Privacy Policy

Last updated: 5 October 2026

This Privacy Policy explains how ICON X collects and uses personal data through icon-x.org, in accordance with the EU General Data Protection Regulation (GDPR) and Italian data protection law.

Data controller

THE YACHT EXPEDITION COMPANY LIMITED
Email: [privacy contact email]

What data we collect and why

Newsletter subscription

When you join our mailing list, we collect your email address to send you news about ICON X, our yachts and upcoming expeditions.

  • Legal basis: your consent (Article 6(1)(a) GDPR).
  • Retention: until you unsubscribe. You can unsubscribe at any time through the link in every email or by writing to us.
Contact by email

When you write to us, for example at the addresses listed on the site, we process your name, email address and any information you choose to share, in order to reply and, where relevant, provide information about our expeditions and charters.

  • Legal basis: responding to your request and taking steps before a possible contract (Article 6(1)(b) GDPR), and our legitimate interest in handling communications (Article 6(1)(f) GDPR).
  • Retention: for as long as needed to handle your request, and no longer than [24] months after our last exchange, unless a contractual relationship follows.
Website browsing and analytics

When you visit the site, our hosting provider processes technical data, such as your IP address, browser type and the pages requested, to deliver the site and keep it secure. These data are kept only for the time strictly necessary.

With your consent, we also use Google Analytics 4 to understand how the site is used. Details on cookies, analytics and how we record your consent are in our Cookie Policy.

How we process your data

Your data are processed electronically, by authorised personnel only, with appropriate technical and organisational security measures. We do not use your data for automated decision-making or profiling.

Who receives your data

We share data only with service providers that process it on our behalf, under data processing agreements:

  • Webflow, Inc.: website hosting and form management
  • Google Ireland Limited / Google LLC: analytics (only with consent) and Google Workspace services
  • [Newsletter provider, e.g. Mailchimp / Brevo]: sending the newsletter
  • [Email provider]: email communications

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

Transfers outside the EU

Some of these providers may process data outside the European Economic Area, in particular in the United States. In these cases, transfers rely on the EU–U.S. Data Privacy Framework, where the provider is certified, or on the European Commission's Standard Contractual Clauses.

Your rights

Under Articles 15–22 GDPR, you have the right to:

  • access your personal data
  • have it corrected or deleted
  • restrict or object to its processing
  • receive it in a portable format
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal

To exercise your rights, write to alina.oenning@icon-x.org. We will reply within one month.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

Minors

This site is not intended for people under 16. We do not knowingly collect personal data from minors.

Changes to this policy

We may update this Privacy Policy from time to time. The date of the latest version is always shown at the top of this page.

‍