Privacy and cookies policy

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

Pursuant to Article 13 of Italian Legislative Decree 196/2003 and Article 13 of EU Regulation No. 2016/679

Centro Canoa Rafting Monrosa, with registered office at Via Roma, 1 - 13020 Balmuccia (VC) Italy - Tax Code and VAT No. 01922530025 (hereinafter, the “Controller”), as data controller, hereby informs you pursuant to Article 13 of Legislative Decree No. 196 of 30.6.2003 (hereinafter, the “Privacy Code”) and Article 13 of EU Regulation 2016/679 that your data will be processed in the manner and for the purposes set out below:

1. Subject of the Processing

The Controller processes personal and identification data (for example, first name, surname, company name, address, telephone number, e-mail, bank and payment details) – hereinafter, “personal data” or simply “data” – provided by you when entering into contracts for the Controller’s services, as well as data voluntarily provided by the data subject through direct contact (for example by telephone, e-mail or messaging systems). In accordance with the applicable legislation, such processing will be based on the principles of fairness, lawfulness, transparency and protection of your privacy and rights.

2. Purposes of the Processing

Your personal data are required for purposes strictly related and instrumental to the management of business relationships, for administrative and accounting purposes, and for purposes related to legal obligations.

In particular, we inform you that your personal data are processed:

A) without your express consent, as they are necessary for the performance of pre-contractual and contractual obligations or to comply with legal obligations (Art. 6(1)(b) and (c) of EU Regulation 2016/679), for the following Service Purposes:

• entering into contracts for the Controller’s services;
• issuing receipts and/or invoices;
• fulfilling pre-contractual, contractual and tax obligations arising from existing relationships with you;
• fulfilling obligations laid down by law, regulation, EU legislation or an order of an Authority (for example, in the field of anti-money laundering);
• exercising the Controller’s rights, for example the right of defence in court;
• analysing the effectiveness of online advertising campaigns and improving the services offered, including through tools provided by third parties such as Google, in compliance with applicable legislation and, where required, subject to the user’s consent;

B) Only with your specific and separate consent (Arts. 23 and 130 of the Privacy Code and Art. 7 GDPR), for the following Marketing Purposes:

• sending you, by e-mail, post and/or SMS and/or telephone contact, newsletters, commercial communications and/or advertising material on products or services offered by the Controller, and surveying customer satisfaction with the quality of the services;
• sending you, by e-mail, post and/or SMS and/or telephone contact, commercial and/or promotional communications from third parties (for example, business partners).

Please note that if you are already our customer, we may send you commercial communications concerning services and products of the Controller similar to those you have already used, unless you object (Art. 130(4) of the Privacy Code).

In any case, if the data are provided via the web, we will ask for your consent by means of a checkbox/click confirming both that you have read this notice and that you consent to the processing.

3. Methods of Processing

Your personal data are processed by means of the operations listed in Art. 4 of the Privacy Code and Art. 4(2) GDPR, namely: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data. Your personal data are processed both on paper and electronically and/or by automated means.

The Controller will process personal data for the time necessary to fulfil the above purposes; processing may in any case be interrupted at any time, in the manner described in point 9 of this notice.

The Controller’s website uses cookies and similar technologies to ensure the proper functioning of its pages, collect statistical data and, subject to the user’s consent, carry out marketing activities. For further information, please refer to the Cookie Policy available on the website.

4. Access to Data

Your data may be made accessible for the purposes referred to in Art. 2.A) and 2.B):

• to employees and collaborators of the Controller in Italy and abroad, in their capacity as persons in charge of processing and/or internal processors and/or system administrators;
• to third-party companies or other entities (for example, credit institutions, professional firms, consultants, mailing companies, etc.) that carry out outsourced activities on behalf of the Controller, in their capacity as processors.

5. Communication of Data

Without the need for express consent (pursuant to Art. 24(a), (b), (d) of the Privacy Code and Art. 6(b) and (c) GDPR), the Controller may communicate your data for the purposes referred to in Art. 2.A) to judicial authorities, as well as to those parties to whom communication is mandatory by law for the fulfilment of said purposes. Such parties will process the data as independent data controllers.

Your data will not be disseminated.

6. Data Retention Period

Your personal data will be retained for the time strictly necessary to pursue the purposes set out in this notice and, in particular:

• for administrative, accounting and tax purposes, for a period not exceeding 10 years, as required by applicable legislation;
• for contractual purposes, for the entire duration of the relationship and thereafter for the time necessary to protect the Controller’s rights;
• for marketing purposes, until consent is withdrawn by the data subject.

7. Data Transfer

Personal data entered into the company’s online booking system and the e-mail and newsletter service are stored on servers located in the United Kingdom, and therefore outside the European Union. It is understood in any case that the Controller, should it become necessary, may move the servers to the territory of the European Union.

Data are transferred in compliance with applicable legal provisions and on the basis of the adequacy decision adopted by the European Commission for the United Kingdom.

