ITENDE
Back to site
Legal document

Privacy Policy

Last updated: 20 October 2026

This translation is provided for the user's convenience. In the event of any discrepancy between the Italian version and any translation, the Italian version shall prevail. This notice describes how personal data of users visiting pelagicpredator.it are processed and of those who come into contact with the Data Controller. The notice is provided pursuant to articles 13 and 14 of EU Regulation 2016/679 ("GDPR") and the Italian Privacy Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018).

Data Controller

The Data Controller is Manuel Bonetti, VAT number 03702690128, with operating office at Via Gorizia 21, 21036 Gemonio (VA), Italy.

For any request regarding the processing of personal data, the Data Controller can be contacted at the following: email manuel.bonettipt@gmail.com, phone and WhatsApp +39 346 494 7845.

Categories of data collected

The site collects the following categories of personal data, only within the limits and for the purposes described below:

  • Contact data: first name, surname, email address, phone number provided voluntarily via the contact form, WhatsApp or direct email.
  • Navigation data: IP address, browser type, operating system, pages visited, date and time of access, collected automatically by hosting servers for technical and security purposes.
  • Cookies: the site uses technical cookies necessary for the correct operation of the site (e.g. storing the choice expressed on cookies) and, only with the user's consent, Google Analytics 4 statistics cookies. For details, please refer to the Cookie Policy.

Purposes and legal basis of Processing

Personal data are processed for the following purposes:

  • Replying to information requests and managing fishing trip bookings, on the basis of the performance of pre-contractual measures at the request of the data subject (art. 6, par. 1, lett. b GDPR).
  • Compliance with legal, fiscal and accounting obligations, on the basis of art. 6, par. 1, lett. c GDPR.
  • Ensuring site security and preventing abuse, on the basis of the Data Controller's legitimate interest (art. 6, par. 1, lett. f GDPR).

Visit statistics (Google Analytics 4)

Only if the user consents in the cookie banner, the site uses Google Analytics 4 to collect aggregate statistics on visits, such as the pages visited, the source of the visit and the type of device. The legal basis is consent (art. 6, par. 1, lett. a GDPR), which can be revoked at any time through the "Manage consent" link in the footer, without affecting the lawfulness of processing carried out before the revocation. Google Ireland Limited processes the data as a Processor pursuant to art. 28 GDPR, and the data may be transferred to Google LLC in the United States on the basis of the EU-US Data Privacy Framework. The data are retained in Google Analytics for the period set in the service, at most 14 months. The cookies used are described in the Cookie Policy.

Methods of Processing

Data are processed via manual, IT and telematic tools, with logic strictly correlated to the purposes indicated. Processing is carried out directly by the Data Controller and does not involve automated decision-making or profiling.

Adequate technical and organisational security measures are in place to guarantee the confidentiality, integrity and availability of personal data, in compliance with article 32 GDPR.

Recipients of data

Personal data collected via the site are not disseminated to third parties or used for marketing purposes. They may be communicated to parties carrying out activities ancillary to the operation of the service, in the capacity of Processors pursuant to art. 28 GDPR, including: the hosting provider (Cloudflare, Inc.), the email provider, and the Data Controller's tax and legal advisors.

Data may also be communicated to public authorities upon legitimate request in the context of administrative or judicial proceedings.

International data transfers

The site is hosted on Cloudflare Pages, a service provided by Cloudflare, Inc., based in the United States of America. Data transfers are based on the Standard Contractual Clauses approved by the European Commission (Decision 2021/914) and on the additional technical and organisational security measures adopted by Cloudflare pursuant to GDPR.

For more information on Cloudflare's privacy policy, please consult: https://www.cloudflare.com/privacypolicy/

Rights of the Data Subject

As a Data Subject, pursuant to articles 15-22 GDPR, the user has the right to:

  • Access (Art. 15): obtain confirmation of the existence of Processing of their personal data and access related information.
  • Rectification (Art. 16): obtain the correction of inaccurate data or the integration of incomplete data.
  • Erasure (Art. 17): obtain the erasure of their personal data, in the cases provided for by law.
  • Restriction (Art. 18): obtain the restriction of Processing in the cases provided for by law.
  • Portability (Art. 20): receive their personal data in a structured, commonly used and machine-readable format.
  • Objection (Art. 21): object to the Processing of their personal data for reasons connected to their particular situation.

Exercise of rights and complaint

The user may exercise these rights at any time by sending a written request to the Data Controller's contacts listed in section 1. A reply will be provided within one month of receipt of the request, pursuant to art. 12 GDPR.

The user also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) if they consider that the Processing of their personal data infringes applicable law.

Data retention period

Personal data are retained for the time strictly necessary to pursue the purposes for which they were collected and, in any event, in compliance with applicable legal time limits. Data relating to contact requests not followed by a booking are retained for a maximum period of 12 months. Data relating to fishing trips actually carried out are retained for the period required by tax and accounting law (10 years).

Changes to this policy

The Data Controller reserves the right to amend this notice at any time, giving notice to users via publication on the site. Please consult this page regularly.