins, or advertisements.
It should be specified that the purposes usually fulfilled by a cookie can also be accomplished through other assimilated technologies, including the use of certain device-identifying features so that visits to a website can be analyzed. This policy, in fact, applies to any technology that stores or accesses information on a user’s device. Examples could include HTML5 local storage, Local Shared Objects (also called flash cookies), and fingerprinting techniques. Specifically, device fingerprinting is a technique of combining a variety of information in order to uniquely identify a particular device. Examples of the information that device fingerprinting can detect, associate with, or infer include:
data derived from the configuration of a device;
data inferred from the use of particular network protocols;

JavaScript;
HTTP header information, clock information;
fonts installed;
plugins installed in the browser.
It is also possible to combine these elements with additional information, such as IP addresses or unique identifiers, etc. Henceforth when we talk about cookies, other assimilated technologies will also be considered to be included in this definition.
What are the purposes of the cookies used by this site?
According to the purpose, the cookies installed on this site are distinguished into technical cookies, analytical cookies and profiling cookies.
Technical cookies are necessary for the operation of the website because they enable functions to facilitate the user’s navigation, who, for example, will be able to access their profile without having to log in each time or will be able to select the language with which they wish to navigate the site without having to set it each time.
Technical cookies are considered strictly necessary, because storing the information is essential to provide a service requested by the user. Therefore, technical cookies cannot be disabled and users’ prior consent is not required for their installation.

Analytical cookies, which can be first- or third-party, are installed to collect information about the use of the website. In particular, they are useful to statistically analyze access or visits to the site itself and to allow the owner to improve its structure, navigation logic and content. The information collected (including IP address, masked) is used to perform statistical analysis in order to improve the use of the site and possibly to make the content more interesting and relevant to the user’s wishes.
Analytical cookies are not necessary for the operation of the website, however, since the IP address is not in plain text the installation of such cookies does not require the user’s consent.
Profiling cookies, which can be first- or third-party, are used to track the user’s browsing, analyze their behavior for marketing purposes and create profiles regarding their tastes, habits, choices, etc. In this way it is possible, for example, to transmit targeted advertising messages in relation to the user’s interests and in line with the preferences expressed by the user when browsing online. These cookies also include social cookies.
Such cookies can only be installed on the user’s terminal if the user has given consent.

How do you manage cookie preferences?
When you first access any page on the Site, there is a banner that contains a brief information and the cookie preference management panel/a button through which you can accept all cookies. The user has the option to select/deselect individual categories of cookies. Consent to the use of cookies is registered with a special “technical cookie.”
However, users can also express their cookie preferences through the settings of the browser they use. By default, almost all web browsers are set to automatically accept cookies, but users can change the default configuration through the settings of the browser used, which allow them to delete/remove all or some cookies or block the sending of cookies or limit it to certain sites.
Disabling/blocking cookies or deleting them may affect optimal enjoyment of certain areas of the site or prevent certain functionality, as well as affect the operation of third-party services.

Newsletter
The newsletter is sent by e-mail to those who explicitly request it by filling out the appropriate form on the Site and giving their specific consent to the processing of their personal data for the aforementioned purpose. To stop receiving the newsletter, simply select the unsubscribe link, found at the end of each e-mail, or send a specific request to the e-mail address: info@limoncellocharters.com.
Purpose: To send e-mail communications related to communications to the data subject;
Legal basis: The consent of the data subject (Art. 6(1)(a) GDPR).
Retention Period: The period necessary to fulfill your request and, in any case, as permitted by applicable law.
Sending of communications in the context of soft-spam.

In the only case where the e-mail address is provided by the data subject in the context of the provision of services or where you have shown interest in our services and have requested information from us, the data thus collected by the Data Controller may also be used to send e-mail communications relating to services similar to those already purchased or of interest to the user, pursuant to art. 130, paragraph 4, Legislative Decree 196/2003 and art. 6, letter f, of the GDPR, without the need for prior express consent (so-called soft spam). In every communication, the user is reminded that he/she can withdraw consent at any time and without formality.
Purpose: To inform you about communications
Legal basis: The legitimate interest of the Owner in sending communications regarding products or services similar to those already purchased, expressly regulated by art. 130, paragraph 4, Legislative Decree 196/2003 (art. 6, paragraph 1, lett. f, GDPR).
Retention period: The period necessary to fulfill your request and, in any case, as permitted by current legislation.
What are the rights of the data subject (Art. 13, para. 2)
Pursuant to Art. 13, par. 2, we inform you that, as a “data subject” you can exercise your rights under the GDPR at any time in relation to the processing carried out.
You can exercise them by communication to info@limoncellocharters.com.

In particular as a “data subject” you have the right to:
to know whether or not we process your personal data; should we process it, you can access it in full including by obtaining a copy (access, Art. 15 GDPR),
request rectification of inaccurate personal data or their supplementation where incomplete (rectification, Art. 16 GDPR);
request deletion of personal data in certain cases, as provided for in Art. 17 GDPR (oblivion);
request restriction of processing in certain cases, as provided for in Art. 18 GDPR;
request data portability (i.e., request and receive personal data processed by us in a structured, commonly used, machine-readable format; in addition, you can request, where technically feasible, transmission to another controller without hindrance; Art. 20 GDPR);
oppose the processing of data for direct marketing purposes (art. 21 GDPR);
the right to lodge a complaint with the supervisory authority (for Italy, the Garante per la protezione dei dati personali: www.garanteprivacy.it), as provided for in art. 77 GDPR, or to take action before an ordinary judicial authority (art. 79 GDPR) if you believe that the processing of your personal data carried out through this Site is in violation of the provisions of the Regulations.