Privacy notice

Who is responsible for your data

The data controller is Frantoio Oleario di Fauzzi Angelo, VAT number 08471860729, registered office Via Torquato Tasso 21, 70015 Noci (BA), trading as Elysium Sea Experience. For anything about your data, write to info@elysiumseaexperience.com.

We have not appointed a Data Protection Officer; we are not required to.

This website collects nothing

Unusually, that is literal. This site sets no cookies, runs no analytics, embeds no social media, loads no external fonts and makes no third-party requests. There is no tracking to consent to, which is why you were not asked to dismiss a cookie banner.

The map showing the marina is an image generated when the site was built, not an embed. The only external links are ones you have to click — the booking page, WhatsApp, and driving directions. Following one takes you to that company’s own site, under their privacy policy, not ours.

Our hosting provider, Vercel, keeps short-lived technical logs of requests — including IP address and browser type — to serve the site and defend it from abuse. We do not use those logs to identify anyone.

What we collect when you book

To take a booking we need:

• Your name, email address and telephone number.
• The departure, the date and the number of guests.
• Anything you choose to tell us about health, mobility, allergies or non-swimmers in your party.
• Any extras you add, such as lunch.

Health information is a special category of data. We ask for it only so the day is safe, we record no more of it than that requires, and we use it for nothing else.

Payment

Card payments are handled by Stripe. Your card number reaches Stripe directly and never passes through our hands — we see only whether a payment succeeded, the amount, and the last four digits.

If you write to us on WhatsApp

WhatsApp is run by Meta, and using it means Meta processes the message and the fact that you contacted us, under their own terms. We keep the conversation so we can answer you and remember what was agreed. If you would rather not use WhatsApp, email works just as well.

Photographs of your day

We take photographs during the departure and send ten of them to you on WhatsApp the next morning. That is part of what you booked, and we rely on the contract to do it.

Using a photograph publicly is different, and we rely on your consent for that — asked separately, never bundled into the booking, and always refusable at no cost. You can withdraw consent at any time by writing to info@elysiumseaexperience.com; we will stop using the image and remove it where it is within our control.

Why we are allowed to use it

• To perform the contract — taking, confirming and running your booking, and sending you your photographs.
• To meet legal obligations — invoicing and tax records, and any maritime or safety record we are required to keep.
• Our legitimate interest — keeping the site available and secure, and defending a legal claim if one arises.
• Your consent — publishing a photograph in which you appear, and any marketing email you have asked for. You can withdraw consent at any time.

Who else sees it

Only those who need to, and only to do a job for us:

• Bókun — the reservation platform that holds the booking.
• Stripe — payment processing.
• Vercel — hosting of this website.
• Meta (WhatsApp) — messages and photograph delivery.
• Resend — delivery of the emails we send you. Our sending region is in the EU.
• Our accountant, and the tax authorities, for invoicing and fiscal records.
• Where you booked through a travel agent or an online marketplace, that company, for that booking.

We do not sell your data, and we do not share it with anyone for their own marketing.

Data leaving Europe

Some of those providers are based outside the European Economic Area or use infrastructure that is. Where that happens, the transfer is covered by a European Commission adequacy decision or by Standard Contractual Clauses. You can ask us which applies to a given provider.

How long we keep it

• Invoices and accounting records — ten years, because Italian tax law requires it.
• Booking records — for the season and a reasonable period afterwards, in case of a dispute.
• Health information you gave us for safety — deleted after the departure.
• Photographs published with your consent — until you withdraw it.
• WhatsApp conversations — as long as they are useful, then deleted.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on consent, you can withdraw it at any time without affecting what we did before.

Write to info@elysiumseaexperience.com. We answer within one month. There is no charge, and you do not need to give a reason.

We make no automated decisions about you and we do not profile you.

If you are not satisfied

You have the right to complain to the Italian data protection authority — Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, garanteprivacy.it — or to the authority where you live. We would appreciate the chance to put it right first.

Changes to this notice

If we change how we use personal data, we will update this page and the date at the top. If the change is significant and we hold your address, we will tell you directly.