Privacy
Privacy notice
Notice under articles 13 and 14 of Regulation (EU) 2016/679.
Data controller
Karalis Charter di Congia Antonio, Molo Sant'Elmo, 09126 Cagliari (CA). P. IVA IT04154630927. Contact email: tonycongia@karalischarter.com.
Data collected
Name, email, phone, number of guests, any special occasion and notes. Payment card data never passes through our systems: it is handled directly by Stripe.
Allergies and intolerances: health data
Because food and drinks are included on board, we ask for allergies and intolerances at booking. This is health data (art. 9 GDPR) and we treat it with care: the legal basis is the explicit consent you give by filling in the field, the sole purpose is preparing a safe menu, and it is shared only with whoever prepares the food. Please write the minimum necessary: the allergen is enough, no diagnosis is needed. The data is deleted within 30 days of the trip, unless the law requires otherwise.
Purposes and legal basis
Data is processed to manage the booking and provide the service (performance of the contract), to meet tax, insurance and navigation-safety obligations (legal obligation) and, with separate consent, for marketing communications.
Recipients
Stripe Payments Europe Ltd. (payments), Resend (transactional email), Vercel Inc. (hosting), Neon (database, servers in the European Union), our accountant for tax purposes. All appointed as data processors.
Retention
Booking data and tax documents are kept for 10 years, as required by Italian tax law. Allergy and intolerance information is deleted within 30 days of the trip. Marketing data is kept until consent is withdrawn.
Your rights
You may request access, rectification, erasure, restriction and portability of your data, object to processing and withdraw consent at any time, by writing to the controller's email. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Cookies
The site uses only technical cookies needed for the booking flow and the admin area, plus a locally stored preference so the cookie notice is not shown again. No profiling, analytics or advertising cookies are used, so no prior consent is required. If measurement tools are added in future, they will be blocked until consent is given.
Draft to be completed with final company details and validated before publication.