Privacy Policy

1. Data controller

The data controller is:

• Lario Fly Fishing di Rossetti Franco Mauro
• VAT 04299610131
• Operating base: Lierna, Lake Como (LC), Italy
• Email: larioflyfishing@gmail.com
• Phone: +39 348 886 6199

2. Types of data collected

The site collects the following categories of data:

• Navigation data: IP address, browser type, operating system, pages visited, date and time of access, referrer. Collected automatically by the hosting provider for IT security purposes and aggregate statistics.
• Analytics data: subject to explicit consent, anonymized navigation data collected via Google Analytics 4 (see Cookie Policy).
• Contact data: no contact data is collected directly by the site. Communications take place via external channels (WhatsApp, email, phone) that the user can choose to use.

3. Purposes of processing

Data is processed for the following purposes:

• Ensure the proper functioning of the website and IT security.
• Analyze in aggregate and anonymous form how the site is used to improve its content and usability (only subject to consent).
• Respond to contact requests sent spontaneously by the user via WhatsApp, email or phone.

4. Legal basis of processing

• Technical navigation data: legitimate interest of the controller (Art. 6.1.f GDPR) in the security of the site.
• Analytics data and third-party cookies: explicit consent of the user (Art. 6.1.a GDPR), provided via the cookie banner.
• User-initiated communications: execution of pre-contractual measures (Art. 6.1.b GDPR).

5. Retention period

Data is retained for the time strictly necessary for the purposes for which it is collected:

• Server access logs: 30 days (managed by hosting provider Cloudflare).
• Aggregate analytics data: 14 months (standard Google Analytics 4 configuration).
• Emails and WhatsApp messages sent by the user: retained for the time necessary to handle the request and up to 24 months for administrative and tax purposes.

6. Data recipients

Data may be processed by third parties acting as data processors on behalf of the controller:

• Cloudflare, Inc. (site hosting and CDN, USA, EU-US Data Privacy Framework certified).
• Google LLC (Google Analytics 4 and Google Maps, USA, EU-US Data Privacy Framework certified), only with explicit consent.
• Meta Platforms Ireland Ltd. (WhatsApp), if the user decides to use the WhatsApp channel for communications.

No data is transferred to third parties for direct marketing purposes.

7. Transfer of data outside the EU

Some recipients (Cloudflare, Google) are based in the United States. Data transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission and/or the EU-US Data Privacy Framework certification, ensuring an adequate level of protection according to GDPR standards.

8. Rights of the data subject

At any time the user may exercise the rights provided by Articles 15-22 of the GDPR:

• Access to their personal data (Art. 15).
• Rectification of inaccurate or incomplete data (Art. 16).
• Erasure of data (Art. 17, "right to be forgotten").
• Restriction of processing (Art. 18).
• Data portability (Art. 20).
• Objection to processing (Art. 21).
• Withdrawal of consent given for analytics or marketing purposes, at any time, by acting on the cookie banner or contacting the controller.

To exercise these rights, simply write to larioflyfishing@gmail.com.

9. Complaint to the Supervisory Authority

The user has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) should they consider that the processing of their data violates the GDPR.

10. Cookies

For detailed information on the use of cookies and navigation data, please refer to the Cookie Policy.

11. Changes to this Privacy Policy

This Privacy Policy may be updated at any time. The current version is always available on this page and the date of the last update is indicated at the top of the document.