Privacy Policy on Personal Data Processing

Information valid for reservations, rentals, excursions, tours, services with partners and related communications.

Dear Customer,
This information is provided by SUPer Holidays, as Data Controller of personal data, to users who visit the site, make a reservation, request information or purchase services via the platform. The services may include, by way of example, rentals, guided excursions, boat or dinghy tours, kayaking, SUP, bicycle activities, city tours, walking tours and other experiences offered directly by SUPer Holidays or through partner suppliers.

Purpose of Processing and Legal Basis

The personal data you provide will be processed exclusively for the following purposes:

• management of booking, payment, purchase and execution of the requested service;
• sending confirmations, booking codes, summaries, operational communications and necessary updates before or after the activity;
• issuing and storing invoices, receipts and accounting documents required by tax legislation;
• management of requests for assistance, modifications, cancellations, refunds, complaints, penalties, damages, losses or disputes;
• coordination with suppliers, guides, skippers, operational partners, referral structures or subjects involved in the provision of the booked experience;
• fulfillment of legal obligations, security, protection of the Owner's rights and prevention of abuse or unauthorized use of the platform.

The legal basis is constituted by the execution of pre-contractual and contractual measures requested by the user, the fulfillment of legal obligations, the legitimate interest of the Owner in the correct management of the services and, where necessary, the consent of the interested party.

Nature of Data Provision and Consequences of Refusal

Providing the data requested in the booking form or in the contact channels is necessary to complete the booking, identify the customer, manage the chosen service and fulfill administrative and tax obligations. In case of failure to provide the mandatory data, it may not be possible to confirm or carry out the service.

Categories of Data Processed

Depending on the service requested, the following categories of data may be processed:

• personal and identification data, such as name, surname, identity document or booking code;
• contact details, such as email, telephone number and address;
• tax and billing data, such as tax code, VAT number, residence, postcode, province and country;
• data relating to the booking, such as date, time, chosen service, number of participants, partners, meeting or delivery location and operational preferences;
• communications sent via email, contact forms, chat or assistance tools linked to the booking;
• any information necessary for safety, suitability for service, management of minors, proxies, accidents, damages or complaints.

Complete payment data, such as card number, are not processed directly by SUPer Holidays: payment is managed through specialized providers, such as Stripe, according to their respective policies and security measures.

Photos, videos and security data

For some experiences, photos or videos may be taken, or information useful for the safety of the activity collected, only when required by the conditions of the service or when necessary for the organization and protection of the participants. Any promotional use of recognizable images occurs within the limits indicated in the applicable terms or on the basis of the required consent.

Data Communication

The data may be communicated, to the extent necessary, to:

• partner suppliers, guides, skippers, operators, hotel referrals or subjects in charge of carrying out or supporting the booked service;
• tax consultants, invoicing systems, payment providers, hosting, email, IT tools and technical assistance;
• public authorities, insurance companies, legal consultants or other subjects when required by law or necessary to protect rights and safety.

Personal data will not be disclosed indiscriminately. Any communication occurs only when necessary for the purposes indicated.

Methods of Processing

The processing takes place using IT and, where necessary, paper tools, adopting adequate organizational and technical measures to protect the data from unauthorized access, loss, modification or improper use. The data is kept for the time necessary to manage the service and, subsequently, for the periods imposed by fiscal, accounting, contractual or rights protection obligations.

Rights of the Data Subject

The interested party may request access to their personal data, rectification, cancellation, limitation of processing, opposition to processing and, when applicable, data portability. You also have the right to revoke the consent given, without prejudice to the lawfulness of the processing carried out before the revocation, and to lodge a complaint with the competent supervisory authority.

Data Controller and Processor

The Data Controller is SUPer Holidays, with legal headquarters at via Sernagiotto 11, Elmas (CA). The processor is the owner of the company.
To exercise the rights provided by the GDPR or for any information regarding the processing of your personal data, you can contact the Data Controller at the email address [email protected] .

This information may change over time, also in relation to the possible entry into force of new sectoral regulations, the updating or provision of new services, or the introduction of technological innovations, therefore, we invite you to periodically consult this page.