PRIVACY POLICY

Last updated: 6 August 2026

This Privacy Policy describes how the Destination Naples website processes users’ personal data, pursuant to Regulation (EU) 2016/679, GDPR.

1. Data Controller

Bay of Naples Finest APS
Corso Vittorio Emanuele 121
80121 – Naples, Italie

E-mail : info@naplesfinest.org

2. Personal data processed

The website does not provide user registration, personal accounts, online bookings, online payments or active newsletter services.
Through the contact forms available on the website, the data voluntarily entered by the user may be collected, such as first name, last name, company, address, country, email address and the content of the message.
The website may also process technical browsing data necessary for the operation and security of the website, such as IP address, browser type, log data and technical information relating to the connection.

3. Purposes of processing

Personal data sent through the contact forms are used exclusively to:

– reply to requests submitted by the user;
– provide information about the services, activities and partners of Destination Naples;
– manage any subsequent communications connected to the request received;
– ensure the proper technical functioning and security of the website.

The data are not used for profiling, automated marketing or newsletter delivery. At present, no newsletter service is active.

4. Legal basis of processing

The processing of data sent through the contact forms is based on the need to reply to a request made by the user.
The processing of technical browsing data is based on the legitimate interest of the Data Controller in ensuring the operation, security and maintenance of the website.

5. Processing methods

Data are processed using appropriate IT and organisational tools, in accordance with the principles of lawfulness, fairness, transparency, minimisation and security.
Access to the data is limited to authorised persons and to technical service providers that may be necessary for the operation of the website and related services.

6. Communication of data

Personal data are not publicly disclosed.
Data may be communicated to technical service providers, hosting providers, consultants or authorised persons who cooperate with the Data Controller for the management of the website and of the communications received.
Where necessary in order to reply to a specific request from the user, the data may be communicated to partners involved in the requested service or activity.

7. Data retention

Data sent through the contact forms are kept for the time necessary to manage the request and any subsequent communications.
In the absence of further need, the data will be kept for no longer than 24 months from the last relevant communication, unless legal obligations or the need to protect the rights of the Data Controller require a longer retention period.
Technical data and website logs are kept for the time strictly necessary for the operation, security and technical maintenance of the website.

8. Cookies and third-party services

The website may use technical cookies or similar tools necessary for the proper functioning of the pages and essential services.
Technical cookies do not require the user’s prior consent.
The website may also contain links, embedded content or connections to third-party services, such as maps, videos, social networks or partners’ websites. Such services may process personal data according to their respective privacy policies.
If the website uses non-technical cookies, non-anonymised analytics tools, tracking tools, embedded content or third-party services requiring consent, such tools must be managed in accordance with the applicable legislation.
The website does not carry out direct profiling activities for advertising or marketing purposes.

9. Links to external websites

The website may contain links to third-party websites, partners or social networks. The Data Controller is not responsible for the data processing carried out by such external websites, which are governed by their respective privacy policies.

10. Rights of the data subject

Within the limits provided by the applicable legislation, the user may exercise the following rights:

– right of access to personal data;
– right to rectification;
– right to erasure;
– right to restriction of processing;
– right to object to processing;
– right to data portability, where applicable;
– right to withdraw consent, where the processing is based on consent.

To exercise these rights, the user may write to:

info@naplesfinest.org

11. Complaint to the supervisory authority

The user has the right to lodge a complaint with the Italian Data Protection Authority, according to the procedures provided for by the applicable legislation.

12. Changes to this Privacy Policy

This Privacy Policy may be updated in the event of changes to the website, the services offered or the applicable legislation.