Last updated: April 28, 2025

Data Protection Information according to Art. 13 and 14 GDPR

The protection of your personal data is very important to us. Therefore, we inform you below about the collection, electronic storage, processing, and use of your data at Marina Monfalcone S.r.l., Via Bagni Nuova 41, 34074 – Monfalcone (GO), Italy.

The terms used in our Privacy Policy and our data protection practices are based on the provisions of the EU General Data Protection Regulation (“GDPR”) as well as other relevant national legal provisions.

Responsible according to GDPR

Marina Monfalcone S.r.l. Via Bagni Nuova 41 34074 – Monfalcone (GO) Italy

Mail: info@marinamonfalcone.com

Phone: +39 0481 411541

General Information on Data Protection

Legal Bases for Processing Personal Data

Unless more specific information is provided in this Privacy Policy (e.g., regarding the technologies used), we may process your personal data based on the following legal grounds:

• Consent pursuant to Art. 6(1)(a) GDPR – The data subject has given consent to the processing of their personal data for one or more specific purposes.
• Performance of a contract and pre-contractual measures pursuant to Art. 6(1)(b) GDPR – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Legal obligation pursuant to Art. 6(1)(c) GDPR – Processing is necessary for compliance with a legal obligation.
• Protection of vital interests pursuant to Art. 6(1)(d) GDPR – Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
• Legitimate interests pursuant to Art. 6(1)(f) GDPR – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Please note that in addition to the GDPR regulations, national data protection provisions in your or our home country may apply.

Transfer of Personal Data

Your personal data will not be transferred to third parties for purposes other than those listed in this Privacy Policy.

We only share your personal data with third parties if:

• you have given your explicit consent pursuant to Art. 6(1)(a) GDPR,
• the disclosure pursuant to Art. 6(1)(f) GDPR is necessary for the assertion, exercise or defense of legal claims based on legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
• there is a legal obligation for the disclosure pursuant to Art. 6(1)(c) GDPR, and this is legally permissible and/or
• it is necessary pursuant to Art. 6(1)(b) GDPR for the performance of contractual relationships with you.

Cooperation with Processors

We carefully select our service providers who process personal data on our behalf. If we commission third parties with the processing of personal data based on a data processing agreement, this is done in accordance with Art. 28 GDPR.

Transfer to Third Countries

If we process data in a third country or this occurs in the context of using third-party services or disclosing/transferring data to other persons or companies, this only takes place based on the legal grounds presented above for the transfer of data.

Subject to explicit consent or contractual necessity, we process or allow data to be processed in accordance with Art. 44-49 GDPR only in third countries with a recognized adequate level of data protection or based on special guarantees, such as contractual obligations through so-called standard contractual clauses of the EU Commission, the existence of certifications, or binding internal data protection rules.

Storage Duration in General

Unless an explicit storage period is specified when data is collected (e.g., within a declaration of consent), we are obliged pursuant to Art. 5(1)(e) GDPR to delete personal data as soon as the purpose of their processing no longer exists. In this context, we would like to point out that statutory retention obligations to which we are subject constitute a legitimate purpose for the further processing of the personal data covered by them.

As a general rule, data is stored and retained by us in personal form until the end of a business relationship or until the expiry of applicable warranty, guarantee, or limitation periods; beyond that, until the termination of any legal disputes in which the data is required as evidence; or in any case until the expiry of the third year after the last contact with a business partner.

Specific Storage Duration

Within the description of individual technologies on our website, we inform you about the storage duration of data. You will also be informed about the storage duration of individual cookies in our cookie table.

Rights of Data Subjects

Data subjects have the right:

• (i) pursuant to Art. 15 GDPR, to request information about their personal data processed by us. In particular, they can request information about the purposes of processing, the category of personal data, the categories of recipients to whom their data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of their data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about their details;
• (ii) pursuant to Art. 16 GDPR, to demand the immediate rectification of incorrect or completion of their personal data stored by us;
• (iii) pursuant to Art. 17 GDPR, under certain circumstances, to demand the erasure of their personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
• (iv) pursuant to Art. 18 GDPR, to demand the (temporary) restriction of processing of their personal data, insofar as the accuracy of the data is contested by them, the processing is unlawful, but they oppose its erasure, we no longer need the data, but they require it for the establishment, exercise or defense of legal claims, or they have objected to processing pursuant to Art. 21 GDPR;
• (v) pursuant to Art. 20 GDPR, to receive their personal data, which they have provided to us, in a structured, commonly used and machine-readable format or to request the direct transmission to another controller; However, this only covers the personal data that we process using automated procedures based on their consent or on the basis of a contract;
• (vi) pursuant to Art. 21 GDPR, if their personal data is processed on the basis of our legitimate interests, to object to the processing of their personal data, provided there are grounds relating to their particular situation or the objection is directed against direct marketing. In the latter case, they have a general right to object, which is implemented by us without specifying a particular situation;
• (vii) pursuant to Art. 7(3) GDPR, to withdraw their once given consent at any time towards us. This means that we may no longer continue the data processing based on this consent in the future. Among other things, they have the option to withdraw their consent previously given for the use of cookies on our website with effect for the future by accessing our Cookie Settings;
• (viii) pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority regarding the unlawful processing of their data by us. As a rule, they can contact the supervisory authority of their usual place of residence or work or our company headquarters.

The supervisory GDPR authority:

Garante per la protezione dei dati personali Piazza Venezia 11 00187 – Rome (Italy)

Phone.: +39 06.696771

Mail: protocollo@gpdp.it

Assertion of Data Subject Rights

You decide on the use of your personal data. Should you therefore wish to exercise the above-mentioned rights towards us or have questions about data protection, you can contact us by e-mail at info@marinamonfalcone.com

Technologies on our Website

Cookies and Local Storage

We use cookies on our website to make our internet presence more user-friendly and functional. Some cookies remain stored on your end device.

Cookies are small data packets exchanged between your browser and our web server when you visit our website. They cause no damage and serve only to recognize website visitors. Cookies can only store information provided by your browser, i.e., information you have entered into the browser yourself or that is available on the website. Cookies cannot execute code and cannot be used to access your end device.

When you next visit our website with the same end device, the information stored in cookies can subsequently be sent back either to us (“first-party cookie”) or to a third-party web application to which the cookie belongs (“third-party cookie”). Through the stored and returned information, the respective web application recognizes that you have already accessed and visited the website.

Cookies contain the following information:

• Cookie Name
• Name of the server from which the cookie originates
• Cookie ID number
• A date on which the cookie will be automatically deleted

Depending on the purpose and function, we divide cookies into the following categories:

• Technically necessary cookies, to ensure the technical operation and basic functions of our website. This type of cookie is used, for example, to maintain your website settings while navigating the site; or they can ensure that important information is retained throughout the session (e.g., login, shopping cart).
• Statistics cookies, to understand how visitors interact with our website by collecting and analyzing information anonymously. This provides us with valuable insights to optimize both the website and our products and services.
• Marketing cookies, to implement targeted advertising activities for users on our website.
• Unclassified cookies are cookies that we are currently trying to classify together with providers of individual cookies.

Depending on the storage duration, we also divide cookies into session and persistent cookies. Session cookies store information used during your current browser session. These cookies are automatically deleted when the browser is closed. No information remains on your end device. Persistent cookies store information between two visits to the website. Based on this information, you are recognized as a returning visitor on your next visit, and the website reacts accordingly. The lifespan of a persistent cookie is determined by the provider of the cookie.

The legal basis for the use of technically necessary cookies is based on our legitimate interest in the technically flawless operation and smooth functionality of our website. Our website cannot function correctly without these cookies. The use of statistics and marketing cookies requires your consent. You can withdraw your consent to the use of cookies at any time for the future. Consent is voluntary. If it is not given, no disadvantages arise.

Further information about the cookies we actually use (especially about their purpose and storage duration) can be found in this privacy policy and in the information about the cookies we use in our Cookie Banner.

You can set your browser so that the storage of cookies is generally prevented on your device or you are asked each time whether you agree to the setting of cookies. Once set, cookies can be deleted at any time. You can find out how this works in detail in the help function of your browser.

Please note that a general deactivation of cookies may lead to functional limitations on our website.

We also use so-called Local Storage functions (also called “local storage”) on our website. Data is stored locally in the cache of your browser, which persists and can be read even after closing the browser – unless you clear the cache or it is session storage.

Third parties cannot access the data stored in Local Storage. If specific plugins or tools use Local Storage functions, this is described for the respective plugin or tool.

If you do not wish for plugins or tools to use Local Storage functions, you can control this in the settings of your respective browser. We point out that this may possibly lead to functional limitations.

You also have the option to adjust the Cookie Settings in the Cookie Banner:

Hosting

As part of hosting our website, all data to be processed in connection with the operation of our website is stored. This is necessary to enable the operation of the website. We therefore process the data accordingly based on our legitimate interest in optimizing our website offering. To provide our online presence, we use services from web hosting providers, to whom we provide the aforementioned data within the scope of a data processing agreement.

Matomo

On our website, the web analysis service Matomo (www.matomo.org) from the provider InnoCraft Ltd., 7 Waterloo Quay PO625, 6140 Wellington, New Zealand, (“Matomo”) is used for the statistical analysis of user behavior and for optimization and marketing purposes. Matomo is open-source software.

The data collected with Matomo is stored on our own servers. It is not passed on to third parties. You can find out whether cookies are used in our cookie table.

Within the scope of reach measurement, the following data is processed:

• the browser type and version you use
• the operating system you use
• your country of origin
• date and time of the server request
• the number of visits
• your dwell time on the website
• as well as the external links you clicked.

The IP address is anonymized before it is stored. Pseudonymized usage profiles can be created and evaluated from the data collected within the scope of this service.

The information generated in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.

The processing of your data is based on your consent according to Art 6(1)(a) GDPR. You can revoke this consent at any time with effect for the future.

Further information on data protection from Matomo can be found at https://matomo.org/matomo-cloud-privacy-policy/ as well as https://matomo.org/privacy-policy/ or https://matomo.org/gdpr-analytics (English).

Server Log Files

For technical reasons, especially to ensure a functional and secure internet presence, we process technically necessary data about access to our website in so-called server log files, which your browser automatically transmits to us.

The access data we process include:

• Name of the retrieved website
• Browser type used including version
• Operating system used by the visitor
• The previously visited page of the visitor (Referrer URL)
• Time of the server request
• Amount of data transferred
• Hostname of the accessing computer (IP address used)

This data is not assigned to natural persons and serves only for statistical evaluations and for the operation and improvement of our website as well as for the security and optimization of our internet offering. This data is only transmitted to our website host. This data is not connected or merged with other data sources. If there is suspicion of unlawful use of our website, we reserve the right to check this data subsequently. Data processing is based on our legitimate interest in the technically error-free presentation and optimization of our website.

The access data is deleted shortly after the purpose has been fulfilled, usually after a few days, unless further retention is required for evidentiary purposes. Otherwise, the data is kept until the final clarification of an incident.

SSL Encryption

For your visit to our website, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. You can recognize whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the status bar of your browser. The use of this procedure is based on our legitimate interest in using suitable encryption techniques.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments and kept up to date.

Borlabs Plugin for WordPress

To manage your preferences regarding the use of cookies and external services on our website and to document your consent, we use the consent management tool Borlabs Cookie.

When you visit our website, you are asked for your consent to the use of certain technologies via a dialog (cookie banner). Borlabs Cookie stores the choice you make in this dialog (your consent preferences) in a cookie on your end device. This cookie specifically stores information about which service groups and individual services you have consented to or rejected. This serves to respect your choice on future visits to our website and to ensure that only those services are active for which your consent exists.

Setting this cookie to store your consent is technically necessary to meet the legal requirements for consent management.

The provider of the Borlabs Cookie tool is: Borlabs GmbH Hamburger Str. 11 22083 Hamburg Germany

Further information on data protection at Borlabs and the functionality of Borlabs Cookie can be found in the provider’s privacy policy at: https://borlabs.io/privacy/

Brevo

For sending our email newsletter, we use the service Sendinblue (now Brevo). The provider of this service is: Sendinblue GmbH Köpenicker Str. 126 10179 Berlin Germany

Sendinblue GmbH is a limited liability company registered in the commercial register of the District Court Berlin-Charlottenburg under the HR number HRB 133191.

When you subscribe to our newsletter, the data you provide (email address) during registration is transferred to Sendinblue and stored there for the purpose of sending the newsletter and for analysis. The sending of the newsletter and the associated processing of your data are based on your explicit consent (Art. 6(1)(a) GDPR), which you gave us upon registration. Registration uses the double opt-in procedure to ensure that you are indeed the owner of the specified email address and agree to receive the newsletter.

