Privacy Policy

Introduction

Explore Italy (“us”, “we”, or “our”) is committed to protecting the privacy of its users (“user”, “you”, or “your”). This Privacy Policy is intended to inform you about how we collect, use, disclose, and protect your personal data when you visit our website exploreitaly.net (“Site”) and use our services.

This Privacy Policy has been drafted in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

Data Controller

The Data Controller of your personal data is Explore Italy, with registered office at [full address] and contactable at the email address [email address].

Personal Data Collected

We collect the following personal data:

Browsing data: while browsing the Site, we automatically collect certain data, including:
- IP address
- Browser type and operating system used
- Pages visited
- Date and time of access
Data provided voluntarily by the user: we collect the personal data that you provide to us voluntarily through contact forms, newsletter subscription, or other methods of interaction with the Site, including:
- Name and surname
- Email address
- Telephone number
Cookies: we use cookies and similar technologies to collect information about your browsing and preferences. For more information, please see our Cookie Policy.

Purposes of Processing

We process your personal data for the following purposes:

Responding to your requests: we use your contact details to respond to your questions, requests for information or assistance.
Sending newsletters and commercial communications: with your explicit consent, we will use your email address to send you our newsletter and other commercial communications relating to our services.
Profiling: with your explicit consent, we may use your browsing data and interaction with the Site to create user profiles and offer you personalized content and offers.
Statistical analysis: we use Google Analytics to collect aggregated and anonymous data on the use of the Site, in order to improve our services and user experience.

Legal Basis for Processing

The legal basis for processing your personal data varies depending on the purpose of the processing:

Explicit consent: for sending newsletters, commercial communications and profiling activities, the legal basis is your explicit consent.
Performance of a contract: to respond to your requests and provide our services, the legal basis is the performance of a contract or pre-contractual measures.
Legal obligation: we may be required to process your personal data to comply with legal obligations.
Legitimate interest: we may process your personal data to pursue our legitimate interests, provided that such interests do not override your fundamental rights and freedoms.

Recipients of Personal Data

Your personal data may be communicated to:

Authorized personnel of Explore Italy: our authorized employees and collaborators will only have access to your personal data to the extent necessary to perform their duties and in accordance with this Privacy Policy.
Third-party service providers: we may share your personal data with third-party service providers who act on our behalf as Data Processors, such as:
- Email marketing platforms (e.g. Mailchimp, Brevo)
- IT service providers
Third parties for legal obligations: we may be required to disclose your personal data to third parties in the event of legal obligations, regulations, court orders, or requests from competent authorities.
Third parties to protect the rights of Explore Italy: we may disclose your personal data to third parties to enforce or defend our rights, our property, or the safety of ourselves, our users, or others.

Transfer of Data outside the EU

Your personal data may be transferred to and processed in countries outside the European Union. In such cases, we will ensure that the transfer is carried out in accordance with applicable law and that appropriate security measures are taken to protect your personal data.

Data Retention Period

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected and in any case in accordance with our legal obligations.

User Rights

As a data subject, you have the following rights in relation to your personal data:

Right of access: you have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the data and information relating to the processing.
Right to rectification: you have the right to obtain the rectification of inaccurate personal data concerning you without undue delay.
Right to erasure (“right to be forgotten”): you have the right to obtain the erasure of personal data concerning you without undue delay, in certain circumstances, such as when the data are no longer necessary in relation to the purposes for which they were collected or processed, or when you have withdrawn your consent.
Right to restriction of processing: you have the right to obtain restriction of processing, in certain circumstances, such as when you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of that data.
Right to object to processing: you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.
Right to data portability: you have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, in certain circumstances.

To exercise your rights, you can contact us at [email address].

Security Measures

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. The security measures we use include, but are not limited to: