Privacy Policy

1. Data controller

The data controller is [RAGIONE SOCIALE], with registered office at [INDIRIZZO], VAT number [P.IVA]. For privacy-related requests, email info@sailify.it or [EMAIL PRIVACY, SE DIVERSA].

2. Data we collect

When you complete the calendar, we collect your name, email, international phone number, optional company, fleet and notes, and any selected date and time. Once you enter a valid email or phone number, we save the incomplete request as a draft before you press Confirm. The notice appears above the fields; completing the form is not consent to marketing.

The landing page, booking path and any campaign parameters in the link, such as UTM parameters, are associated with the appointment. This information remains in page memory while you browse and is sent with the booking; this function does not store cookies or persistent identifiers.

The appointment is stored in DynamoDB and sent by email to the Sailify team and the address provided. The infrastructure may also record technical data strictly necessary for security and operation, such as IP address, date and time, user agent and error logs. We do not ask for special categories of personal data.

3. Purposes and lawful basis

• We save incomplete call requests and send confirmation and operational updates, including the Google Meet link. If you leave an email without confirming, the team may send one manual reminder to resume booking, not marketing. The controller must validate the lawful basis for unconfirmed drafts and reminders against the actual context and your reasonable expectations.
• Confirming and arranging the demo and preparing a proposal consistent with the described workflow: steps requested by the data subject before entering into a contract, Article 6(1)(b) GDPR.
• Protecting the website from abuse, fraud and automated submissions: the controller's legitimate interest, Article 6(1)(f) GDPR.
• Complying with legal obligations or requests from authorities: Article 6(1)(c) GDPR.

4. Providing personal data

Date, time, name, email, international phone number and acknowledgement of this notice are required to confirm. A draft only requires a valid email or phone number. The private link in your confirmation email lets you update your name, phone, company, fleet and notes; do not share that link.

5. Processing, recipients and processors

We process data using digital tools and organisational measures proportionate to the risk. Data may be accessed only by authorised people and suppliers required to provide the website, email, hosting and technical traffic analysis, appointed as processors where required.

[ELENCO FORNITORI E RESPONSABILI — completare con hosting AWS Amplify, provider email e servizio analytics effettivamente attivato, verificando sedi, accordi e misure per eventuali trasferimenti extra SEE.]

6. Retention

Drafts expire 30 days after the first save, without renewal on edits. After expiry the application cannot retrieve them or send reminders. DynamoDB TTL removes them according to service timing; backups follow their respective retention cycles.

Demo bookings and related correspondence are retained for [PERIODO DI CONSERVAZIONE — proposta da validare: 24 mesi], unless a different period is required to perform a contract, comply with a legal obligation or establish, exercise or defend a legal claim. Technical logs are retained only for as long as strictly necessary for security.

7. Transfers outside the European Economic Area

If a supplier processes data outside the EEA, the controller verifies the existence of an adequacy decision or appropriate safeguards, such as standard contractual clauses, and adopts any supplementary measures required under the GDPR. Details will be completed after the final suppliers have been selected.

8. Your rights

You may request access, rectification, erasure, restriction, portability and objection where provided by Articles 15–22 GDPR. You may also lodge a complaint with the Italian Data Protection Authority. To exercise your rights, email info@sailify.it; we may ask for information necessary to verify your identity.

9. Children

The website and demo booking are intended for professionals and organisations. We do not knowingly collect children's data through the calendar.

10. Updates

We may update this notice when the website, suppliers or applicable rules change. The date shown above identifies the current version.