This notice explains, as clearly as we can, which information Yachthis collects about the people who visit the site, subscribe to the newsletter or write to us, why we collect it and how we use it.

Short notice

In compliance with the European Regulation on the protection of personal data (Regulation (EU) 2016/679, “GDPR”) and with the Italian Personal Data Protection Code (Legislative Decree 196/2003 as amended), this site respects and protects the privacy of its visitors and makes every reasonable effort to collect as little personal data as possible.

Yachthis does not show advertising, does not use profiling or marketing cookies and does not sell or rent personal data. Reading the stories requires no personal data at all.

Data controller

The data controller is [Yachthis company name], [Registered office address], VAT [VAT number].

For any question about your data, or to exercise your rights, write to [email protected] or use the contact page.

Legal basis for processing

  • Consent (Art. 6(1)(a) GDPR): when you subscribe to the newsletter or send a message through the contact form. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out before.
  • Steps taken at your request and the reader account (Art. 6(1)(b) GDPR): to answer the messages you send us and to provide the account you sign in with.
  • Legitimate interest (Art. 6(1)(f) GDPR): to keep the site secure, prevent spam and abuse, and measure, in aggregate form, how the newsletter is read. You can object to this processing at any time (see “Your rights”).
  • Legal obligation (Art. 6(1)(c) GDPR): when the law or an authority requires us to keep or disclose data.

Purposes of processing

  • Security: the server records technical data, the IP address included, to protect the site and its readers from attacks, spam and fraud. This data is never used to identify or profile readers.
  • Answering you: the data you send through the contact form is used only to reply to your message and to follow up on your request.
  • Newsletter: your email address is used to send you the Yachthis newsletter. We record whether a newsletter is opened and which links are clicked, to understand which stories interest our readers; every email contains a link to unsubscribe.
  • Reader account: if you sign in, we use your email address to send you the sign-in links and your name to show next to your responses. Your claps, reposts and saved stories are recorded to show them to you and to count them on each story.
  • Search: the words typed in the site search are processed on our own servers to show the results and are not linked to your identity.

Data we collect

Data collected automatically. While you browse, the web server may record in its log files: IP address, browser type and settings, device parameters, date and time of the visit, the page you came from and the pages you visit. This data is used for security and, only in aggregate form, to check that the site works correctly.

Data you provide.

  • Contact form: name, email address, phone number (optional), subject and message.
  • Reader account: email address, name, the date of registration and of the last sign-in, your responses (published with your name), claps, reposts and saved stories.
  • Newsletter: email address, the date of subscription and, for each newsletter you receive, whether it was opened and which links were clicked, with the IP address and browser recorded at that moment.

Please do not send special categories of personal data (such as health data) through the contact form.

Where the data is processed

The data is processed at the offices of the data controller and on the servers of the hosting provider ([Hosting provider], European Union), within the European Economic Area.

How long we keep the data

  • Server logs used for security: 180 days.
  • Messages sent through the contact form: up to 24 months after the last exchange, unless a longer period is required to protect our rights.
  • Newsletter subscription: until you unsubscribe. After that, your address is kept only on our suppression list, so that we never write to you again.
  • Newsletter opens and clicks: 24 months.
  • Reader account: until you ask us to delete it; responses stay published until you or the editors remove them.

When the period expires, the data is deleted or made anonymous.

Who we share the data with

We do not sell or rent personal data. It may be processed, on our behalf and only as far as needed for their service, by:

  • the hosting provider and the technical partners who maintain the site;
  • the provider that delivers our emails (newsletter and replies);
  • Google, for the reCAPTCHA service that protects the contact form from spam, and for YouTube when you choose to play a video embedded in a story.

Data may also be disclosed to judicial or public authorities when the law requires it.

Transfers outside the European Union

Some of the services listed above (Google reCAPTCHA and YouTube) are provided by companies based in the United States. Transfers take place on the basis of the EU-U.S. Data Privacy Framework adequacy decision of the European Commission and, where applicable, of the Standard Contractual Clauses approved by the Commission.

Security measures

We process data lawfully and fairly, with technical and organisational measures that prevent unauthorised access, disclosure, alteration or destruction. Every page of the site is served over an encrypted connection (HTTPS/TLS), and access to the data is limited to the people who need it for the purposes above.

Cookies

Yachthis uses only the cookies strictly needed for the site to work and does not use profiling or marketing cookies. All the details are in our Cookie Policy.

Your rights

Under Articles 15–22 of the GDPR you can, at any time:

  • ask whether we hold data about you and get a copy of it (right of access);
  • have inaccurate data corrected or incomplete data completed (rectification);
  • have your data erased (right to be forgotten), within the limits set by the law;
  • ask us to restrict the processing;
  • receive the data you gave us in a structured, commonly used and machine-readable format (portability);
  • object to processing based on our legitimate interest;
  • withdraw your consent, for instance by unsubscribing from the newsletter through the link in every email;
  • lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it).

To exercise your rights, write to [email protected].

Changes to this notice

We may update this notice when the site or the law changes. The date at the top of the page tells when it was last revised.