pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)
Last updated: April 2026
1. Data Controller
The Data Controller for personal data is:
Company name: Mare e Luna srl (hereinafter “Mare Luna Yacht” or “the Controller”)
Registered office: Via E. Astuti 29, 84014 Nocera Inferiore (SA)
VAT / Tax Code: 06366420658
E-mail: info@mareluna-yacht.com
PEC: mare.luna.srl@pec.it
Website: www.mareluna-yacht.com
2. Types of Data Collected
In the course of its yacht charter, on-board event organisation, private party and corporate event activities, Mare Luna Yacht may collect the following categories of personal data:
2.1 Identification and contact data
- First and last name
- E-mail address
- Phone number
- Residential or domicile address
- Tax code and/or VAT number (for invoicing purposes)
2.2 Browsing data
- IP address
- Browser type and operating system
- Pages visited on www.mareluna-yacht.com
- Date and time of access
- Data collected via cookies and similar technologies
2.3 Charter service data
- Itinerary preferences and charter dates
- Number of guests on board (up to 40 persons)
- Special requests (e.g. catering, dietary requirements, accessibility)
- Payment data (managed via third-party payment providers)
2.4 Corporate event and private party data
- Type of event requested
- Logistical and organisational requirements
- Any participant data provided by the client
3. Purposes and Legal Basis for Processing
3.1 Performance of a contract (Art. 6(1)(b) GDPR)
- Handling quote requests and bookings
- Execution of the yacht charter contract
- Organisation of on-board events according to client specifications
- Payment processing and invoicing
- Pre- and post-service assistance
3.2 Compliance with legal obligations (Art. 6(1)(c) GDPR)
- Tax and accounting obligations
- Navigation safety compliance
- Obligations arising from applicable maritime regulations
3.3 Consent of the data subject (Art. 6(1)(a) GDPR)
- Sending promotional communications and newsletters
- Use of non-technical and profiling cookies
- Publication of photos and videos of the on-board experience on social channels and the website
3.4 Legitimate interest of the Controller (Art. 6(1)(f) GDPR)
- Improvement of services offered and personalisation of the experience
- Fraud prevention and protection of the Controller’s rights
- Statistical analyses in aggregated and anonymous form
4. Processing Methods
Personal data are processed using electronic and paper-based tools, adopting adequate technical and organisational security measures to ensure confidentiality, integrity and availability of data, in compliance with the principle of data minimisation.
Processing is carried out in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.
5. Retention Period
Personal data are retained for the time strictly necessary to fulfil the purposes for which they were collected, and in particular:
- Contractual data: 10 years from the end of the relationship, in accordance with tax and civil law obligations
- Browsing data: maximum 90 days from collection
- Data for marketing purposes: until consent is withdrawn by the data subject
- Data for dispute management: for the time necessary to resolve such disputes
6. Data Disclosure and Dissemination
Personal data may be disclosed to:
- Authorised personnel of the Controller (crew, administrative and commercial staff)
- Instrumental service providers (e.g. payment providers, IT services, hosting services, catering and logistics services)
- Professionals and consultants (accountant, legal counsel, labour consultant)
- Competent authorities, where required by law or maritime regulations.
Data will not under any circumstances be disseminated to unspecified parties, except for images and videos for which specific consent has been obtained.
7. Transfer of Data to Third Countries
Personal data are stored and processed within the European Union. Should transfer to third countries become necessary, this will take place exclusively in compliance with the guarantees provided for by the GDPR (adequacy decisions, standard contractual clauses, or other appropriate safeguards pursuant to Arts. 46–49 of the GDPR).
8. Cookies and Tracking Technologies
The website www.mareluna-yacht.com uses technical cookies necessary for the operation of the site and, subject to user consent, analytical and profiling cookies. For further information, please refer to the Cookie Policy available at: www.mareluna-yacht.com/cookie-policy.
9. Rights of the Data Subject
Pursuant to Arts. 15–22 of the GDPR, the data subject has the right to:
- Access: obtain confirmation of the existence of processing and access their own data
- Rectification: obtain the correction of inaccurate data or the completion of incomplete data
- Erasure: obtain the deletion of data, in the cases provided for by law
- Restriction: obtain restriction of processing in the cases provided for
- Portability: receive their data in a structured, commonly used and machine-readable format
- Objection: object to processing on legitimate grounds
- Withdrawal of consent: withdraw at any time the consent given, without affecting the lawfulness of processing based on consent given prior to withdrawal
Requests may be sent to: info@mareluna-yacht.com.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
10. Changes to This Policy
Mare Luna Yacht reserves the right to modify or update this policy at any time. Any changes will be published on the website www.mareluna-yacht.com with the date of the latest update indicated. Users are invited to consult this page periodically.
11. Contact
For any information regarding the processing of personal data or to exercise the rights referred to in Art. 9 of this policy, please contact the Controller at the following details:
E-mail: info@mareluna-yacht.com
Phone: +393890403906
Address: Via E. Astuti 29, 84014 Nocera Inferiore (SA)
