Privacy policy

Nautica Servizi Terra d'Otranto — Via Roma snc, 73020 Palmariggi (LE), Italy. VAT no. 04017440753. RIB tour activity on this site under the NTO Boat Tours brand; operational boarding point: Port of Otranto, 73028 Otranto (LE).

For any request regarding personal data processing you may email info@ntoboattours.it or call +39 350 582 9763.

The site has no contact forms, restricted areas, account registration or its own payment systems: we do not request or collect personal data through forms.

Server logs (visitor IP address, browser, date and time of request) may be recorded for technical and security purposes only. For cookies and similar technologies — including those activated with your consent — see our Cookie policy.

When you choose to contact us using the details published on the Contact page (phone, email or WhatsApp), we receive the data you provide: phone number, email address, message content and any attachments. These are communication channels outside the website: the site does not intercept or store them.

Such data is processed solely to respond to your request (tour information, availability, booking or assistance). The legal basis is performance of pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR).

For some tours online booking is handled via widgets and scripts loaded from cdn.holidoit.com (Holidoit S.r.l.). When you use the booking flow, the data you enter (name, contact details, tour date, number of passengers, preferences) is processed by Holidoit as processor or independent controller under its own privacy notice.

The NTO Boat Tours website does not store checkout data locally: it displays and transmits it only within the Holidoit service used to manage calendar, availability and the 50% online deposit payment.

Holidoit privacy and cookie policy.

We rely on the following external providers to operate the site; they may process technical or browsing data only to the extent strictly necessary to deliver the service:

• Website hosting provider, to publish pages and record technical logs for security purposes.
• Holidoit S.r.l. (cdn.holidoit.com), for the online booking widget, availability calendar and checkout flow.
• CARTO (CARTO DB Inc.), for the "Map" tile layer on the Contact page, based on OpenStreetMap data. Tiles are served without setting cookies and the provider may temporarily log the visitor's IP address for technical purposes only.
• Esri Inc., for the "Satellite" tile layer on the Contact page. Tiles are served without setting cookies and the provider may temporarily log the visitor's IP address for technical purposes only.
• Google LLC (googletagmanager.com), for Google Tag Manager (container GTM-N295S88V) and the measurement/advertising tags configured therein (e.g. Google Ads), subject to your consent for targeting and/or measurement purposes. Processing is governed by Google's privacy policy and Google Consent Mode v2.
• Google LLC, when the user clicks the "Directions" button on the map or another link to Google Maps: a new browser tab opens and the user leaves our site to access Google's service, governed by Google's privacy policy.
• iubenda S.r.l. (iubenda.com, cs.iubenda.com, cdn.iubenda.com), for the cookie consent banner, storing preferences expressed and prior blocking of third-party scripts until consent (autoblocking).

Server technical logs are kept for the time strictly necessary for site security, then rotated or deleted by the hosting provider.

Messages received via direct channels (email, phone, WhatsApp) are kept for the time needed to handle the request and, subsequently, for a limited period for documentation and accounting, then deleted. You may request early deletion at any time.

Booking flow data processed by Holidoit is retained according to the periods and methods stated in Holidoit's privacy notice.

You may exercise at any time the rights under Arts. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection, withdrawal of consent.

To do so, email info@ntoboattours.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

This notice may be updated to reflect regulatory, technical or organisational changes. The current version is always available on this page.