1 Introduction
Abschnitt aktualisiert amThis notice is provided under article 122 of Italian legislative decree no. 196 of 30 June 2003 and the Guidelines of the Italian Data Protection Authority of 10 June 2021 on cookies and other tracking tools. The website uses only technical cookies and technical browser storage, strictly necessary to provide the services requested. It does not use third-party analytics tools, advertising or profiling cookies, and its pages, including the client panel, do not load content from third-party websites: fonts, images and videos reside on the Controller's server.
For the above reasons, the website does not display a banner requesting consent: the Authority's Guidelines provide that, where only technical cookies are used, this notice is sufficient.
2 What a cookie is
Abschnitt aktualisiert amA cookie is a short text file that the website stores in the user's browser in order to retain a piece of information. The same rules apply to browser storage (localStorage and sessionStorage), which the website uses so as not to lose the data of a form while it is being filled in; such storage is listed in the same table.
3 Cookies and storage used by the website
Abschnitt aktualisiert am| Name | Purpose | Duration | Set by |
|---|---|---|---|
| NEXT_LOCALE | Stores the language chosen by the user, so that it is not requested on every page | Until the browser is closed | Controller |
| thandosa_sessione | Maintains access to the staff private area; concerns only Thandosa's staff | At most 90 days | Controller |
| thandosa.preventivo | Keeps the quote draft while it is being filled in (dates, destination, water toys, contact details), so that it is not lost on changing page or reloading. It is browser storage, not transmitted to the Controller until submission | 24 hours from the last change; it is also deleted on submission or with the “Delete and start again” command | Controller |
| thandosa.preventivo.ritorno | Records, in the current tab only, that the user has left the quote to consult another page, so as to offer the “Back to the quote” command. It contains only a time | Until the tab is closed | Controller |
| thandosa.candidatura | Keeps the draft of the “Careers” application while it is being filled in (role, contact details, experience), excluding the CV. It is browser storage, not transmitted to the Controller until submission | 24 hours from the last change; it is also deleted on submission or with the “Delete and start again” command | Controller |
| thandosa_dispositivo | A random code recognising the browser from which requests and messages are sent (quote, support, chat, applications), in order to link them together and prevent abuse. It contains no personal data; together with the code the Controller keeps the device type, operating system, browser and language | 365 days | Controller |
| thandosa_chat | Keeps the conversation in the website chat active, so that messages are found again on changing page or returning later. It contains a signed token, not the messages | 365 days | Controller |
| thandosa_area | Maintains access to the client area after entering the code received by email; concerns only those who have accepted a proposal | At most 12 hours | Controller |
| thandosa_cliente | Stores the device used to access the client panel, so that credentials are requested only once per device. It contains a random code, of which the Controller keeps only the fingerprint. It concerns only those who have received a proposal and is removed with the “Sign out of this device” command | 400 days, renewed on each access | Controller |
| thandosa_lingua_pannello | Stores the language in which the client panel is consulted | 365 days | Controller |
| thandosa:chat | Records that a conversation has been started in the website chat from the browser, in order to show replies not yet read. It is browser storage and contains a mere indicator, not the messages | For as long as the conversation exists; it is removed automatically when the conversation no longer exists or when the website's data are deleted from the browser | Controller |
| pannello:suono | Records whether the notification sound is switched on or off; concerns only Thandosa's staff and is browser storage | Until it is changed or the website's data are deleted from the browser | Controller |
The NEXT_LOCALE cookie is created only where the user consults the website in a language other than that set in the browser, that is, where the language has been expressly chosen. Where the browser is set to Italian and the website is consulted in Italian, the website stores no information.
Session and access cookies cannot be read by programs running in the page, are transmitted only over encrypted connections, and the Controller's database does not contain their value but only its fingerprint.
4 Exemption from consent
Abschnitt aktualisiert amUnder article 122 of the Italian Personal Data Protection Code, consent is not required for storing information or accessing it where this is strictly necessary to provide the service expressly requested by the user. The Authority's Guidelines of 10 June 2021 include among such cases language settings, session management and information used to fill in a form. What is owed to the user is therefore this notice, and not a request for consent.
5 How to delete them
Abschnitt aktualisiert amThe user may delete the website's cookies and storage through the privacy settings of any browser. Deleting NEXT_LOCALE results in the browser's language being offered. The quote draft (thandosa.preventivo) may also be deleted from the quote itself, with the “Delete and start again” command. Deleting access cookies makes a new sign-in necessary.
6 Amendments
Abschnitt aktualisiert amShould the Controller introduce analytics tools, maps, videos hosted by third parties or other tools that store information on the user's device on behalf of third parties, this notice will be updated beforehand and consent will be requested, by means of “Accept” and “Reject” buttons of equal prominence and with the possibility of changing the choice at any time.
7 Contacts
Abschnitt aktualisiert amFor any request the user may write to the email address thandosayachting@gmail.com or to the certified email address (PEC) thandosasrl@pec.it. Further information on the processing of personal data is set out in the Privacy policy.