Withdrawal of consent: You can withdraw your consent to receive the newsletter and to the storage of your data by Sendinblue at any time for the future. You will find an unsubscribe link for this purpose in every newsletter email.

Other email dispatch: If we also use Sendinblue for sending other necessary emails that do not concern the newsletter (e.g., for contract fulfillment or due to our legitimate interest in efficient communication), the processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Further information on how Brevo processes and protects your data can be found in Brevo’s privacy policy at: https://www.brevo.com/legal/privacypolicy

Vertical Booking

To give you the opportunity to check, request, and book stays or services directly online via our website, we use a booking engine from the provider Vertical Booking. When you use the booking process on our website, you interact with the Vertical Booking service.

Within the booking process, the data you enter is collected, which is necessary for processing your booking and for fulfilling the associated contract or for carrying out pre-contractual measures. This typically includes:

• First and last name
• Contact details (e.g., address, email address, phone number)
• Booking details (e.g., arrival and departure date, room type/service, number of guests, special requests)
• Information about any accompanying persons
• Payment information (e.g., credit card details, billing address)
• Technical data that may arise during the process (e.g., IP address at the time of booking)

The collection and processing of your data via the Vertical Booking engine serves exclusively the purpose of receiving and processing your booking request and concluding and handling the booking (the contract for accommodation or other services) with you. The legal basis for the processing of this data is therefore Art. 6(1)(b) GDPR (performance of a contract or implementation of pre-contractual measures at your request).

The technical service provider for the provision of the booking engine is: Vertical Booking S.r.l. Viale Fratelli Kennedy, 21, 24066 Pedrengo BG (ITALY) Ph. +39 035 232366

Further information on how Vertical Booking processes and protects your data can be found in Vertical Booking’s privacy policy at: https://www.verticalbooking.com/en/privacy-policy/

Contact and Inquiries via Forms

On our website, we offer various ways to contact us or submit inquiries using online forms (e.g., general contact form, inquiry forms).

Type of Data Processed: When you use such a form, we collect the data you enter into the input fields. The specific data collected is visible directly on the respective form. Typically, this includes:

• Your name
• Your email address
• Possibly your phone number
• Your subject / topic of inquiry
• The content of your message / your concern

Fields that we absolutely require to process your request (mandatory fields) are marked accordingly. All other information is voluntary. Additionally, for technical reasons and to prevent misuse, your IP address, as well as the date and time of the inquiry, may be logged server-side at the time of submission.

Purpose of Processing: We process the data you submit solely for the purpose of receiving, processing, and responding to your specific request, and for the associated technical administration and documentation.

Legal Basis for Processing: The processing of your data from the form is based on our legitimate interest in efficient and structured handling of inquiries and communication with our website visitors, pursuant to Art. 6(1)(f) GDPR. By submitting the form, users actively initiate contact and can reasonably expect their inquiry to be processed. If your inquiry aims at concluding a contract (e.g., a specific quote request), the processing serves the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

Recipients of the Data: Your data entered via forms is forwarded internally to the departments or employees responsible for handling your request. As a rule, your data is not passed on to external third parties unless:

• you have given your consent to do so,
• it is absolutely necessary for processing your request, or
• we are legally obliged or entitled to do so (e.g., due to an official order). We may use technical service providers (e.g., for hosting, email dispatch) as processors who might access data in the course of their activities. We have concluded corresponding Data Processing Agreements (DPAs) with these service providers in accordance with Art. 28 GDPR.

Storage Duration: We store your data submitted via forms only for as long as necessary to fully process your inquiry and any subsequent communication, or until you request deletion, provided that no statutory retention or other legal bases require or justify longer storage. If such obligations exist, we restrict the processing after your request has been dealt with and delete the data after the statutory periods expire.

Security: To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL/TLS via HTTPS).

Voluntariness: Providing your personal data via our forms is voluntary. However, please note that we cannot process your request via the form without the information in the mandatory fields.

Your Rights: Regarding the data processed via forms, you also have the rights mentioned in the “Your Rights as a Data Subject” section of this privacy policy (such as access, rectification, erasure, etc.).