1. Data Controller
The data controller pursuant to Regulation (EU) 2016/679 (GDPR) is:
Andrea Vincenti
Email: info@andreavincenti.com
Website: www.andreavincenti.com
Tour services may be provided in collaboration with Teseotur. The website is technically managed by Marit Srl, acting as data processor on behalf of the controller.
2. Personal data we collect
We collect personal data in the following ways:
2.1 Contact form
When you submit the contact/booking form on our website, we collect:
- Full name
- Email address
- Any other information you choose to provide in the message field (travel dates, preferences, group size, etc.)
2.2 Navigation data
Like all websites, our site automatically records certain technical data when you browse, including your IP address, browser type, operating system, referring URL, and pages visited. This data is used solely for statistical purposes and to ensure the proper functioning of the site.
2.3 Cookies
We use cookies as described in our Cookie Policy.
3. Purpose and legal basis for processing
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and organising tours | Pre-contractual measures / contract performance (Art. 6(1)(b) GDPR) |
| Website operation and security | Legitimate interest (Art. 6(1)(f) GDPR) |
| Analytics (if enabled) | Consent (Art. 6(1)(a) GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
4. How we use your data
Your personal data is used exclusively to respond to your travel enquiry, plan and organise your custom tour itinerary, and communicate with you regarding your booking. We do not use your data for unsolicited marketing and we do not sell it to third parties.
5. Data sharing and third parties
Your personal data may be shared with:
- Teseotur – our agency partner, solely for the purpose of organising and delivering tour services you have requested.
- Marit Srl – our technical provider, for website hosting and maintenance, acting as data processor under a data processing agreement.
- Netlify – form handling and website hosting provider. Netlify may process form submissions on our behalf. See Netlify's privacy policy at netlify.com/privacy.
We do not transfer your data outside the European Economic Area without adequate safeguards.
6. Data retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, and in any case no longer than:
- Enquiries that do not lead to a booking: 12 months from last contact.
- Bookings and completed tours: 10 years, as required by Italian civil and tax law.
7. Your rights under the GDPR
As a data subject, you have the following rights:
- Right of access (Art. 15): Obtain confirmation of whether we process your data and receive a copy.
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): Request deletion of your data where there is no legitimate reason for continued processing.
- Right to restriction (Art. 18): Request that we limit the processing of your data in certain circumstances.
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@andreavincenti.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
8. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data transmitted between your browser and our servers.
9. Changes to this policy
This Privacy Policy may be updated from time to time. Any changes will be published on this page with a revised date. We encourage you to check this page periodically.
10. Contact
Andrea Vincenti
info@andreavincenti.com