Privacy Policy

Last updated: 23/04/2026

This notice describes how personal data of users visiting kitesurfstagnoneitaly.com (the "Site") or interacting with PierSchool's services are processed, pursuant to Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended.

1. Data Controller

The Data Controller is a.s.d Pierschool, registered office at via giovanni caboto 23 Tarquinia, VAT/Tax ID 90124790560 ("PierSchool").

2. Categories of data processed

  • Contact and identity data: first name, second name, last name, email, phone number, date and place of birth, address, city, ZIP code, Italian tax code — provided through the booking form or direct contact.
  • Course-related data: selected course (kite, wing foil, windsurf, rental) and chosen period.
  • Communication content: messages exchanged via email, WhatsApp, Instagram or other channels.
  • Technical/navigation data: IP address, user agent, date/time, visited pages — collected by the hosting provider (Cloudflare) for the time strictly necessary to operate and secure the Site.

The Site does not collect special categories of data (art. 9 GDPR). Please refrain from including such data in forms or communications unless expressly requested by us.

3. Purposes and legal bases

Purpose Legal basis
Handling information requests and course bookings Art. 6.1.b GDPR — pre-contractual and contractual measures
Providing lessons and administrative management Art. 6.1.b GDPR — contract
Tax and accounting compliance Art. 6.1.c GDPR — legal obligation
Site security and abuse prevention Art. 6.1.f GDPR — legitimate interest
Legal defence Art. 6.1.f GDPR — legitimate interest

4. How data is collected — booking form

The booking form on the Site does not transmit data to a server operated by PierSchool: upon clicking "Send" the entered data is pre-filled into a WhatsApp message that is then transmitted by the user through their own WhatsApp application. Data transfer therefore occurs through the infrastructure of WhatsApp Ireland Ltd. (Meta group) under its relevant privacy policy. PierSchool receives and processes the data only after the message is effectively sent by the user.

5. Recipients of the data

Data may be disclosed to the following parties, appointed as Data Processors under art. 28 GDPR where applicable:

  • Cloudflare, Inc. — hosting, CDN and security provider for the Site;
  • WhatsApp Ireland Ltd. / Meta Platforms Ireland Ltd. — messaging service used for communications and the booking form;
  • Email service provider hosting the info@kitesurfstagnoneitaly.com mailbox;
  • Appointed tax, accounting and legal advisors, within the limits of legal obligations;
  • Public authorities in case of legal obligations or justified requests.

Data is not disseminated and is not sold to third parties for marketing purposes.

6. Transfers outside the EU

Some providers (Cloudflare, Meta/WhatsApp) may process data in countries outside the European Economic Area, primarily the United States. Such transfers rely on appropriate safeguards under arts. 44 et seq. GDPR, particularly Standard Contractual Clauses adopted by the European Commission and/or the EU-US Data Privacy Framework.

7. Data retention

  • Contact data and information requests: up to 24 months from the last contact, unless converted into a contractual relationship.
  • Contractual and tax data: 10 years from the end of the relationship, as required by civil and tax law.
  • Technical/navigation logs: for the time strictly necessary for Site security (as a rule, no longer than 12 months).

8. Cookies and similar technologies

The Site does not use profiling cookies nor third-party analytics tools. Strictly necessary technical cookies or similar technologies may be used for Site operation and security (e.g. Cloudflare anti-bot mitigation). Such cookies do not require consent under art. 122 of the Italian Privacy Code. Should non-technical cookies be introduced in the future, a dedicated consent banner will be displayed.

9. Your rights

Under arts. 15-22 GDPR you have the right to:

  • access your data and obtain a copy;
  • request rectification or update;
  • request erasure ("right to be forgotten");
  • obtain restriction of processing;
  • exercise the right to data portability;
  • object to processing based on legitimate interest;
  • withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of the prior processing.

To exercise your rights you can write to info@kitesurfstagnoneitaly.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the supervisory authority of your EU country of residence.

10. Provision of data

Providing data is voluntary; however, failure to provide data marked as required prevents PierSchool from processing information requests or bookings, and consequently from delivering the service.

11. Automated decision-making

The Controller does not carry out automated decision-making, including profiling, under art. 22 GDPR.

12. Changes to this notice

This notice may be updated following regulatory or service changes. The current version is always published on this page, with the last-updated date indicated at the top.

Chat with us on WhatsApp