8. Nature of the Provision of Data and Consequences of Refusal

The provision of data for the purposes referred to in Art. 2.A) is mandatory. Without such data, we will not be able to provide you with the Services referred to in Art. 2.A).

The provision of data for the purposes referred to in Art. 2.B) is optional. You may therefore decide not to provide any data or to subsequently refuse the processing of data already provided: in this case, you will not receive newsletters, commercial communications or advertising material relating to the Services offered by the Controller. You will nevertheless remain entitled to the Services referred to in Art. 2.A).

9. Rights of the Data Subject

As a data subject, you have the rights set out in Art. 7 of the Privacy Code and Art. 15 GDPR, namely the right to:

• obtain confirmation of whether or not personal data concerning you exist, even if not yet recorded, and their communication in an intelligible form;
• obtain information on: a) the source of the personal data; b) the purposes and methods of the processing; c) the logic applied in the case of processing carried out by electronic means; d) the identification details of the controller, the processors and the representative designated pursuant to Art. 5(2) of the Privacy Code and Art. 3(1) GDPR; e) the parties or categories of parties to whom the personal data may be communicated or who may become aware of them as a designated representative in the territory of the State, as processors or as persons in charge of processing;
• obtain: a) the updating, rectification or, where you have an interest, the integration of the data; b) the erasure, anonymisation or blocking of data processed unlawfully;
• object, in whole or in part, to the processing of personal data for direct marketing purposes.

Where applicable, you also have the rights set out in Arts. 16-21 GDPR, as well as the right to lodge a complaint with the Italian Data Protection Authority (Garante).

10. How to Exercise Your Rights

You may exercise your rights at any time by sending:

• a registered letter with return receipt to Centro Canoa Rafting Monrosa, Via Roma, 1 - 13020 Balmuccia (VC) Italy
• an e-mail to This email address is being protected from spambots. You need JavaScript enabled to view it. or This email address is being protected from spambots. You need JavaScript enabled to view it.

11. Controller, Processor and Persons in Charge of Processing

The Data Controller and internal data processor is Paolo Longoni, legal representative of the company.

The updated list of external processors, where appointed, and of persons in charge of processing is kept at the Controller’s registered office.

Last update

This notice was last updated on 3 April 2026

Cookie Policy

This website (monrosarafting.it) uses cookies and similar technologies to ensure the proper functioning of its pages, improve the browsing experience and, subject to the user’s consent, collect statistical and marketing data.

What cookies are

Cookies are small text files that the websites visited send to the user’s device (computer, tablet, smartphone), where they are stored and then sent back to the same websites on the next visit.

Types of cookies used

Technical cookies

These cookies are essential for the proper functioning of the website and do not require the user’s consent.
They include:

• session cookies
• navigation cookies
• cookies for managing preferences (e.g. language)

The website is built with Joomla, which uses technical cookies to:

• maintain the user session
• ensure the security and functionality of the system

Analytics cookies (anonymised Google Analytics)

The website uses Google Analytics (GA4) with IP address anonymisation to collect aggregated information on the use of the website (e.g. pages visited, time spent on the site, traffic sources).

These cookies:

• do not allow the direct identification of the user
• are used for statistical purposes only

They are activated through Google Consent Mode, which adjusts the behaviour of the tags according to the preferences expressed by the user.

Marketing cookies (Google Ads)

Subject to the user’s consent, the website may use marketing cookies to:

• monitor the effectiveness of advertising campaigns
• show personalised ads

These cookies are managed by Google Ads and are only activated after explicit acceptance via the cookie banner.

Consent management

On the first visit to the website, a banner is displayed allowing the user to:

• accept all cookies
• reject non-essential cookies
• customise preferences

Preferences can be changed at any time via the banner or the tools available on the website.

Methods of processing

Data collected through cookies are processed in compliance with applicable legislation (EU Regulation 2016/679 - GDPR) and used exclusively for the purposes stated above.

Third-party cookies

The website uses third-party services that may install cookies:

• Google Analytics (Google LLC)
• Google Ads (Google LLC)

For more information:
https://policies.google.com/privacy
https://policies.google.com/technologies/cookies

How to disable cookies

Users can manage or disable cookies directly from their browser settings:

Chrome: https://support.google.com/chrome/answer/95647

Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop

Edge: https://support.microsoft.com/en-us/help/4027947

Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

Disabling technical cookies may affect the proper functioning of the website.

Data Controller

Piero Arcostanzo | Registered office: Via Roma 1, Balmuccia, 13020 VC VAT No. and Tax Code: 01922530025

email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Since the installation of Cookies and other tracking systems by third parties through the services used within this Application cannot be technically controlled by the Controller, any specific reference to Cookies and tracking systems installed by third parties is to be considered indicative. For complete information, please consult the privacy policies of any third-party services listed in this document.

Given the objective complexity of identifying cookie-based technologies and their very close integration with the functioning of the web, Users are invited to contact the Controller should they wish to receive any further information regarding the use of Cookies and any use thereof – for example by third parties – carried out through this website.