Privacy Policy & Cookie Information

Privacy Statement

In compliance with the obligations deriving from national legislation (Legislative Decree 30 June 2003 No. 196, Code for the protection of personal data) and European regulation (European Regulation for the protection of personal data No. 679/2016, GDPR) and subsequent changes, this website respects and protects the privacy of visitors and users, putting in place every effort possible and proportionate to not infringe the rights of users.

This privacy policy applies only to the online activities of this website and is valid for visitors/users of the site. It does not apply to information collected through channels other than this website. The purpose of this privacy statement is to provide maximum transparency regarding the information that the site collects and how it is used.

Legal Basis of Processing

This site processes data based on consent. With the use or consultation of this site, visitors and users explicitly approve this privacy statement and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service.

The provision of data and therefore the consent to the collection and processing of data is optional. The User can deny consent, and may revoke at any time a consent already provided. However, denying consent may make it impossible to provide certain services and the browsing experience on the site may be compromised.

Data Collected and Purposes

Like all websites, this site also makes use of log files in which information collected in an automated manner is kept during user visits. The information collected could be the following:

• Internet protocol (IP) address
• Type of browser and device parameters used to connect to the site
• Name of the Internet service provider (ISP)
• Date and time of visit
• Web page of origin of the visitor (referral) and exit
• Possibly the number of clicks

The above information is processed in an automated form and collected in an exclusively aggregated form in order to verify the correct functioning of the site, and for security reasons.

For security purposes (spam filters, firewalls, virus detection), the automatically recorded data may possibly also include personal data such as IP address, which could be used, in accordance with applicable laws, in order to block attempts at damage to the site itself or to cause damage to other users, or in any case harmful activities or constituting a crime. Such data are never used for the identification or profiling of the user, but only for the purposes of protection of the site and its users.

If the site allows the inclusion of comments, or in the case of specific services requested by the user, the site automatically detects and records some identification data of the user: name, surname, address, email address. These data are voluntarily provided by the user at the time of requesting service delivery. By inserting a comment or other information, the user expressly accepts the privacy policy.

The data received will be used exclusively for the provision of the services requested and for up to 10 years.

Place of Treatment

Cookies

As is customary on all websites, this site also uses cookies, small text files that allow you to store information on visitor preferences, to improve the functionality of the site, to simplify navigation by automating the procedures (e.g. Login, site language) and for the analysis of the use of the site.

Session cookies are essential in order to distinguish between connected users, and are useful to avoid that a required feature can be provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, i.e. until the browser is closed. No consent is required for them.

The functionality cookies used by the site are strictly necessary for the use of the site, particularly they are linked to an express request for functionality by the user (such as Login), for which no consent is required.

By using the site, the visitor expressly consents to the use of cookies.

Free Tours Tracking

For anonymous users, we use session cookies and browser fingerprinting to track the number of free tours generated (limited to 2 per user). This tracking combines:

• Session ID stored in browser cookies
• IP address
• Browser fingerprint (User-Agent and Accept-Language headers)

This data is automatically deleted after 24 hours and is used solely for managing the free tour limit feature.

Disabling Cookies

Cookies are connected to the browser used and can be disabled directly from the browser, thus refusing/withdrawing consent to the use of cookies. It should be noted that disabling cookies may prevent the correct use of some features of the site itself.

Third-Party Services

This site uses the following third-party services:

• Google Maps: For geolocation and mapping services
• Perplexity AI: For artificial intelligence-powered tour generation
• Brevo SMTP: For email delivery services
• Bootstrap & Font Awesome: For user interface components

Security Measures

This site processes the data of users in a lawful and correct manner, adopting the appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. Processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

User Rights

Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the User can, in accordance with the procedures and within the limits established by current legislation, exercise the following rights:

• Request confirmation of the existence of personal data concerning him/her (right of access)
• Know its origin
• Receive intelligible communication
• Have information about the logic, methods and purposes of the processing
• Request the updating, correction, integration, cancellation, transformation into anonymous form or blocking of data
• Object to the processing for legitimate reasons
• Request data portability

Data Controller

Changes to This Policy

This privacy policy may be updated from time to time. We will notify users of any significant changes by posting the new privacy policy on this page with an updated revision date.