Privacy Policy

This is a machine translation provided for your convenience; in case of any discrepancy, the Italian version prevails.

This policy explains what data MareCalmo processes, why and with which tools. If you use the app to check the forecasts, no account is needed; personal data is processed only for the businesses that sign up for the Business area and for advertising.

Last updated: June 2026

1. Data controller

The data controller is:

Conte Tullio
P.IVA IT16329381004
Via Leonardo Mellano, 90 - 00125 Roma (RM)
Email: info@marecalmo.app

For any request relating to your data or to the exercise of your rights, you can write to the email address indicated above.

2. What data we process

Data that stays on your device

MareCalmo saves some preferences in your browser's localStorage, to remember your choices between one visit and the next. This data does not leave your device and is not sent to our servers:

mc.modality - the selected activity (swimming, relaxing, snorkeling, …);
mc.maxKm - the distance radius chosen in the filters;
mc.sortBy - the sorting criterion;
mc.coast - the selected coast;
mc.categories - the active place categories;
mc_last_pos - your last position (only if you enable geolocation), used to calculate the distance to the beaches.

Technical session cookies (business/admin area only)

When a business logs in to its panel, we use a technical cookie (mc_biz; mc_admin for administration) to keep the session active. These are httpOnly cookies, strictly necessary, not used for profiling and not requiring consent. They are removed at logout or upon expiry.

Geolocation

If you use the "Where should I go today?" feature, the browser may ask you for permission to access your position. The position is used only locally to sort the beaches by distance and remains stored in your browser for a limited time. You can deny or revoke this permission at any time from your browser settings.

3. Advertising: Google AdSense

To cover the costs of the service, MareCalmo shows ads through Google AdSense. Google and its partners may use cookies and similar identifiers to show ads based on your visits to this and other sites.

Google, as a third-party vendor, uses cookies to serve ads.
The use of advertising cookies allows Google and its partners to show you ads based on your visits.
You can opt out of personalised advertising by visiting Google Ads Settings.
More details on how Google uses data are available on the How Google uses information from sites or apps that use our services page and in Google's advertising policies.

We also use the Google Ads tag to measure the conversions of our advertising campaigns. This tag, also provided by Google, may set cookies (for example _gcl_au) and is subject to your advertising consent.

For users in the European Economic Area, the United Kingdom and Switzerland, before activating non-strictly-necessary cookies you are shown a consent message: personalised ads are loaded only if you agree. Technically, Google's tags are initialised in "consent denied" mode (Google Consent Mode) and do not write advertising cookies before your choice. You can change your choice at any time. See also our Cookie Policy.

4. Sea and weather data and external sources

The forecasts are processed from data provided by Open-Meteo (CC BY 4.0 licence) and from the cartography of OpenStreetMap. The interactive maps are served through OpenStreetMap tiles: by loading them, your IP address is technically visible to the relevant servers, as happens for any web resource.

5. Business area (business owners)

Coastal businesses (lidos, car parks, rentals, schools, restaurants…) can purchase a paid promotional space. This concerns only the business owners who choose to sign up: ordinary app users are not affected and do not create any account.

Data processed: email (for passwordless access via link and for service communications), name and category of the business, listing contents (contact details such as phone and WhatsApp, opening hours, description, photos, any offers), subscription data (plan, status, expiry) and the transaction identifier provided by PayPal. We do not process or store your card or account details: the payment is handled entirely on PayPal's systems.

Purposes and legal bases:

provide the promotion service and manage the subscription - performance of a contract (Art. 6.1.b GDPR);
send service emails (access, moderation outcomes, expiries) - performance of the contract;
comply with tax and accounting obligations on payments - legal obligation (Art. 6.1.c);
prevent abuse and ensure the security of the service - legitimate interest (Art. 6.1.f).

The contents you publish are publicly visible in the app, always labelled as "Promoted" and distinct from Google ads. Sponsored blocks do not influence the "Where should I go today?" suggestion, which is based exclusively on sea conditions.

Processors and external providers

To deliver the service we rely on providers that process data on our behalf or as independent controllers:

PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.) - payments and subscriptions. (PayPal privacy)
Resend (Resend, Inc., USA) - sending of transactional emails. (Resend privacy)
Hosting/infrastructure at our provider, for the technical storage of the service data.

Transfers outside the European Union

Some providers (e.g. Resend, and part of Google's/PayPal's infrastructure) may process data also in the United States. In these cases the transfer takes place on the basis of the safeguards provided for by the GDPR - Standard Contractual Clauses of the European Commission and/or membership of the EU-US Data Privacy Framework - which ensure an adequate level of protection.

6. How long we keep the data

On-device preferences (localStorage): they remain until you clear the site's data from your browser.
Business account and contents: for the entire duration of the subscription. After expiry, the listing is no longer visible and the contents (text, photos, offers) are removed within a reasonable period, unless you renew.
Billing and payment data: kept for 10 years as required by Italian tax and accounting regulations.
Technical and security logs: for the time necessary to ensure the security of the service, then deleted or anonymised.

7. Your rights

Those who use the app to check the forecasts do not have an account: we do not keep data attributable to you and you can delete your local preferences by clearing the site's data from your browser. For the data processed by Google for advertising purposes, see Google's Privacy Policy.

If you are a registered business, under Articles 15-22 of the GDPR you have the right to:

access your data and obtain a copy of it;
rectification of inaccurate or incomplete data;
erasure ("right to be forgotten"), within the limits of legal obligations;
restriction of and objection to the processing;
portability of the data provided, in a structured format.

To exercise them, write to info@marecalmo.app: we will reply without undue delay. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) if you believe that the processing infringes the regulations.

8. Changes to this policy

We may update this page to reflect changes in the service or in third-party tools. The date at the top indicates the last revision.