Data controller

The data controller is Villa Bocchetto Srl, Località Bocchetto 1, 57036 Porto Azzurro (LI), Italy, VAT no. IT01662190493. For privacy enquiries, contact info@abcelba.com.

Enquiries, enrolment and correspondence

When you submit an enquiry or enrolment form, we process the contact details, course and accommodation preferences and message you provide in order to answer your enquiry, check availability and, where applicable, take steps before entering into or performing a contract. The legal basis is Article 6(1)(b) GDPR.

Form data is transmitted over an encrypted connection to the form system on wp.abcelba.com hosted at SiteGround and forwarded by email to info@abcelba.com. The existing WordPress system may log outgoing emails, including recipient, message content and technical delivery information. To prevent abuse and duplicate submissions, the form endpoint temporarily processes technical counters and pseudonymised verification values. This processing is based on Article 6(1)(f) GDPR; our legitimate interest is the security and reliable operation of the forms.

Retention

We keep personal data only for as long as necessary to handle your enquiry, perform a contract and manage subsequent correspondence. Where statutory retention obligations apply, the data required for those purposes is retained for the applicable legal period. Technical verification values are stored only temporarily. A submission reference may be stored briefly in your browser to display the confirmation page.

Cookies, CookieYes and consent

We use CookieYes to manage your choices for cookies and similar technologies. On your first visit you can accept, reject or customise non-essential categories. Your choice controls the consent signals sent through Google Tag Manager to the Google services used on this website. You can reopen the cookie settings and change your choice later.

Strictly necessary technologies are used where required for operation, security and features you request. Analytics and advertising technologies are used, where consent is required, on the basis of Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.

Google Tag Manager, Google Analytics 4 and Google Ads

We use Google Tag Manager to manage website tags. Through it we use, among other services, Google Analytics 4 for statistical analysis of website use and Google Ads for conversion measurement. Depending on your consent choices, information about page views, interactions, technical device/browser information and online identifiers may be processed.

For users in the European Economic Area, the United Kingdom and Switzerland, consent choices are communicated to Google through Consent Mode, including the signals analytics_storage, ad_storage, ad_user_data and ad_personalization. Retention within Google services depends on the settings configured for those services and their applicable policies.

Ferry booking through TraghettiPer

On the ferry page, the external booking area loads only after you choose to display ferry crossings and the discount. TraghettiPer then receives connection data such as your IP address and browser information. Any entries and booking are processed by that external provider. Closing the booking window removes the embedded area but does not recall data already transmitted.

YouTube videos

Some pages offer videos through YouTube. Preview images are loaded from our own web server. The external YouTube player loads only when you choose “Watch video”. We use youtube-nocookie.com embedding in privacy-enhanced mode.

Loading and playing a video connects to Google/YouTube. Data including your IP address, browser and device information, the page visited and playback information may be processed. Privacy-enhanced mode does not mean that no data is transmitted to the provider. See Google’s privacy policy and the information about the YouTube player.

Other external services

When you open WhatsApp, your email application or another linked external website, that provider's privacy information also applies. The hosting provider processes technical connection and server data required to deliver the website securely.

Recipients and international transfers

Personal data may be shared, where necessary, with technical service providers supporting hosting, email delivery, forms, consent management, analytics or advertising measurement. Providers with headquarters or infrastructure outside the European Economic Area may process data in third countries; where this occurs, the safeguards provided by the relevant service under the GDPR apply.

Your rights

Subject to the applicable legal requirements, you have rights including access, rectification, erasure, restriction, data portability and objection. You may also withdraw consent at any time with effect for the future. To exercise your rights, email info@abcelba.com.

You also have the right to lodge a complaint with a data protection supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali.

Last updated

7 October 2026. We update this notice when the services we use or applicable requirements change.