Privacy and cookie notice

PRIVACY

1. Data controller and contact details

The data controller is Massimo Grippi – GRIPPI ASSOCIATI, VAT number 14592991005, with registered office at Via G. Verga 8, 00063 Campagnano di Roma (RM), Italy. The operational office is at Via Giosuè Carducci 10, 00187 Rome. For data protection enquiries and to exercise your rights, contact privacy@grippiassociati.com. For information about our services, contact consulting@grippiassociati.com.

2. Data processed, purposes and legal bases

• Operation and security. The server and technical service providers receive data needed to establish connections, such as IP address, date and time, requested page, server responses, browser and operating system. These data are used to deliver the website, handle errors and prevent misuse. The legal basis is the controller’s legitimate interest in operating and securing the service under Article 6(1)(f) GDPR; processing required by law is based on Article 6(1)(c).
• Contact enquiries. Emails, telephone calls and messages sent voluntarily involve the processing of contact details, names and information supplied to answer and handle the enquiry. The legal basis is taking steps at the individual’s request before entering into a contract, or performing a contract, under Article 6(1)(b); other enquiries are handled on the basis of the legitimate interest in responding, under Article 6(1)(f). These data are not automatically used for marketing.
• Statistics using Google Analytics 4 (GA4). Only after consent does the website send Google information about pages visited, usage events, visit sources, devices, browsers and pseudonymous identifiers. The IP address is necessary to connect to the service; according to Google’s documentation, GA4 does not log or store it as such. These measures do not make all processed data anonymous. The purpose is to measure traffic and improve the website; the legal basis is consent under Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code.
• Optional external services. The Google Maps popup and any embedded YouTube videos connect to the provider only after you activate the relevant control. This choice applies to the individual item, is separate from statistics, and permits the transmission of data needed to provide the service, as explained before activation.

Essential technical data are necessary to browse the website. Providing contact data is optional, but we cannot respond without the necessary contact details. Refusing statistics and external services does not prevent access to content available directly on the website. The controller does not carry out automated decision-making producing legal or similarly significant effects within the meaning of Article 22 GDPR.

3. Statistics configuration

The website uses GA4 property G-F0E9276H9R, with the tag loaded only after consent. Before a choice is made, and after refusal, the website does not load the tag or send GA4 measurement requests, including requests without cookies. The code does not enable Google Signals or advertising personalisation, does not set a User-ID, and removes query strings and fragments from the page and referral URLs sent with the initial configuration.

Your choice applies solely to statistical measurement: it does not authorise personalised advertising or additional purposes. Events and information must not contain names, email addresses, messages or other directly identifying data.

4. Recipients and service providers

Data may be processed by the controller, authorised personnel and hosting, maintenance and support providers, within the limits of their duties and, where required, under agreements pursuant to Article 28 GDPR. Data may also be disclosed to advisers or authorities where necessary to meet legal obligations or protect rights.

GA4 is provided by Google under its data processing terms. The services may involve Google Ireland Limited and group companies, including Google LLC. See Google’s privacy information and Analytics data safeguards.

Some editorial content, images and links come from MED-Yachting and other websites belonging to the group or cited in articles. Loading external resources communicates the technical data needed for the connection to the server providing them. Links to WhatsApp, Google Maps, YouTube and other websites open services with their own privacy notices: consult the respective providers’ terms before using them. The website’s main fonts are hosted locally.

5. Transfers outside the European Economic Area

Using Google services and other providers may involve processing in countries outside the EEA, including the United States. The controller must rely on safeguards under Articles 44 et seq. GDPR: adequacy decisions, where applicable to the recipient and processing, or standard contractual clauses and any necessary supplementary measures. Google describes its mechanisms on its data transfer page. Cookie consent does not replace the obligations relating to international transfers. Information about applicable safeguards may be requested from the privacy contact.

6. Retention

• Technical logs are retained for the time needed for operation, security and incident investigation, taking account of providers’ retention periods and any legal obligations. The controller does not use them as a substitute for consent to statistics.
• Communications are retained to handle the enquiry and any subsequent relationship; afterwards, only where necessary to comply with legal obligations or protect rights, for the applicable periods.
• GA4 user-level and event-level data are intended to be retained for 2 months, without resetting the period when new activity occurs. Aggregated service reports may have different retention periods; cookie expiry is separate from the retention of data already collected.
• Your cookie choice is remembered for 6 months. GA4 cookies set by the website’s code have a configured maximum lifetime of 180 days, without automatically extending their expiry on every visit, subject to any shorter limits imposed by the browser.

7. Rights and complaints

You may request access, rectification, erasure, restriction and, where applicable, portability of your data; you may object to processing based on legitimate interests and withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand. To exercise your rights, write to privacy@grippiassociati.com; for statistics, you can also use the Manage cookies button.

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) and to seek a remedy before the competent courts.

COOKIES

1. What they are and how we classify them

Cookies are small pieces of data stored in your browser. The website also uses browser local storage (localStorage) to remember your choice. We classify tools by purpose: technical tools, needed for the service or preferences; statistical tools, which are optional and require consent; and external services, which can be activated separately when requested. A tool’s name or origin alone does not make it technical.

2. Technical and statistical tools

The website does not treat GA4 as a technical tool exempt from consent. The configuration does not provide for the controller’s advertising or remarketing cookies. This table describes tools provided for by the code; any changes to services require the notice and available choices to be updated.

3. Accepting, rejecting and withdrawing consent

In the banner, Accept authorises GA4 statistics only. Reject or the X leaves only technical tools active. No choice is inferred from scrolling or continuing to browse. Reject and Accept have equal visual prominence.

You can review or withdraw your choice using Manage cookies, always available on pages using this system, or the button below. To withdraw an earlier consent, select Reject. The website stops measurement, deletes Analytics cookies accessible on its own domain and reloads the page if the tag was already active. To request deletion of data already collected, use the rights described in the PRIVACY section.

Manage cookies

Your choice is remembered for 6 months, without displaying the banner on every visit. You may be asked again when it expires, when conditions change substantially, or when the browser can no longer recognise your choice. If local storage is unavailable, the decision applies to the current page only; on subsequent visits, GA4 remains blocked until you accept again.

4. Google Maps, YouTube and other external services

The Google Maps link opens a local popup: no map is loaded automatically. After a short explanation, Load Google map activates the connection to Google Maps to display the address. Google receives technical connection data and may use its own cookies or storage under its terms and your browser settings. Activation is separate from statistics: you can use the map even if you rejected GA4. Closing the popup removes the map player; activation is requested again when it is reopened. You can also open the service directly in an external tab.

Any embedded videos remain blocked until you select Activate this YouTube video. Activation is separate from GA4 consent and applies to the individual video on the current page. The player uses youtube-nocookie.com, but activation and interaction still involve connections to Google/YouTube. The provider may use its own cookies or storage, with names and lifetimes depending on the service, browser and any signed-in account: see Google’s cookie information.

Manage cookies lets you deactivate external services that have been loaded: the page reloads and maps and players return to their blocked state. This does not delete any provider cookies on external domains, which you can manage through your browser or account. Maps and videos opened through ordinary external links follow the settings of the destination website.

5. Browser settings and updates

You can delete or block cookies and website data through your browser settings. Deleting your saved choice makes the banner appear again; blocking certain technical tools may limit requested features. Material changes to tools and purposes will be reflected here with a new date and, where necessary, a new consent request.

Reference: Italian Data Protection Authority guidelines on cookies and other tracking tools, 10 June 2021.